Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File: m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier: uZF13grnueQNbybeYugigEa3LCCu381mXFI625JYch8=
Subject key identifier: 30:B5:2C:BF:DD:4B:DD:18:EA:9B:3F:D2:DC:AD:69:1E:AC:9F:1B:1F
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer: /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial: 0199FBEB0D9071DCE52E0DEFE70F07B0A1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=)
2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: rOWiKdVsJGpoAUA+w6G2/1xtebuwgjRQsoLL94TUeZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0d:90:71:dc:e5:2e:0d:ef:e7:0f:07:b0:a1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=30b52cbfdd4bdd18ea9b3fd2dcad691eac9f1b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:ef:fe:28:bc:91:d8:7e:69:0a:9c:7c:64:
19:10:89:5e:ee:38:4b:87:08:db:69:af:ce:b8:9e:
f0:6b:8c:1e:72:5b:50:94:e9:ae:23:f5:4b:03:0f:
c4:7e:be:3b:9a:d3:88:7b:2e:73:6c:95:63:0f:60:
8b:92:5a:e6:5a:9c:07:1a:90:00:b0:a0:3f:24:44:
4e:09:e8:3b:40:2a:1b:ff:25:b9:61:18:08:e5:bf:
63:15:c2:5c:45:4d:6c:db:f1:b7:ad:3e:4f:7f:02:
2c:53:82:60:86:9b:8b:55:2f:dc:69:95:1b:44:f5:
62:45:6a:7f:76:41:c3:aa:c7:d9:21:96:c2:9a:85:
6f:cd:30:43:a8:ab:47:0f:8c:f4:16:25:91:26:dc:
b8:6a:4a:22:da:79:1e:0a:aa:d4:d3:a6:f6:05:c1:
48:24:f2:df:63:ef:81:2e:07:d8:88:b0:49:cc:94:
80:bc:ff:3d:92:b2:fe:84:4d:17:d7:12:d1:72:29:
c5:d1:0b:58:68:04:0d:b4:ab:0c:3c:f7:0b:80:8f:
2a:72:9e:32:97:90:27:8b:cd:c6:6b:9e:7c:12:c0:
b6:38:2a:1f:05:ab:78:70:d9:c2:25:78:73:c3:41:
ac:35:b7:d2:fb:86:c7:da:b6:d4:ce:58:03:48:9c:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B5:2C:BF:DD:4B:DD:18:EA:9B:3F:D2:DC:AD:69:1E:AC:9F:1B:1F
X509v3 Authority Key Identifier:
keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:60:e5:01:d0:86:c9:76:f0:25:ce:ee:40:2d:af:d3:7c:
16:41:2a:9c:77:36:40:de:ad:c6:58:8b:fa:2f:df:3f:c5:c5:
4e:ac:9d:31:f6:f3:60:28:60:96:ea:ac:b7:8f:68:0f:d8:ad:
3e:52:37:04:91:30:67:01:2c:cd:03:67:88:a1:df:25:27:86:
f5:27:3b:0f:e9:4e:15:ca:17:05:ce:23:db:a5:9d:f7:f6:0f:
c0:46:4e:03:4d:c0:aa:99:c8:df:0f:26:d6:0f:83:36:7d:a2:
eb:ba:38:12:3a:32:04:03:ba:26:93:12:4d:a6:11:10:ba:8e:
60:db:d8:1e:fd:3c:1f:49:b3:1b:d7:fb:c6:ee:86:e8:11:1b:
6b:83:2c:77:36:d0:15:9e:62:f2:b6:c4:d4:a7:91:4b:96:ae:
ce:e4:ba:4c:23:a6:23:3f:3e:98:74:90:b6:b7:fa:ce:66:eb:
ce:2b:c0:09:6e:c5:96:22:14:71:98:d3:70:cd:e5:fb:87:1d:
e1:bc:66:77:38:87:20:85:67:b0:a8:04:81:66:f5:d6:2b:fe:
2d:46:7f:1a:dd:1f:eb:eb:7d:42:1e:dd:5c:19:10:68:c8:98:
35:cc:5a:b0:e4:f0:b6:68:6e:73:f7:95:9d:30:c1:36:02:34:
60:c9:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:18 2025 by rpki-client