Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File: m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier: tOFWgnpidUyMgdTeaY/UKMyYeV4E7jQ1fuV6t74aAUk=
Subject key identifier: 42:7D:2A:52:F2:94:6C:A6:01:B3:66:1D:5A:71:C4:70:E0:B0:F8:AF
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 0199FB45FAA5795DF2DA27FE645C07857859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 07:01:31 +0000
Manifest this update: Sun 19 Oct 2025 07:01:31 +0000
Manifest next update: Mon 20 Oct 2025 07:01:31 +0000
Files and hashes: 1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: PwyMFjYC2g+szHMPqrXApmnPNvyD9FmLwnuuRbPCC0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:fa:a5:79:5d:f2:da:27:fe:64:5c:07:85:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Oct 19 07:01:31 2025 GMT
Not After : Oct 20 07:01:31 2025 GMT
Subject: CN=427d2a52f2946ca601b3661d5a71c470e0b0f8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bb:ac:3c:66:89:57:d7:88:e1:05:57:55:c9:
c7:58:c1:46:f8:68:6b:7b:5f:82:8f:09:55:b9:d2:
7b:59:4d:b1:ce:26:ef:9f:02:b8:e8:39:0b:df:fd:
5e:8b:7b:c0:7e:55:e9:cc:3d:82:e0:1b:de:c9:c9:
d2:a1:4f:a4:93:3d:df:17:1b:64:49:70:cf:5f:4c:
af:6f:26:94:de:68:bc:6d:48:00:f6:dc:55:03:fe:
fd:42:12:88:39:46:69:d2:a8:bb:ff:a8:5f:f4:43:
f8:af:d4:1b:b8:0c:cf:55:f7:d6:a6:a8:0e:3f:25:
75:d4:1b:e3:ef:0d:74:d2:be:1b:84:a8:20:70:5f:
73:42:88:f0:4c:78:65:66:54:1d:8d:69:9d:25:13:
4f:e4:bd:2e:1c:e9:fc:37:ad:ec:3d:f8:32:7c:6d:
d0:aa:33:87:10:0e:a8:fe:c7:5e:8b:23:95:18:d0:
c6:0a:ce:7c:33:74:dc:c6:91:5a:12:1e:8a:96:cd:
94:c0:f1:f1:75:98:99:2a:ac:e9:5c:14:e4:63:b5:
3d:1c:38:f1:f3:8a:a4:3c:99:ff:83:0b:8d:b7:55:
cd:a5:b7:58:96:bc:28:a9:82:41:31:d3:5d:1c:5f:
23:c8:2a:a9:29:a8:64:62:02:80:92:96:d8:d6:92:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7D:2A:52:F2:94:6C:A6:01:B3:66:1D:5A:71:C4:70:E0:B0:F8:AF
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5a:62:b7:71:b1:b8:5f:8b:47:ce:5c:a0:9a:d7:61:b6:6a:
2d:54:ea:0e:7f:0d:18:be:c3:9e:a9:3c:02:c0:dd:7c:1a:3a:
ce:c8:a0:91:66:17:33:f4:35:70:13:17:ea:0a:4f:76:ef:2a:
62:ad:05:b6:3f:07:c3:0b:3d:bb:95:fa:1b:08:7b:3d:6b:15:
9d:be:55:05:15:27:81:d7:89:ad:dd:8e:bf:16:2e:ea:53:36:
a8:f8:24:f2:64:79:51:4a:ec:ac:36:ec:48:48:f5:08:7c:d0:
09:1e:b5:39:3e:6d:3b:3f:0a:92:b4:63:9f:fe:93:04:d4:ba:
1d:bb:ac:53:56:98:66:61:26:2e:91:a6:80:b7:78:85:72:86:
28:df:43:7f:6a:80:41:5c:c3:1a:52:fa:9c:fe:3a:64:55:d3:
2c:3d:37:80:08:cc:18:e2:a7:80:78:56:e4:be:ed:ba:2a:20:
89:10:a9:96:77:29:55:27:80:c5:67:e4:5f:6b:f5:33:b3:ca:
7b:db:fd:69:b6:41:33:de:72:f6:07:cb:b6:5b:fc:46:45:62:
a5:f6:d2:dd:04:3c:9e:92:07:4a:5d:f2:9e:a1:a7:b3:3a:a5:
74:7e:22:b4:e4:b8:7e:48:01:7c:1e:8e:3e:4f:b5:82:b4:ec:
6e:9d:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:44 2025 by rpki-client