Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: KGmz/S6S7iLiXhf922ao6HMcU63xbi6pW9zbRyWeOOA=
Subject key identifier: B1:62:BE:3D:CB:C2:E4:B6:0E:31:DB:B5:97:31:72:74:A3:CE:25:B1
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 0199FFFEBC15CF4DF60E5C877AF62515FAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 1675
Signing time: Mon 20 Oct 2025 05:01:48 +0000
Manifest this update: Mon 20 Oct 2025 05:01:48 +0000
Manifest next update: Tue 21 Oct 2025 05:01:48 +0000
Files and hashes: 1: 7Q18JYmAuxaMa6IHufbofG2Nif4.roa (hash: SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=)
2: eehHZCCtBF4ofvtvmkP_R--u6i0.roa (hash: Qv+/+I4mInj8ZQpbVci07W/0Cj+7zt+KBmz4hdMjJLU=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: GnBSK8RKb+5XswYSxY7VjC2FuvLzqSLarHN/xRerkVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:bc:15:cf:4d:f6:0e:5c:87:7a:f6:25:15:fa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Oct 20 05:01:48 2025 GMT
Not After : Oct 21 05:01:48 2025 GMT
Subject: CN=b162be3dcbc2e4b60e31dbb597317274a3ce25b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:7a:ed:6b:57:1d:f7:7c:6c:90:01:df:af:
d4:a7:2a:fe:c4:31:fd:5a:41:9b:50:2f:40:24:b1:
f6:e3:d3:30:d7:e6:d9:62:ff:3f:b4:6c:b8:d8:56:
1c:ca:7d:4a:64:c4:66:1e:05:78:04:be:aa:5c:2d:
e1:b3:a0:79:9b:4a:ff:b3:6e:4b:ba:d1:3d:56:25:
69:59:84:e4:96:fe:a0:c9:b2:52:fe:23:76:b8:9a:
ba:4e:54:d3:a9:da:52:ea:67:cd:51:24:e4:7e:42:
e4:5d:31:13:84:4e:9d:96:4e:56:ef:73:ed:bd:c5:
c8:4d:98:01:d8:a4:0f:fe:cc:2c:9a:1f:98:b7:f1:
21:1d:67:2b:9b:00:a1:de:41:78:3d:04:29:6a:96:
98:6c:09:3d:e7:6c:ff:ce:dd:1b:33:92:03:f9:5c:
32:5b:88:21:dc:23:10:8f:df:8b:89:98:e7:43:37:
2a:eb:b1:5d:43:ef:69:e6:d4:07:f9:b9:ca:da:5f:
da:11:0f:b2:6a:97:65:7a:80:8f:62:15:ef:97:0d:
fd:cb:62:74:4e:f8:e0:d8:6f:30:d9:6d:ce:c9:46:
e5:6e:40:32:42:11:22:34:4e:f9:c9:d3:64:e2:a5:
5f:3f:01:0a:1e:4f:b4:4e:cd:ca:60:a4:28:26:19:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:BE:3D:CB:C2:E4:B6:0E:31:DB:B5:97:31:72:74:A3:CE:25:B1
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:81:6f:7b:fa:31:50:aa:83:b6:84:eb:fc:d4:1b:e2:12:fa:
a1:0a:c7:2d:cd:b1:7b:9d:09:fc:7b:07:93:1e:bd:ea:9f:32:
9b:a0:91:31:14:5a:22:39:d5:f8:12:6b:4c:fb:05:82:a6:cf:
8e:27:4f:3a:e6:6f:ed:23:b5:b0:01:b8:0b:b3:4e:7c:9c:e4:
61:c4:4b:f1:c9:c3:89:84:e5:5b:67:74:6a:79:94:18:68:d2:
6d:27:09:79:3e:86:7a:a9:8a:10:f7:95:14:47:b5:ab:ef:a3:
51:09:06:b3:d2:1c:2d:ad:70:bd:f0:00:82:2c:9f:72:57:45:
33:f1:1d:ad:cf:14:43:e5:40:b2:c4:ab:ab:28:d7:03:92:c3:
5b:51:26:b3:4f:77:dc:4d:02:7e:90:48:18:48:65:00:cb:c6:
6b:09:9e:fb:c5:72:be:a3:f6:2b:b8:97:a3:58:c5:ed:af:17:
81:b7:1e:9d:ae:03:bc:11:a0:c2:7f:89:26:51:89:9f:8c:03:
76:30:16:0c:99:49:fc:55:f0:28:69:9b:a1:e8:6a:fb:2d:02:
ba:21:a2:27:e8:5e:0d:6e:11:b4:b2:bd:70:03:2f:c5:67:6c:
e1:5f:dd:ba:8a:09:4c:29:e3:9d:4d:1b:e8:6d:5f:64:eb:a9:
eb:d0:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:59 2025 by rpki-client