Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: dKQdoo216IEUmAKSJ1Fzb5kHs7IVd5215JdaNns80Kk=
Subject key identifier: B3:12:B2:2A:11:EE:58:08:3B:0E:83:72:07:A2:91:22:03:0D:D7:CC
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 0199FCC69D3D4640A5EADD7389CB4D32A9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 14E8
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: dX70ap0ffv2FBe6b9Bt26afmx5k.roa (hash: cA6YfbXERPxQEeXnO3dLN4qw3GbtwfitkG8Nn52ipuk=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: p8+3kyPeInNwg1p4lbasT+fQavZ66Zlrk/L/LjF8YL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9d:3d:46:40:a5:ea:dd:73:89:cb:4d:32:a9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=b312b22a11ee58083b0e837207a29122030dd7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:fa:f3:f7:aa:14:46:2c:23:f8:3e:f8:9f:
64:5a:bc:fd:1d:7e:03:3d:a1:cd:fe:bf:c3:4b:67:
04:9a:b0:93:5d:a6:8e:d9:a5:6c:59:22:bc:52:ad:
15:27:21:1b:ad:11:96:41:d3:0f:89:29:e5:88:b9:
52:4a:c7:46:12:c8:a6:12:a2:fa:ba:db:7b:16:65:
f1:4a:b2:87:aa:27:5c:83:56:66:a3:8e:8f:c7:4d:
0f:55:26:e1:58:dc:9e:98:0e:de:3c:e1:ad:d3:85:
8f:65:ac:72:ce:6e:bc:aa:68:00:a0:06:11:09:bd:
f2:18:7b:0b:c4:6a:da:ff:dc:9a:44:83:5d:18:78:
47:86:00:8e:7a:24:71:1d:8d:52:ef:82:f8:1f:90:
bb:d3:97:0a:f1:c2:d4:96:e7:4e:71:43:e9:13:86:
8b:c2:9b:17:11:79:c0:23:2a:55:9a:16:6c:80:b2:
42:1a:e7:78:65:24:79:5c:d0:1c:6a:4b:66:cc:ca:
f4:97:4e:6a:78:d9:70:39:45:61:7d:ed:b1:39:91:
f1:26:ab:32:62:73:35:1f:87:83:6a:9f:d9:4f:85:
33:92:2f:76:64:13:eb:0c:fd:85:81:16:d5:fb:46:
43:89:f9:27:c0:72:05:af:2a:cf:00:bb:2d:1a:1f:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:B2:2A:11:EE:58:08:3B:0E:83:72:07:A2:91:22:03:0D:D7:CC
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4f:57:a1:c5:31:d0:23:e1:86:6f:a8:54:3b:04:51:15:bf:
65:cc:59:fa:95:92:1a:a8:ee:cf:91:84:e3:68:59:95:06:04:
52:a3:4f:93:4c:eb:61:c7:c0:c9:be:d8:09:2a:fa:1f:44:e6:
1b:39:16:63:ce:e5:00:fd:97:7a:7e:14:84:fc:8a:09:40:2f:
41:4e:6a:c8:08:64:77:a9:1f:c4:2c:0b:fe:62:b4:17:77:f7:
bb:7b:00:6c:0f:9e:73:e3:e2:40:bf:30:da:33:7b:53:92:fb:
d1:1c:a9:d8:50:8b:98:5b:1f:04:a1:1c:94:a2:ed:a6:ba:5a:
6a:b4:5f:16:6f:68:68:86:f2:8f:64:13:77:0c:03:14:1d:53:
bd:7a:52:23:b9:10:d7:74:55:01:ae:2e:3f:22:b2:74:2d:6a:
a0:6a:33:14:a4:a6:26:6a:28:76:13:4a:aa:08:7d:49:fe:35:
67:f9:ea:e5:39:ab:58:29:3f:85:61:56:99:79:c7:29:eb:9b:
ab:66:96:36:bc:b7:20:bf:d7:c4:09:be:8b:ba:6e:a9:0c:e0:
d9:3f:2b:e6:a1:53:04:4d:a4:de:89:6e:7f:b5:c2:53:eb:cf:
e0:ea:f6:69:eb:47:77:fd:87:11:cc:d2:e1:91:b7:41:3f:66:
89:9a:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:45 2025 by rpki-client