Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: 5jwpZ6C7wDzJqJttSQrAXy8ilwlK29f58fvsBAqXz1A=
Subject key identifier: DE:34:8B:F2:FB:E3:0F:20:85:9C:75:68:61:98:0B:45:05:B4:6D:50
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 0199FDD9A19478CD9B19D1B1579401F05CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 0FFE
Signing time: Sun 19 Oct 2025 19:02:02 +0000
Manifest this update: Sun 19 Oct 2025 19:02:02 +0000
Manifest next update: Mon 20 Oct 2025 19:02:02 +0000
Files and hashes: 1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: WArOivzU6wXbTg6p5/kRnEwH19WYKV3yZob4N1/8FdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a1:94:78:cd:9b:19:d1:b1:57:94:01:f0:5c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Oct 19 19:02:02 2025 GMT
Not After : Oct 20 19:02:02 2025 GMT
Subject: CN=de348bf2fbe30f20859c756861980b4505b46d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:fd:5f:fb:0e:de:c2:2b:0f:b9:0d:6b:fa:
48:69:4f:f7:97:eb:77:47:0e:60:51:6a:80:fe:c7:
9a:87:8c:3b:e4:92:53:4d:45:f9:c3:4f:03:56:01:
aa:55:8b:33:3e:89:a5:52:d9:f7:20:5b:25:62:9c:
4c:e4:2c:dd:b4:81:03:f3:4b:86:8e:a7:6c:cb:71:
6d:cb:15:37:c7:6e:77:b4:80:46:c3:55:70:1b:71:
15:62:ba:3a:5c:97:3f:c4:42:ce:13:1f:b0:21:d1:
20:08:9e:7b:5d:31:f2:61:d6:af:57:f2:a0:59:73:
59:d9:02:f2:b7:c7:22:ba:86:e0:9f:4c:96:a6:83:
59:45:18:69:14:14:61:d0:aa:b1:fa:4a:23:e8:fb:
81:12:6e:10:e7:0d:3a:ee:54:3d:61:8c:1e:78:b4:
f4:e9:ff:7b:73:0d:19:f8:d4:6a:a3:28:46:82:3e:
74:5d:9c:c1:ae:2a:d3:b2:b0:ec:4e:cc:37:67:bc:
f5:2c:5f:47:3c:fd:bb:3a:91:63:62:54:47:e2:2b:
2e:ca:86:13:17:e4:17:96:81:61:2b:36:ad:9a:c2:
6c:d5:2f:87:7f:3b:2a:48:3b:60:58:2a:4a:d1:46:
93:4d:e7:93:03:50:81:06:17:dc:31:a4:34:78:85:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:34:8B:F2:FB:E3:0F:20:85:9C:75:68:61:98:0B:45:05:B4:6D:50
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0d:c6:0a:a9:eb:d6:e6:c8:1f:f5:1c:3e:24:a7:b6:cf:95:
e4:77:46:59:77:88:c4:bc:87:4e:7f:8a:9d:e5:76:d4:6a:44:
98:cd:92:5e:60:ce:57:5e:52:b9:b3:9a:81:35:99:bd:86:bf:
5b:7e:45:01:0a:b1:cd:58:d6:4b:18:18:a5:eb:86:f2:01:ba:
fc:13:fa:5e:e5:04:24:59:6f:6b:bd:a7:7b:c1:6c:b2:7a:5d:
eb:3d:5f:1b:1d:3c:99:dd:0e:f5:18:cb:fa:e8:a1:29:10:ff:
79:66:37:f1:50:ba:70:6a:96:c2:e6:68:03:5b:a5:5f:b4:ea:
19:82:91:f9:82:8d:36:ba:9c:46:7d:25:22:d0:03:ab:10:27:
c6:2f:dc:82:00:b2:58:f8:4b:17:e4:c2:6f:2f:fb:92:04:df:
ba:3a:3a:4f:93:47:64:58:cc:90:72:8a:3c:65:a2:83:0b:6f:
e6:3d:a2:d6:0d:66:13:34:3e:bf:21:ba:12:aa:40:18:b5:8a:
f6:b1:80:c0:9c:fb:d6:68:f2:2b:88:08:75:b7:57:64:b7:ff:
e0:81:37:ea:10:1b:85:61:67:7f:33:c5:35:ab:bc:fa:cc:e6:
4e:5b:56:9b:08:15:0c:8e:19:fe:81:3a:b9:b5:d1:4f:06:9f:
bd:50:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:14 2025 by rpki-client