
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: sDQY1VQF3hmrRoQh6DvjEfJbgzi3ny7cLqoY/7XqutM=
Subject key identifier: 18:1F:19:91:77:32:0A:4D:BB:9E:B1:69:22:DA:76:4F:0A:75:A3:61
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 01988BEA24298A16117A0A17FBD3022133CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 13CA
Signing time: Fri 08 Aug 2025 23:00:34 +0000
Manifest this update: Fri 08 Aug 2025 23:00:34 +0000
Manifest next update: Sat 09 Aug 2025 23:00:34 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: JVbfViAzXYOiy52LR3RcKieDgdEIbCBSitIui2ZExM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:24:29:8a:16:11:7a:0a:17:fb:d3:02:21:33:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Aug 8 23:00:34 2025 GMT
Not After : Aug 9 23:00:34 2025 GMT
Subject: CN=181f199177320a4dbb9eb16922da764f0a75a361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:75:17:cd:06:ae:dd:d8:98:e2:8a:c6:e4:
75:e5:a4:92:73:99:2c:24:4d:ca:f8:a5:39:56:08:
b0:aa:cf:c8:7a:18:b7:4b:b5:2c:96:80:3b:c2:5c:
af:80:8b:dc:ca:22:cb:f3:a9:fe:3c:20:51:0d:6f:
0a:4e:c4:96:91:0e:5d:52:24:40:2f:2d:f3:85:99:
66:82:3f:9f:5e:b4:f9:db:2e:3d:39:b6:9e:a4:c8:
2e:65:f6:ff:92:bd:40:d2:10:98:5b:e9:e9:e7:f6:
f1:22:d0:63:d0:29:75:b6:11:67:2c:a9:79:51:c6:
6e:85:b4:e3:39:24:1e:d3:09:c4:0c:c8:1e:35:16:
78:6e:8c:6d:80:7d:b8:ed:32:57:f0:54:30:b2:2c:
95:01:de:3e:a0:11:24:02:de:17:92:3d:99:01:ba:
1d:22:20:ee:91:68:2f:d9:ca:2e:5f:a2:3d:69:01:
24:03:d7:f1:4a:73:63:b4:f9:a2:89:df:f0:9b:83:
e5:64:2f:72:47:2a:12:3e:d1:87:e4:cb:89:92:41:
7b:bb:9f:ec:f7:85:98:9c:0a:b0:d3:37:75:5a:b2:
83:0c:79:c9:0b:c6:fd:4f:97:8e:45:ed:c4:a8:59:
cc:ae:99:30:00:7b:02:70:b1:89:5d:e7:b6:05:c8:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1F:19:91:77:32:0A:4D:BB:9E:B1:69:22:DA:76:4F:0A:75:A3:61
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7d:13:db:52:b6:48:9e:43:4c:13:85:ee:b5:d4:7f:c8:bd:
34:31:30:61:58:f1:c9:ef:1c:7a:bc:70:93:e5:b9:3c:c4:f9:
f0:6f:0c:78:b7:2e:21:a9:2b:ee:a8:90:ea:ba:aa:d7:ad:fe:
9a:29:7e:c7:60:79:90:31:90:f2:28:68:ac:85:ea:ac:1a:fb:
b5:83:b2:b4:b9:cf:04:43:60:5e:7a:fe:57:b8:d3:b4:2c:2b:
fa:1c:af:79:ac:f4:3f:f2:fc:8f:3c:60:3a:42:f1:39:9a:da:
3c:3e:43:3c:15:14:18:f9:29:fe:d3:e9:93:74:26:a3:0a:d1:
f2:0b:97:16:4c:e0:62:e0:5a:07:bd:fa:fa:b4:70:0e:d0:22:
a9:8b:48:44:bc:98:b5:37:c3:dd:03:be:d2:e1:29:2f:38:bd:
fe:42:8f:23:36:e4:54:d0:bd:2e:84:46:b2:ad:24:48:92:21:
8e:f8:0f:4e:29:bd:dd:e8:50:5b:49:f9:9a:fd:2d:c2:5e:1e:
a6:94:b6:08:34:60:91:cb:3d:5f:29:b9:e8:24:23:27:7e:e0:
ac:7d:ea:7d:50:5f:98:e2:b3:04:12:d5:a2:6c:38:c2:01:c0:
88:7c:bb:37:1a:9f:1b:d1:d0:36:6c:bf:53:b8:cb:7c:05:88:
03:cd:6f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:53:19 2025 by rpki-client