Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier: uTj1rGIb70XRZb1RyAloFgC84pZ1kJa99IeUvg1HL5w=
Subject key identifier: 1F:07:04:F4:BE:C6:60:69:67:A0:1A:23:66:77:BD:14:FC:01:46:CE
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 0199FC21C3901E391656E9656DA6351AB175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=)
2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: 138FHvDPMxQ064NzLHZHJKMkSkfAC/FvoX2KMRiArzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c3:90:1e:39:16:56:e9:65:6d:a6:35:1a:b1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=1f0704f4bec6606967a01a236677bd14fc0146ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:59:39:0c:c2:9f:d4:2f:0e:20:db:93:ec:
2e:93:57:14:3d:2d:d5:5b:75:87:2b:c6:ae:7f:4d:
48:e6:76:7c:89:9d:bf:80:62:3c:f2:97:ba:45:71:
aa:66:de:36:21:4e:df:ed:04:3c:0e:ac:6b:9e:e5:
f8:ea:4f:65:96:24:e8:28:a6:b1:44:5a:48:8f:12:
5d:3e:4a:d2:95:51:c2:a9:44:f9:57:58:33:1e:86:
de:d3:f0:c6:3b:76:b2:86:e3:a0:a5:5d:55:6c:6a:
f0:0e:de:f7:91:fd:f1:d3:88:f3:50:fb:a1:ee:27:
32:6a:1c:d4:6a:02:29:8a:4e:15:ce:3f:1f:43:16:
5b:a3:17:d5:13:d6:11:7e:67:63:87:7d:98:d5:f3:
c3:e7:55:1e:2e:b7:44:67:99:a1:44:3a:96:7f:b8:
c9:d8:95:4f:5c:f6:5e:ce:7e:9e:8a:7b:20:13:81:
17:e3:4c:dd:19:57:1b:ec:ab:78:c8:06:da:9b:fc:
5c:44:30:cf:aa:14:3f:41:b0:70:83:85:56:a2:5a:
b1:d7:7b:c1:30:a6:b6:d2:85:8c:bb:45:2a:56:90:
0b:96:b8:8e:c6:56:33:fc:36:1f:00:56:95:00:69:
9a:de:b6:39:15:50:60:3d:a8:66:36:b4:3b:a9:e3:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:07:04:F4:BE:C6:60:69:67:A0:1A:23:66:77:BD:14:FC:01:46:CE
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:db:90:f9:6d:27:95:4d:aa:28:eb:da:8b:de:18:40:1f:de:
7e:d4:8c:38:b3:07:cb:57:9b:c1:f5:fa:84:d8:67:73:79:af:
3b:47:e4:70:2b:1d:1c:6e:26:78:79:6b:7d:c8:ce:09:15:47:
bc:39:ee:a5:2c:03:a8:88:e9:14:80:5a:52:04:e4:02:cb:8b:
f8:e3:ba:57:18:56:27:b7:87:0a:99:2f:43:6b:8f:a9:4b:15:
d4:8c:c8:a8:95:c2:34:0a:64:50:84:b4:29:46:11:02:6b:82:
32:5f:99:f9:7d:b2:53:ac:1c:6d:54:16:96:35:cc:93:f4:dd:
19:89:95:25:1a:76:98:7a:92:72:4a:0f:ad:0f:2f:4a:67:fa:
44:1b:ca:05:3d:8c:6a:13:6f:d6:b2:56:28:33:5f:a8:9f:d6:
f4:0d:46:70:24:da:0a:83:2b:fb:61:6a:33:5e:2a:4f:0c:6e:
c0:45:9a:d3:91:e0:4a:1d:68:3c:23:02:ab:b8:a4:77:57:b6:
cc:90:88:34:fc:28:e0:d0:e5:bb:ff:23:e7:10:f7:f7:7b:52:
96:da:44:98:42:13:24:d3:7f:b5:00:67:fc:02:f5:51:59:43:
ab:dc:80:44:f5:cc:b8:00:1a:c0:eb:0f:81:7a:76:ee:8a:06:
e3:aa:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:25 2025 by rpki-client