Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier: OH8u485oK5xffU8uofq1YM1zQhW/SLEJq05hKfoT824=
Subject key identifier: 78:FF:CA:AF:10:94:DB:CA:C4:F7:42:59:42:FE:11:D8:19:07:83:F2
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 0199FB7C6F401873A3BE1783C1C4D1658FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:00 +0000
Manifest this update: Sun 19 Oct 2025 08:01:00 +0000
Manifest next update: Mon 20 Oct 2025 08:01:00 +0000
Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=)
2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: aBMuBMlVi2bzac/cI3K0b3fgszahMY3jzo5SDNMCkJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6f:40:18:73:a3:be:17:83:c1:c4:d1:65:8f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Oct 19 08:01:00 2025 GMT
Not After : Oct 20 08:01:00 2025 GMT
Subject: CN=78ffcaaf1094dbcac4f7425942fe11d8190783f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:7e:95:02:47:54:5b:17:e9:dc:c5:c7:ce:
60:6b:a5:6c:28:e5:55:28:4b:8c:ef:58:2e:2a:d3:
81:81:09:13:0a:64:01:7c:f2:a1:53:f3:6c:c9:c7:
b3:3d:25:ed:40:1d:d7:e5:8d:a1:fc:c6:a7:d2:46:
df:68:ba:4d:0d:57:5d:67:d0:5c:42:7f:df:4a:83:
9d:7e:13:8c:dd:36:01:da:f2:b3:87:16:68:0d:90:
3e:a3:23:91:20:4a:2b:b5:a0:2e:df:43:63:de:ef:
cd:55:c4:f2:9f:d0:fc:0d:18:6a:10:c0:00:f2:3a:
34:d8:60:25:b5:7f:9a:d8:b0:74:2c:df:20:d5:35:
ed:43:a2:21:55:39:96:11:1c:a5:10:05:e1:7d:96:
07:6e:06:e7:2b:6b:32:8a:55:1d:f1:45:b2:a8:9e:
65:91:b3:d4:c3:85:31:a6:f6:be:5b:ec:f3:e4:be:
19:2b:b9:f4:52:bc:50:01:83:cb:26:12:54:7e:c4:
ab:35:e6:cc:c6:db:dc:44:36:41:d8:b4:31:51:f2:
eb:44:0b:e4:33:a3:12:5a:73:31:67:65:ef:c5:42:
93:90:92:66:08:9e:9a:ee:5b:6d:f7:43:f7:c7:cb:
dc:c8:87:67:44:4c:a4:c0:3f:9d:73:5c:62:cc:24:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:CA:AF:10:94:DB:CA:C4:F7:42:59:42:FE:11:D8:19:07:83:F2
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b5:70:d7:31:d7:f3:e5:76:f2:d8:d2:44:0e:42:40:ea:0f:
6b:ed:b0:91:b8:34:99:2d:8b:2e:6f:ad:88:2d:17:f3:0d:46:
87:ed:97:e8:1c:0a:e9:2e:2d:23:c5:c0:b7:63:de:86:4e:54:
08:16:0f:fd:cb:67:d2:09:ef:32:d2:d3:2b:b1:67:2e:50:a2:
90:4a:8e:dc:6c:8c:43:2d:02:2c:3e:08:78:db:0c:90:0f:fc:
7c:3e:04:9f:c4:9f:34:b7:61:6c:37:d1:77:71:00:ee:3c:da:
46:16:84:77:89:ff:3c:12:4b:d2:1f:d6:a2:68:ba:6a:65:1a:
db:98:ca:1a:b3:46:d7:69:f6:02:48:33:f3:ae:d1:88:19:b2:
98:d2:bd:a6:23:7c:88:97:97:77:12:ac:4c:1c:45:2e:9a:7f:
ae:c2:c8:a8:e0:3c:55:a9:3a:96:42:58:43:09:1c:30:55:21:
68:ef:53:57:fb:03:06:56:b7:23:0e:30:18:b3:e5:b4:0d:03:
0b:37:d4:6d:ee:f0:0c:35:e6:9d:7e:a5:ec:37:e5:c1:e2:89:
7b:01:44:5b:b0:55:db:d7:8f:5b:8e:45:c3:00:4d:9b:fc:2b:
62:dd:71:85:52:b1:0e:fd:31:ad:04:c7:3d:50:26:1f:bf:14:
44:7c:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:45 2025 by rpki-client