Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: 323BHvSbTG4F67vNOgJtJYnbYommFECVHJpBE0YpkDA=
Subject key identifier: 04:31:9E:FE:3F:98:D2:B4:DE:29:47:69:77:BA:E8:C2:F2:E0:59:56
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 0199FC8F3C244D59A383FBA6293E8D055DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 1727
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: B8q_Ibebc5xuxzRGd478Vz8wacc.roa (hash: 7TxxkXjJMigm1zrdep1gr/0+c2ofcQeuEJMCWogNg+s=)
2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: 1smKyDJudOHm04g4b82TrHaT7zsVT5GpgVRFu3C7Vj8=)
3: fokVVRta6Se4qMfm0QW8Wvhb8to.roa (hash: GVDAbNxQsgJw7rFS4VJXxWwqpIOjbAD4y/lPqd19DXM=)
4: jN3YKyZr7fLBbaM-ys_51VKLM4I.roa (hash: /Z7rTH+6bXmxYBkfBLPrrW+aXm6fTfnVD3Lj/2mMT08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3c:24:4d:59:a3:83:fb:a6:29:3e:8d:05:5d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=04319efe3f98d2b4de29476977bae8c2f2e05956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:58:b5:90:9e:3b:8b:2d:d7:5e:15:c0:35:
b1:70:5c:89:c8:2c:bf:3c:2b:44:5f:03:56:22:17:
35:50:d2:a7:18:4c:73:a8:e9:e3:6d:d6:d9:71:28:
d1:73:e3:7c:30:84:88:eb:64:99:64:37:49:71:42:
a6:63:63:11:3c:ff:0b:b1:92:d7:77:fc:d8:2e:ef:
a2:2c:b2:2d:5c:f1:ab:9d:27:6e:26:62:97:4f:13:
04:d7:89:99:55:bb:ef:b0:cf:99:51:38:6b:24:37:
39:94:73:50:2c:c3:5d:3f:31:e2:4c:57:d2:7b:0d:
83:01:e9:cb:a9:ec:62:99:a4:23:5f:c5:24:15:9c:
f7:83:01:88:6e:9e:63:e3:23:c5:3f:df:71:ed:78:
21:ed:01:a1:c0:d9:83:39:75:30:a0:29:02:db:d6:
fa:f5:83:20:00:0d:85:aa:8d:54:d1:0c:82:63:e3:
dc:99:fc:46:17:f1:ef:18:c3:3f:ae:f8:7a:e8:f8:
12:24:0a:5c:b2:c4:5e:8e:7a:e2:e1:6a:44:7b:d0:
e9:53:73:8a:07:17:e1:e8:17:9a:d1:20:13:83:6f:
0b:99:17:aa:88:9e:80:44:b9:13:df:93:5c:51:b5:
4d:ff:59:1c:1e:8e:67:3a:f5:80:87:7b:c6:b5:e6:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:31:9E:FE:3F:98:D2:B4:DE:29:47:69:77:BA:E8:C2:F2:E0:59:56
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c6:f4:f1:da:f6:ca:6d:cd:7e:5b:e6:38:cd:6e:00:67:f3:
c7:a7:8d:13:e6:2e:19:6b:a1:bd:77:22:dc:5b:cc:53:35:18:
23:75:c8:50:3a:0a:df:3e:aa:dc:05:dc:44:1c:a2:17:01:8d:
46:87:6a:97:f6:9f:61:18:60:00:7d:b4:ae:db:b8:8b:14:ac:
d2:33:c8:8a:a7:5f:62:06:a8:40:be:1a:d1:03:20:dd:db:32:
d6:37:11:f9:70:74:45:74:28:4c:26:01:d2:6a:a9:c3:d9:c6:
e9:7e:d0:ee:9f:08:50:3a:bd:60:63:2f:7b:50:c8:86:f4:77:
45:05:9c:b0:5e:05:5e:d9:01:c0:54:13:92:93:df:4a:dc:eb:
9b:01:69:d1:aa:26:13:70:91:1b:ca:38:bc:d5:66:97:ee:60:
1f:38:29:1f:4e:4b:37:45:79:3e:b6:72:a8:3a:b5:3d:74:b5:
01:30:9d:c9:a5:bc:b4:9d:32:56:8a:8c:17:a5:d5:2d:a1:fa:
96:e7:14:83:07:c7:23:fd:49:85:f4:11:10:0c:cd:c5:a1:20:
09:84:80:c1:e8:4c:5b:93:3f:9b:f6:49:f8:3d:e8:e9:36:d0:
c4:cd:6f:a4:bc:df:55:3a:7f:d1:08:63:6e:2e:22:0e:d0:48:
5d:cf:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:42:06 2025 by rpki-client