Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File: Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier: 7/1A6JZYm6vJ2T9gs5qAZGnq61wDNHF1mjg7HIigaoc=
Subject key identifier: 71:92:40:83:AB:2A:30:B1:E9:1B:31:B2:A9:B6:7D:2A:A8:F3:38:BA
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer: /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial: 0199FF231B372EBCAC82AE3345A1304DD3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number: 1578
Signing time: Mon 20 Oct 2025 01:01:54 +0000
Manifest this update: Mon 20 Oct 2025 01:01:54 +0000
Manifest next update: Tue 21 Oct 2025 01:01:54 +0000
Files and hashes: 1: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (hash: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=)
2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: dZ4qkqFfLdvfybfaA9zFZeyuoiYpuxWEBWXBIgJQ+HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:23:1b:37:2e:bc:ac:82:ae:33:45:a1:30:4d:d3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Validity
Not Before: Oct 20 01:01:54 2025 GMT
Not After : Oct 21 01:01:54 2025 GMT
Subject: CN=71924083ab2a30b1e91b31b2a9b67d2aa8f338ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:17:df:79:2b:e3:14:3e:56:5c:15:ff:5e:
16:9a:53:f7:d1:43:93:bc:4d:f2:eb:30:69:4e:c3:
76:18:97:0f:d0:e9:4f:32:15:c5:a9:4b:bc:9e:fd:
cf:34:aa:52:12:a8:44:c7:1e:be:84:5e:66:8f:7a:
8c:bd:64:26:f2:84:8b:d2:a1:f1:ce:7f:77:10:58:
60:a7:99:9b:7c:d7:02:0a:b9:3d:ca:32:dd:c0:c7:
e3:8e:3a:90:ec:41:6a:24:85:2f:72:19:44:75:ec:
a8:94:a5:fe:48:42:2c:02:77:18:88:54:5f:69:d7:
78:13:b1:44:d6:18:a3:54:5b:fa:0e:cc:05:5c:27:
7a:9a:79:71:7b:94:10:fb:21:37:51:a3:b9:c7:6e:
05:6c:b0:40:fc:d0:81:ff:50:6d:18:da:fb:23:2b:
a1:be:99:d6:85:80:27:8a:8e:6a:56:43:42:21:46:
6e:1e:d3:86:d6:61:a8:4e:70:0c:46:44:65:61:b5:
ef:d2:94:b0:50:ff:99:cc:d7:e4:19:54:4a:fb:34:
85:7d:21:e8:be:c5:7e:2f:b1:ff:f1:7b:7b:5d:7c:
4c:14:65:94:7d:73:bc:3c:84:0e:3d:dd:a9:90:62:
ec:d4:cb:11:4c:19:fe:54:7a:73:83:60:43:a1:f4:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:92:40:83:AB:2A:30:B1:E9:1B:31:B2:A9:B6:7D:2A:A8:F3:38:BA
X509v3 Authority Key Identifier:
keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b2:c8:2d:3a:b3:5b:bb:45:f7:35:4e:88:95:f5:6c:66:ab:
3a:1d:71:72:3d:07:f8:ff:6d:e1:a3:07:68:e7:da:9c:32:c8:
a9:b1:96:99:a0:44:64:a3:42:f7:a0:8f:8f:62:39:3a:d7:98:
e2:b1:7c:45:ec:76:77:2e:17:e3:27:51:9f:a9:55:b7:16:bb:
37:16:02:7b:aa:e0:b0:14:ba:2d:e5:5e:04:2c:e4:b7:a2:72:
a9:35:c6:55:3d:2a:0d:aa:50:27:6d:a1:22:dd:34:2d:63:b8:
5a:41:2e:bf:c3:76:b4:f9:9f:29:59:27:8f:8d:9c:a3:90:b4:
45:27:c1:0c:2e:a7:69:03:6d:56:0c:09:23:70:71:32:56:10:
d7:b0:f7:a8:62:7e:f6:ef:98:42:f9:1f:10:ba:f5:82:56:c7:
4c:6d:78:f3:eb:52:ea:89:e0:d7:e2:f7:51:e3:fe:77:c4:76:
09:e7:50:84:40:14:31:90:a8:a6:25:13:db:66:24:fc:87:69:
39:8c:36:45:b6:70:04:e9:78:f2:26:03:b6:6f:53:ba:ca:15:
dc:3a:c2:d8:12:02:87:70:6d:27:fa:03:a3:49:ec:af:8d:a3:
5d:89:40:59:96:22:b7:20:ff:97:71:ed:82:14:d0:88:66:6d:
75:95:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:17 2025 by rpki-client