Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: 5ftmSnFjli+A5j8RFYgfGwqHqxwUjpam9RJhbj1SkTo=
Subject key identifier: 67:66:82:84:9B:07:15:D1:A4:EB:E5:83:52:BF:59:51:D9:5A:9F:D8
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 0199FF2265EBBB4D44BF497197FA27D1E55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 16ED
Signing time: Mon 20 Oct 2025 01:01:08 +0000
Manifest this update: Mon 20 Oct 2025 01:01:08 +0000
Manifest next update: Tue 21 Oct 2025 01:01:08 +0000
Files and hashes: 1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
2: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
3: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: yMFdDGafX2ipQ3q8KlDuoQmvmn2eVW+l4vLxAXX2eJk=)
4: QWLPaj62U4CAYLuNbQSuF8yo9Rg.roa (hash: WelEuZteZjlUXOetnougM0+APhmhxsS7BtV9U+PH3aU=)
5: rAzaD8-4SFX5j-t_AZkG74hcrGo.roa (hash: gUBb80vQa9xzG40VeB1TgYoV9OYlxwRJMp3/2FmSfMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:65:eb:bb:4d:44:bf:49:71:97:fa:27:d1:e5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Oct 20 01:01:08 2025 GMT
Not After : Oct 21 01:01:08 2025 GMT
Subject: CN=676682849b0715d1a4ebe58352bf5951d95a9fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:a0:2e:85:34:90:bc:0f:a7:e5:5a:30:16:
b2:d0:4e:c2:68:4e:a5:86:19:d2:7f:7b:26:b6:6a:
7e:42:ff:ee:e1:ca:5a:10:02:13:b5:9e:45:2c:e1:
15:e5:d9:2e:e2:57:7a:3c:bb:2f:72:00:29:2e:c6:
8c:d0:ec:64:d0:83:44:e2:fa:0e:42:be:d7:01:54:
5b:58:2e:1e:89:2b:76:c5:a5:19:5f:25:2a:a5:4c:
95:02:ef:40:43:45:dd:5c:d2:ad:a8:36:30:60:30:
a9:2e:c1:d5:ee:b8:b3:12:28:a7:7b:da:71:44:a1:
ac:58:f4:22:a5:55:79:f9:07:1d:a9:f1:a7:73:0b:
77:8d:30:87:26:65:5f:6e:7b:e4:9b:4f:bf:b5:60:
58:2f:c9:4e:de:ad:1b:e4:35:10:f9:0e:fa:10:e3:
37:37:50:aa:4b:e7:50:c1:47:3e:d9:c9:71:88:79:
64:97:09:c2:6f:66:72:d7:07:c8:83:fc:95:3f:68:
4d:01:fa:7f:75:22:96:31:f8:3a:4f:ab:3d:84:0a:
56:57:f2:01:56:93:fa:f6:ec:c6:4c:b9:ca:50:1f:
a4:17:cc:1f:e0:c6:0b:37:d2:9c:2e:2c:d6:c7:b7:
62:15:96:07:80:25:75:16:76:4d:c1:4d:a2:80:29:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:66:82:84:9B:07:15:D1:A4:EB:E5:83:52:BF:59:51:D9:5A:9F:D8
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:d9:e2:21:34:d2:fd:2f:59:b4:f7:51:0b:d9:a0:0a:0f:
c9:e5:4f:d4:af:17:c4:88:dd:46:ca:43:7c:55:42:d1:ac:f2:
82:a3:ea:b1:a4:23:97:9f:03:6b:54:ea:56:79:62:e2:c2:be:
34:8d:76:a8:26:91:0a:96:25:3f:e5:a9:c0:4c:5c:c1:a9:91:
15:12:c1:66:8e:36:13:d5:57:b6:28:c9:a2:41:75:74:b0:47:
19:79:e9:ea:77:66:c2:0a:5a:c3:59:56:1c:a2:30:41:c8:2c:
d9:02:30:5b:6e:d2:d0:36:ec:16:61:60:14:7d:7e:ea:40:66:
96:f2:37:ee:4c:2f:a3:b6:48:ad:b1:a7:4b:3b:bc:96:46:0e:
48:f0:84:88:c1:5b:c1:cd:cd:99:4c:a1:8c:8a:07:dd:f1:90:
56:25:19:89:5f:3b:d7:f5:19:8f:b4:f1:35:a0:78:1f:6b:a5:
6f:0c:32:c4:70:34:2a:a5:85:1f:36:a7:1e:b5:10:2e:ad:56:
38:23:b3:b0:d7:a7:a7:9f:65:e2:2a:8f:97:4a:3c:ba:08:eb:
16:5f:9a:d1:f6:fa:69:39:37:d2:1c:21:16:84:e1:64:8b:3e:
49:7c:fd:e3:a0:3f:81:0e:2a:86:a6:fe:76:fd:21:25:6a:92:
d8:6f:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:29 2025 by rpki-client