Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: 7YChTNqw9f4akfWLAXSWPAlS1bKWhbFRIOsfmccta3s=
Subject key identifier: 32:67:B6:82:AE:AC:FD:BB:59:AC:2D:D7:F7:AF:3A:24:39:80:FE:A3
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 0199FDD93511CBBAC6581192901A071C905B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 1677
Signing time: Sun 19 Oct 2025 19:01:34 +0000
Manifest this update: Sun 19 Oct 2025 19:01:34 +0000
Manifest next update: Mon 20 Oct 2025 19:01:34 +0000
Files and hashes: 1: hH6hMaSyonrhQA9h_vP1HTqln7M.roa (hash: 8QJDFdFinb7s3U9xb08fJBm7sr1In5Pe6TKE9Vk8YEA=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: sQrOVB+PJHkwPPz0UHvai5pZ5VCw+kRmoN6ikFuT/tI=)
3: xZRwQEVBqhCo3g2OnfWg1phYcj0.roa (hash: Up0oMZDKtVNJTjmYE39xr0VdPFglYOYmh22V1+hmiHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:35:11:cb:ba:c6:58:11:92:90:1a:07:1c:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Oct 19 19:01:34 2025 GMT
Not After : Oct 20 19:01:34 2025 GMT
Subject: CN=3267b682aeacfdbb59ac2dd7f7af3a243980fea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:74:8a:d3:cf:7e:62:78:e0:f7:7e:f5:0c:
eb:b7:c5:94:3a:6e:88:6c:da:6a:49:ef:cc:b4:5d:
15:bd:ab:1a:60:86:f6:b9:5f:d6:86:a3:d3:09:b1:
5d:4d:d6:45:97:c7:79:b0:61:35:2e:8a:2f:ac:41:
35:26:25:89:57:11:c9:cb:72:51:aa:90:47:13:53:
89:d2:62:49:27:08:16:48:1e:0e:8d:0a:aa:df:dd:
ae:3d:ce:81:0c:f2:e5:1e:07:63:ff:b5:ec:6a:be:
90:d7:4c:ee:af:e4:97:10:e5:5a:8b:2a:f2:94:59:
79:1e:74:09:dd:59:ae:49:b6:34:c6:cb:c0:b2:c5:
ba:20:50:82:7c:f3:00:5f:5d:d2:44:78:1d:a0:43:
dc:f4:da:c5:d5:83:0c:dd:27:4c:6d:b4:2e:b8:3d:
69:59:f3:e7:be:4c:e5:aa:44:85:b5:e9:57:d6:b8:
f4:89:e0:75:74:ce:e6:22:80:06:bf:4b:ca:d7:86:
29:28:4b:13:f8:02:87:02:4c:da:6c:d9:8b:73:a2:
17:83:2a:48:03:87:2e:3e:74:11:96:2f:0a:f2:1c:
b7:97:2c:1b:82:5d:53:e7:71:b4:27:dd:9e:df:3e:
b7:58:1c:52:28:b9:85:84:5c:61:1b:b5:7d:10:b8:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:B6:82:AE:AC:FD:BB:59:AC:2D:D7:F7:AF:3A:24:39:80:FE:A3
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ff:6f:4a:8a:46:4a:6c:3e:fc:f8:63:c2:d8:df:cf:85:21:
98:fa:e9:7e:0d:45:36:84:a5:b8:54:22:27:19:39:f3:f4:a9:
fe:e8:ee:bf:51:68:02:46:de:ac:64:c6:76:d3:33:79:d7:95:
41:a2:23:a8:a0:4b:42:60:3c:aa:11:70:2a:da:83:3c:75:88:
d8:c1:e6:c2:a2:68:c6:08:5c:f5:c5:bd:36:fc:35:e0:8a:e6:
40:d6:f2:6d:61:e6:63:c9:66:50:4c:3f:51:60:4b:86:cd:82:
46:21:82:98:61:92:69:80:af:5d:a8:83:ce:d1:c4:2a:23:f5:
c6:aa:30:19:cf:e0:5d:a5:43:ee:cd:f7:5c:47:8a:15:50:04:
76:a2:cd:85:6d:f0:52:9d:d7:4c:3e:2e:cf:94:64:19:ef:7b:
33:45:63:36:af:6e:71:67:d7:a8:9f:7f:9d:18:8c:c8:6e:e0:
89:ae:2e:12:b7:76:fc:e5:96:0f:cc:d0:8b:69:02:b4:a9:e8:
d1:40:66:e5:56:f0:2d:54:c8:06:b6:06:d1:47:11:38:a3:b6:
c3:af:5d:ee:6d:a9:0c:cc:28:55:29:b8:1d:85:d3:36:70:4b:
92:17:5b:5f:f7:38:83:4d:74:f6:35:16:a1:ba:44:9b:11:dc:
df:c6:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:01 2025 by rpki-client