Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: oKlLH7dc1dEWlbARxjMhcPcmMVyZawTAz7sUb1te0qk=
Subject key identifier: 77:A9:1E:99:59:20:63:66:7A:DB:39:D9:14:E9:04:D5:BD:10:2F:99
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 0199FEB4F071522BB9F9F534BE6C6D159D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 03E0
Signing time: Sun 19 Oct 2025 23:01:34 +0000
Manifest this update: Sun 19 Oct 2025 23:01:34 +0000
Manifest next update: Mon 20 Oct 2025 23:01:34 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: fGTGFNC+tv3r73d9ZH5PKri6o+/7BM4SjNMFmPgrr0o=)
2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f0:71:52:2b:b9:f9:f5:34:be:6c:6d:15:9d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Oct 19 23:01:34 2025 GMT
Not After : Oct 20 23:01:34 2025 GMT
Subject: CN=77a91e99592063667adb39d914e904d5bd102f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:ab:a0:5f:56:68:c2:12:4a:a5:97:df:38:
74:d1:fb:11:45:62:c9:3a:77:b1:c6:f6:83:0e:f5:
2b:ee:ac:36:b6:3b:1d:e2:a8:9f:a7:e3:83:67:d7:
8b:75:2e:bf:f3:04:75:66:0e:0d:f6:1b:68:a3:6e:
19:8b:06:87:8c:bf:4e:43:d8:33:22:95:12:44:a3:
4d:6c:bf:dd:02:1a:63:a1:6e:4b:11:31:e8:35:6c:
7a:25:f9:ed:58:e1:65:1d:10:a7:d0:00:d1:07:3f:
1e:50:1c:ff:e6:b5:17:4b:8e:d6:52:62:0e:c8:31:
2e:49:b1:08:6f:1a:06:e8:06:9b:48:de:95:1b:b7:
db:00:c4:b0:19:a9:25:4b:80:f1:c9:13:a9:12:c0:
5f:6c:27:4c:5d:09:14:9d:da:a9:2e:69:4d:92:83:
25:ac:ee:90:a2:7d:fd:b4:92:0c:da:c8:bc:af:7f:
aa:20:a3:37:0c:92:d0:31:03:52:d7:4b:ef:2a:69:
10:f1:af:2b:01:76:03:f6:d9:81:e4:e3:f6:26:d6:
2f:95:b4:e6:5b:d9:65:9f:b7:13:89:76:b1:3a:2a:
94:d6:69:e8:09:90:05:84:23:f5:d4:0d:da:f7:ca:
83:25:ae:8d:f5:88:53:08:ef:f6:28:60:f7:5d:05:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A9:1E:99:59:20:63:66:7A:DB:39:D9:14:E9:04:D5:BD:10:2F:99
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:be:3a:85:cf:ee:b1:c4:06:b2:c1:f9:44:50:12:bd:03:3b:
68:c6:f3:46:1a:03:7e:a3:7b:a9:08:af:b7:73:3e:98:ff:c7:
de:57:d8:31:a2:fd:bc:6f:ee:31:bf:8b:47:b3:c0:22:73:eb:
08:37:33:48:0a:ae:1d:d9:f3:23:01:97:11:68:2c:8e:f9:e1:
e1:5b:44:63:9d:c1:9a:37:ea:76:0f:c4:0a:33:4b:f8:a0:19:
00:7e:03:d7:31:f1:72:67:61:fd:63:47:8f:63:d2:a0:3c:32:
76:b3:35:4f:59:5d:41:65:42:ec:74:ee:16:2a:9a:64:97:e7:
c6:e2:d2:6c:57:d0:ee:f2:69:7d:f6:45:e8:c7:ae:b7:3f:b3:
51:bd:f3:1b:da:d7:b6:b0:c1:9a:4a:5f:19:e3:2b:32:37:39:
d8:8d:ac:3e:48:8b:4b:3d:01:23:c5:36:2f:45:76:4e:9b:aa:
ca:7e:34:68:0d:2c:7e:dc:70:8e:4c:ca:cc:ca:43:f4:54:44:
b7:1b:c2:23:3e:82:f1:10:59:a0:c2:45:77:c3:7e:0c:0e:85:
82:35:0a:b6:3b:aa:92:90:b1:41:73:06:f7:e3:f0:49:f6:07:
a0:eb:1a:53:39:c6:ca:9e:92:cb:7d:e7:76:19:03:f5:1c:a6:
5b:6a:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:05:34 2025 by rpki-client