Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File: m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier: l8mbS7aOmePKCA44CbIGMvpg8oB2WJR7VNwBWuZua0Y=
Subject key identifier: 4D:4E:8A:F7:0D:63:96:9B:BA:8F:DA:7C:8B:FD:68:E4:F0:77:A4:2C
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial: 0199FEB50AC541A34947CE9983B3A2D23939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number: 127A
Signing time: Sun 19 Oct 2025 23:01:41 +0000
Manifest this update: Sun 19 Oct 2025 23:01:41 +0000
Manifest next update: Mon 20 Oct 2025 23:01:41 +0000
Files and hashes: 1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=)
2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: TOxcAoqGMhKfB6B6Zna4wReFfxgMqzU3vOzDCu/2e80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:0a:c5:41:a3:49:47:ce:99:83:b3:a2:d2:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Validity
Not Before: Oct 19 23:01:41 2025 GMT
Not After : Oct 20 23:01:41 2025 GMT
Subject: CN=4d4e8af70d63969bba8fda7c8bfd68e4f077a42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:38:77:28:0c:b7:c0:67:49:67:32:e2:fb:
cb:7a:92:3d:08:fd:cd:e9:b3:42:7d:d6:1c:48:76:
93:d1:d3:9b:ac:51:95:33:4c:e3:4a:35:6b:dc:ac:
f6:7d:5f:45:12:bd:7a:da:e2:0b:69:ec:8b:33:d3:
d6:64:27:97:2b:23:a3:c0:5a:64:c7:3c:2a:13:79:
2a:48:56:5e:f2:aa:a8:ee:f9:ff:be:0e:47:45:b0:
ad:0b:0b:a4:f8:54:5a:bd:cf:59:95:c2:e6:aa:9d:
4c:e0:1b:4e:d0:eb:2a:96:c8:f0:80:3c:5f:a0:d2:
cc:8d:a5:3d:06:34:6d:8f:49:b3:47:b8:0e:04:8c:
ae:bc:f4:f0:45:40:50:a6:d7:e1:60:5e:c6:5c:b3:
21:f5:e6:0c:58:03:a4:7b:0b:61:7c:99:64:2a:3f:
1b:13:93:a0:4b:98:a3:89:13:30:e0:4d:f1:ff:d2:
23:ae:75:14:a1:34:a1:4b:8c:00:a0:8c:79:47:9e:
44:bf:6b:f4:53:89:c6:61:f9:ad:cf:7a:ae:ad:ee:
aa:8b:63:2e:49:18:0f:fe:df:84:46:23:04:46:49:
d9:59:39:b4:37:af:82:72:69:7b:f2:b1:53:fd:20:
59:81:5f:6e:fc:39:56:5e:76:10:f3:51:8e:a6:1a:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:8A:F7:0D:63:96:9B:BA:8F:DA:7C:8B:FD:68:E4:F0:77:A4:2C
X509v3 Authority Key Identifier:
keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2d:aa:e5:85:d2:fd:e5:24:d6:21:b7:52:00:97:56:62:34:
1a:7a:63:38:db:31:6a:82:65:a6:ba:77:46:5d:cf:c4:92:ba:
8b:b0:58:f1:c9:b0:0f:fa:82:a8:83:ee:98:0f:4b:b5:a5:50:
fe:4e:60:9a:3c:76:e5:fe:ad:43:76:3d:55:85:4c:7b:32:3b:
76:b9:b2:3f:49:e9:95:ba:a3:c2:6e:1e:7d:b0:af:51:75:26:
7f:a2:d6:78:d4:4c:76:ea:15:fe:2f:21:2a:d5:af:a2:b0:00:
12:82:46:70:31:43:e3:3c:b4:5d:cb:7a:1e:78:d7:38:aa:a2:
14:0b:fb:91:79:18:98:50:5a:36:0f:da:1c:f0:a4:46:91:f7:
ab:0a:b6:51:b8:2d:d1:78:71:9f:85:b7:a1:fa:48:9d:9f:77:
21:99:c3:49:2f:06:8d:c0:f6:53:e9:b4:7b:da:3a:9b:c3:7a:
ff:21:fe:9a:54:7b:16:70:e7:f8:af:1e:e2:bd:24:39:ed:81:
7e:b3:17:15:e2:c8:5d:b2:88:81:b4:74:2b:fa:7c:ec:83:fd:
2c:a8:b4:46:7b:65:c0:6d:ac:c7:0d:2e:a2:fc:d2:3e:7f:95:
92:73:92:d3:bf:26:c7:36:f6:6d:46:04:8d:84:9d:9c:5a:69:
a2:e0:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:39 2025 by rpki-client