Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: 9VyPMEEw1ypxkMRtpbrBtoiGRF8vpM9qeDjUqZBMxW8=
Subject key identifier: E9:FE:DC:24:7D:A4:8B:A6:84:21:BC:08:61:6D:A8:8C:A0:F0:C7:2D
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 0199FB7CE34B92DBF53C36C8692146C61C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 135C
Signing time: Sun 19 Oct 2025 08:01:29 +0000
Manifest this update: Sun 19 Oct 2025 08:01:29 +0000
Manifest next update: Mon 20 Oct 2025 08:01:29 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: aPmpmBkjZioul4V3ZYew2VVCcXIOo8UEWwdqFORXi6c=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e3:4b:92:db:f5:3c:36:c8:69:21:46:c6:1c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Oct 19 08:01:29 2025 GMT
Not After : Oct 20 08:01:29 2025 GMT
Subject: CN=e9fedc247da48ba68421bc08616da88ca0f0c72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:50:fd:7f:6b:f5:61:a5:10:b4:c6:2d:aa:
20:cd:89:d9:58:fb:1d:1e:f0:16:72:c7:8a:74:dd:
65:bd:e3:a2:d7:9a:5e:f7:b9:77:85:20:2d:f6:e4:
14:81:d2:19:cf:01:3a:a2:25:b2:3d:5b:50:de:d8:
b8:8c:c0:6f:e3:2a:f9:03:d2:11:c8:49:ab:f7:22:
0b:55:83:c4:b0:96:76:6f:f7:bf:6a:d0:6c:7f:2d:
f0:1b:07:67:24:be:f0:79:2c:6e:91:c2:34:0f:bb:
69:04:e4:58:89:e4:f7:08:7e:dc:a7:77:b7:bf:3b:
ed:88:ac:0d:88:ae:f0:1b:54:19:38:2a:42:a3:15:
e6:29:52:6b:7c:7e:46:53:0c:bf:bc:fa:6a:41:ac:
46:6e:95:76:2b:82:73:f1:5a:47:62:74:d6:fe:31:
23:0e:a1:6a:02:33:7d:a3:f5:99:5e:80:0d:c8:15:
47:3e:d3:f7:2f:c9:3e:38:76:24:59:57:07:7f:69:
36:48:3d:15:0e:85:ee:32:b9:f5:f7:a6:5a:40:40:
9a:56:fe:40:42:3c:b3:97:8b:c6:b6:4a:0c:db:57:
76:be:29:cf:64:ec:92:f5:0e:c8:73:e0:30:1a:c9:
f7:4c:d7:d6:24:64:92:e1:12:a4:16:8e:39:ac:1e:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FE:DC:24:7D:A4:8B:A6:84:21:BC:08:61:6D:A8:8C:A0:F0:C7:2D
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2b:88:06:eb:92:bb:90:10:a4:a9:68:7b:75:2c:5a:2c:87:
c4:8c:ca:64:46:bd:1e:f9:3b:77:ac:5c:1c:1b:68:1f:72:51:
3d:ee:99:11:20:43:4a:44:1e:e6:77:5a:85:5b:22:8e:41:6f:
33:a8:53:d3:18:9b:2a:2c:57:ff:89:5d:ff:ac:0e:94:fa:6e:
37:6e:96:99:f4:b1:72:14:3f:c3:87:ad:d8:99:44:fb:59:14:
24:21:8d:0d:bb:dc:7d:a5:d4:ce:d7:67:33:73:d4:a6:c1:2b:
22:4e:50:b6:ba:9d:14:f4:e7:62:7a:09:96:70:1a:81:f9:c0:
58:77:c8:e0:ed:77:c9:f1:58:4d:de:5e:63:e7:cd:5e:4c:1e:
38:5b:5c:9d:e3:69:e7:06:a9:ae:83:03:82:5e:f4:7b:64:ab:
88:89:ae:ae:b7:12:11:f1:e1:8b:2b:57:18:f4:ab:92:50:a2:
48:f0:f0:a6:2d:76:80:3c:48:cf:5e:20:5d:7d:ac:33:2f:da:
49:58:e0:18:02:44:7f:d4:02:53:e6:f0:c4:61:a4:8c:5b:89:
ee:92:61:f8:06:9b:83:54:b2:4d:13:4e:2f:6e:89:8f:5e:7b:
52:30:c5:e5:52:6e:c7:78:83:a9:a9:dc:0f:fc:75:ef:97:30:
6b:86:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:08 2025 by rpki-client