Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: SFDutGaAM92kYaaktlDIcC1RAdzbbxnGRFELhBW8WSc=
Subject key identifier: A3:0B:C4:46:D3:31:7A:50:C2:8C:F9:00:37:FB:13:5D:50:16:77:C8
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 0199FB0F567B59B245764BD146EE95895D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0F31
Signing time: Sun 19 Oct 2025 06:01:50 +0000
Manifest this update: Sun 19 Oct 2025 06:01:50 +0000
Manifest next update: Mon 20 Oct 2025 06:01:50 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: /vSUc+d8JpABd0Dd2NubK3C7Z49NpRT46fpQEQ7Xdww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:56:7b:59:b2:45:76:4b:d1:46:ee:95:89:5d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Oct 19 06:01:50 2025 GMT
Not After : Oct 20 06:01:50 2025 GMT
Subject: CN=a30bc446d3317a50c28cf90037fb135d501677c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:57:78:27:bb:f6:af:0e:cf:8c:71:7b:66:
53:e4:db:50:39:61:e0:e9:a6:8a:d1:4b:65:75:62:
ef:bb:4d:45:a3:71:48:05:1c:21:7a:4e:8d:16:84:
16:5e:ba:d0:62:1e:83:53:19:cf:42:5d:0d:d3:3f:
c7:bd:4c:e7:0e:f9:f7:96:bf:e5:4d:90:89:ed:d1:
97:07:3d:02:a6:38:ec:a2:a0:e6:b2:3f:ce:0b:26:
9f:ae:e0:f2:9f:00:3e:a3:d1:39:02:e6:f8:8c:8c:
db:07:1c:d4:47:6b:c5:e2:ad:19:fb:62:68:35:1a:
6a:69:87:d2:49:c2:92:a4:28:b8:c4:6e:fb:69:02:
ac:97:64:97:3e:0d:20:db:42:ef:31:17:58:a8:e1:
07:72:74:9d:65:bb:a7:69:c3:33:ad:f9:e4:99:1a:
1e:a7:f1:c8:d3:0b:fa:ea:44:31:61:86:ab:14:1f:
ac:30:e3:6a:24:a1:a3:3b:ac:40:c3:5e:5d:73:56:
60:26:6a:6c:4d:45:47:7a:71:8f:af:90:c4:2e:28:
a2:09:57:b8:5f:2c:a3:7f:fd:91:c1:86:cd:07:dd:
44:09:2e:e2:32:b3:d3:1c:2e:81:55:f3:85:04:20:
8a:ad:d4:d1:a7:22:20:cc:30:75:b2:83:36:5e:ba:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0B:C4:46:D3:31:7A:50:C2:8C:F9:00:37:FB:13:5D:50:16:77:C8
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:76:82:9a:a5:09:fa:82:6e:5f:4c:3c:bb:7e:6d:eb:cb:f1:
9a:04:fe:51:7f:18:85:02:f6:d5:59:24:96:94:ad:57:93:b7:
2f:30:f4:80:2b:78:05:14:9b:fc:26:94:cf:ac:50:ed:d0:59:
7e:3a:c0:e2:88:c0:2d:bf:96:dc:1b:d3:1d:19:1d:61:d3:fa:
6d:b3:cb:9d:76:25:fc:c0:84:be:d2:72:c5:b9:df:5b:14:3a:
f0:4c:c8:91:bd:0d:38:41:00:47:e5:70:31:20:b9:8e:b6:9a:
7d:79:a5:d0:ee:15:ad:1a:66:4c:7c:dc:43:9e:f6:40:68:a5:
2e:39:bb:90:50:25:1e:8a:0f:bf:8b:b6:11:30:24:8d:ae:8f:
d4:fa:f1:41:ec:c9:72:c0:67:0a:37:24:af:4b:43:e1:1e:de:
f1:22:ea:e9:13:ba:26:ba:45:2f:9c:64:b3:ad:eb:14:f0:9f:
a5:06:22:ee:e2:05:47:4e:d3:ea:b6:94:94:11:39:0e:d2:67:
a8:2d:99:6b:d0:46:ac:12:f8:24:5a:3a:42:12:e6:19:4c:36:
8f:37:1c:c0:77:bb:20:de:4e:01:06:e3:37:0b:36:b2:c3:0d:
33:b9:99:f8:b5:b4:ed:44:11:d4:60:5b:e9:aa:0a:cf:1f:df:
83:63:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:37 2025 by rpki-client