Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
File: MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json)
Hash identifier: Y1exGfmaLhaM9XX7zbVjGRC/+lwGNWGAR/AGyV9GTKI=
Subject key identifier: 3F:33:E8:B2:D5:0D:E4:3F:62:13:E5:62:21:2D:16:54:F3:FB:8A:B4
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial: 0199FDD93DB7C73410003474F9F0F8689217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 19:01:36 +0000
Manifest this update: Sun 19 Oct 2025 19:01:36 +0000
Manifest next update: Mon 20 Oct 2025 19:01:36 +0000
Files and hashes: 1: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: xCr7SleDO/kqNZb5I5CAyz1ATjayNzHSl/Cc1WyQAqA=)
2: a9vur_G-Sv_-WDNvoaN6FO-mp_Q.roa (hash: 5mLv65w3uElW3I7UtSlBFzQFnR6wfzkGH2z+n02Go3s=)
3: ckPg9sFMxT2re8tM8nExJep_9Qs.roa (hash: DU25ajodIpeW2jQoXz2wnkJ8CRhq6NHvl6w7hFsUi60=)
4: yFSjMkcgtQ4jugHf3jpWTH9Nbv0.roa (hash: hqHHntvNx6acptoTgy50EVxfDKrmw52pRvx+yFRJ3nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:3d:b7:c7:34:10:00:34:74:f9:f0:f8:68:92:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Validity
Not Before: Oct 19 19:01:36 2025 GMT
Not After : Oct 20 19:01:36 2025 GMT
Subject: CN=3f33e8b2d50de43f6213e562212d1654f3fb8ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:41:8d:64:27:0f:d3:c3:c6:ee:d2:1c:bf:
f1:62:7f:70:97:e5:b6:09:16:4b:fb:44:e5:de:2d:
de:2b:35:5c:82:19:65:f7:8d:50:39:11:19:45:e4:
74:12:7e:27:db:b7:3c:8d:b3:db:8a:78:99:f2:d1:
d4:6e:a6:03:1f:26:97:e6:7b:83:b4:5c:e2:ba:15:
cf:e4:fc:4c:0e:e4:71:5d:f3:10:99:cc:e0:f5:94:
4c:66:27:05:4a:b9:46:87:0a:61:7e:41:df:b5:aa:
e3:38:f0:79:54:07:eb:f6:11:9d:34:9b:ca:30:27:
1d:0b:92:64:2f:05:04:66:45:d9:71:fe:a2:92:ad:
75:15:2f:a2:a8:9d:a6:b0:9d:9d:0b:01:c5:d2:27:
c9:40:46:8f:6f:20:c2:62:09:f1:cb:00:07:30:7f:
e8:8c:d4:e2:20:92:62:6f:59:71:ac:55:10:84:83:
da:8f:a0:6f:db:45:78:58:be:23:c4:b3:d1:23:97:
04:fa:7d:15:8d:43:1b:39:e9:5f:1e:4c:fc:f0:9d:
37:28:73:ca:db:56:60:7e:52:e8:b4:b1:61:93:f3:
30:e1:42:32:08:6e:59:d7:80:3c:01:e9:1c:dd:9a:
1b:77:69:77:f6:02:e7:2c:65:0c:f5:02:45:6a:00:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:E8:B2:D5:0D:E4:3F:62:13:E5:62:21:2D:16:54:F3:FB:8A:B4
X509v3 Authority Key Identifier:
keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c7:25:8b:0e:c6:4c:cf:41:89:63:a2:10:b8:d1:60:47:07:
3c:74:90:9a:f0:12:ed:6d:b3:c5:71:ef:a9:41:25:2e:39:37:
e8:b4:55:ee:18:01:7c:2a:5d:2d:73:3a:87:2d:d7:8a:e7:e1:
f1:7a:12:55:be:5c:85:c2:9c:91:9d:fd:42:4e:e1:04:31:23:
a6:a1:57:25:5a:7d:0f:99:0c:5f:e3:3e:ab:c6:5b:04:20:d0:
f6:dd:a4:97:3c:b9:d6:6d:91:72:27:ce:0b:3e:2c:d2:83:bc:
16:af:f5:98:68:7e:1e:25:5f:4e:98:90:d6:6d:cb:75:68:95:
dc:64:f2:c9:83:ac:af:fd:bb:ea:ad:e0:1f:b9:cb:e8:5b:f1:
01:46:3a:3f:85:c0:21:25:f0:b6:06:6c:43:82:48:b3:76:8b:
fb:5a:c6:69:f3:1a:eb:a2:a9:6d:d2:44:34:48:a5:79:4b:8a:
8a:14:08:18:83:4e:3f:45:a4:e1:28:24:50:26:bc:a3:eb:1e:
43:ed:ee:5a:94:b5:68:0d:0d:d7:00:b2:bb:11:97:0e:54:72:
c9:3a:c6:20:ef:e1:a8:58:fb:2e:89:b5:de:81:e0:05:46:b0:
8e:da:52:89:3c:5e:8b:97:5b:12:9c:d9:a2:fb:66:39:4e:28:
b4:f4:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:33 2025 by rpki-client