Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: 3euBLX1xTp5wIEBwlPuXqTU/T09T8q0y4qjLzopphFY=
Subject key identifier: C2:A7:76:8D:47:03:EE:1A:2C:70:18:59:E9:EB:43:2E:74:9B:70:9C
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 0199FDD93715FB63F17CC6E4427F3ACD351B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 0CE4
Signing time: Sun 19 Oct 2025 19:01:35 +0000
Manifest this update: Sun 19 Oct 2025 19:01:35 +0000
Manifest next update: Mon 20 Oct 2025 19:01:35 +0000
Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: hPUr1+FkyBVM6ioielaFMOX0D0eCookbfPhSNqrNdts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:37:15:fb:63:f1:7c:c6:e4:42:7f:3a:cd:35:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Oct 19 19:01:35 2025 GMT
Not After : Oct 20 19:01:35 2025 GMT
Subject: CN=c2a7768d4703ee1a2c701859e9eb432e749b709c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:80:78:0a:e4:dd:90:28:64:87:a4:73:97:
cc:00:63:bc:a2:f6:28:87:80:b1:ad:1d:56:f0:11:
e0:44:a4:5c:4c:ee:36:a8:30:77:09:68:21:66:e4:
cc:ff:84:d5:0f:36:b2:a4:bd:97:27:9d:3e:fd:6d:
c3:3d:d7:2d:8f:a3:f1:56:49:83:26:53:38:36:81:
36:00:fc:ac:80:15:12:82:d1:5b:ee:3c:b7:2b:0d:
d2:fd:54:ec:1a:13:3f:de:82:af:2f:8c:ed:32:25:
9d:51:26:19:af:52:8c:7b:59:12:24:bd:27:63:6f:
31:7f:a2:b7:d0:88:3b:b3:a8:2a:97:14:63:14:e2:
2b:65:fd:b2:00:c7:b7:19:b2:a4:50:54:40:b1:2e:
56:3d:c4:26:31:a8:88:4d:72:21:54:bf:89:94:76:
fe:b2:89:99:fc:ad:8f:a3:84:15:18:e4:ec:45:2b:
a8:c4:90:de:f4:3d:89:c1:f5:5c:b3:11:02:3a:da:
fd:41:4e:c0:bc:12:f3:07:ec:ca:8a:67:14:83:c3:
ad:4e:58:a0:f6:d3:b0:eb:14:12:58:4a:25:1f:26:
e7:d3:c8:c1:b6:1c:c9:75:c4:1e:78:5f:a8:a2:f4:
27:1a:05:37:2f:02:22:34:b7:df:b1:2f:a6:74:b1:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A7:76:8D:47:03:EE:1A:2C:70:18:59:E9:EB:43:2E:74:9B:70:9C
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c0:e1:b0:99:4b:16:da:96:0d:0f:56:db:f6:75:6e:2e:3c:
df:5e:98:92:e0:f3:96:84:11:7f:27:3a:14:8c:6d:d0:4f:3a:
5f:ae:b4:d6:96:2b:c9:9a:b0:71:65:f3:35:47:f4:3e:af:de:
77:a1:15:b7:c8:ba:60:a8:87:82:5e:41:63:e0:a3:6e:32:e7:
09:2e:25:30:6f:60:bb:8c:93:b3:65:b9:b0:ea:ce:d9:f6:76:
bd:0f:c4:85:3d:82:e3:c9:a3:13:d5:32:fe:79:84:db:07:c9:
c3:16:bb:8f:82:f3:1a:52:f1:e5:b2:94:c5:7d:20:ae:5b:85:
18:cb:61:4a:61:b2:23:78:d4:e0:1c:6a:e4:6b:82:ab:0d:82:
32:92:58:99:33:2d:83:5e:1f:92:36:7e:c0:71:03:32:92:f1:
93:6b:99:f7:6d:6e:12:c0:fc:69:27:6e:86:cc:40:69:a7:8f:
a1:e0:62:dc:32:68:3c:3b:b1:90:f4:a7:d3:0e:7e:81:7a:6f:
a5:47:f8:bc:b1:8f:ac:2d:f9:32:92:30:cf:23:4d:99:3b:24:
41:3a:13:0a:27:20:32:2e:54:67:f2:2f:1c:01:30:7d:ef:a0:
09:28:1c:11:4a:58:a9:16:77:81:bd:aa:4a:56:09:91:f1:dc:
99:be:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:33 2025 by rpki-client