Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: VlpHegO5DbBKF0D5HvaqdS6A8ZnlEVVuJauoM5ZYQB4=
Subject key identifier: 2C:90:0E:0D:10:16:A9:1E:D2:94:3A:B3:7C:B3:D6:DE:1E:60:2F:ED
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 0199FCFD9CCAA7FE3BFCC4C7D04756D1ED3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 07B8
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: m1HtN+Gpmc4yGWhdE+QDTBpHmfoFKmatH+aWieIGcJg=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9c:ca:a7:fe:3b:fc:c4:c7:d0:47:56:d1:ed:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=2c900e0d1016a91ed2943ab37cb3d6de1e602fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:e9:22:ff:c8:5f:42:17:ba:f1:99:12:1d:
5a:23:c7:98:64:c5:f9:c5:38:64:82:4a:fc:f2:00:
26:bd:e6:06:ba:90:80:3f:c5:28:28:e3:1f:23:21:
b7:1c:42:cc:67:f0:c6:e3:17:4c:c0:4f:38:b3:30:
ec:ed:d0:22:45:36:d4:f2:da:dd:c4:fc:af:1d:75:
86:93:5a:b0:da:11:22:2a:00:a0:8f:da:27:be:7b:
25:1a:c8:27:3b:88:d6:84:24:c2:a8:d2:3b:ec:7d:
40:19:6c:1d:6e:a2:d2:fd:b0:df:78:d5:02:c3:b2:
4e:78:96:49:02:af:d0:c1:e7:1f:2b:03:9d:db:ac:
4d:d2:49:5b:8a:bb:63:6e:7c:06:d4:c7:89:6f:cb:
8e:6f:93:43:c0:d1:98:c0:6b:0e:b8:a5:8e:c0:49:
0c:88:93:d1:11:10:92:f8:d3:c4:6e:e8:9c:c8:4f:
dd:6a:cc:af:ff:bf:53:ae:38:f7:ca:e6:4e:3e:75:
b6:cf:6d:c9:03:19:5d:ab:51:60:20:02:75:97:1e:
6a:d0:c8:eb:8c:86:93:67:6c:a5:ee:99:e8:b2:63:
cc:ef:cc:58:5e:84:3a:19:32:25:72:c1:5f:bc:37:
25:39:1b:f1:05:a4:cb:3a:82:2f:68:f0:43:cb:4d:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:0E:0D:10:16:A9:1E:D2:94:3A:B3:7C:B3:D6:DE:1E:60:2F:ED
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9b:3c:5a:cc:4c:e6:0b:a8:37:27:33:0f:1f:0d:3f:d8:c7:
72:9d:c5:7b:cc:49:ce:20:04:fa:a8:3e:42:4e:e0:f7:86:84:
bd:33:b0:b9:93:4c:54:ed:b6:19:84:1a:6d:90:9c:ca:5a:f4:
76:1b:c2:43:bc:d2:01:34:08:30:87:12:2a:c8:44:08:e8:aa:
2a:69:d4:08:1a:3a:84:40:41:6e:31:38:6a:16:4c:1b:c3:7c:
c2:a8:57:05:6b:de:07:4c:6c:3e:2c:a8:01:7b:53:da:d4:83:
e8:a9:14:21:64:79:10:dc:5e:bc:b9:9b:4f:96:21:e0:a2:89:
22:c0:6e:a2:98:16:c0:17:c5:41:ab:cd:e6:fb:05:67:81:38:
e8:8d:71:2b:9d:c1:84:c4:58:32:7c:9c:d1:05:9c:56:4e:e6:
be:fd:b5:48:88:9e:54:01:da:72:70:33:bc:cc:0d:53:13:b0:
0d:23:5b:18:61:8d:59:16:8e:6d:7c:6c:9f:8c:8a:0b:38:a9:
5a:e4:04:df:0b:a6:69:2f:bc:54:1b:71:97:43:b3:83:b7:c7:
51:21:3d:88:71:4d:d9:60:9e:11:7b:62:cc:5d:c4:58:db:8c:
6f:d7:b3:c5:e7:1e:be:71:1a:4d:d9:c9:bc:e0:12:de:2f:85:
28:c3:36:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:34 2025 by rpki-client