
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier: rQjynzAjeWn4ZX+gX8nQ6abBIoNgQuDd5vEfCvEP4aI=
Subject key identifier: 77:0B:D1:27:32:25:2C:12:61:4E:8E:42:26:39:8F:27:93:74:92:0C
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 0199FB0F06C9C37590B0AA15F7FDA94CB862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number: 1220
Signing time: Sun 19 Oct 2025 06:01:29 +0000
Manifest this update: Sun 19 Oct 2025 06:01:29 +0000
Manifest next update: Mon 20 Oct 2025 06:01:29 +0000
Files and hashes: 1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: 1RNj7M8OQ1ru4adTSQrH8aOupzw5kZkC5VGiDUWr5I0=)
3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:06:c9:c3:75:90:b0:aa:15:f7:fd:a9:4c:b8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Oct 19 06:01:29 2025 GMT
Not After : Oct 20 06:01:29 2025 GMT
Subject: CN=770bd12732252c12614e8e4226398f279374920c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:84:e5:af:a5:72:d7:b4:14:c1:4d:81:77:
b1:bb:70:26:7a:9e:f7:42:e5:94:d5:f3:c7:95:a7:
6a:e9:3c:30:6b:65:da:8d:69:53:8f:c8:03:a7:f4:
a8:04:4d:92:46:fc:7f:a7:0a:75:d8:97:e8:5d:55:
f7:b0:a2:de:29:27:f1:8c:99:1b:39:d4:cb:54:07:
3c:07:b7:61:18:c4:4c:72:9f:39:28:2c:eb:a6:de:
e7:56:fc:77:cd:80:bc:e0:d9:eb:b4:5c:93:e5:90:
a9:d8:8e:7b:e0:f4:0b:b3:1f:f4:e4:72:27:7d:b5:
10:79:47:97:41:ac:55:ee:52:90:ea:24:9d:f3:cd:
19:0f:96:5d:ad:94:9c:90:1a:2e:25:57:4a:11:f4:
f5:82:d5:2e:0e:a1:09:eb:ae:fe:17:62:1a:d4:51:
90:04:2a:89:f0:d1:5e:35:6f:b3:7c:10:67:ca:a4:
0a:e9:25:ae:66:ea:a9:ed:de:12:93:25:5e:7b:ad:
d8:04:b4:5a:be:f2:4e:65:50:a1:1c:b2:f8:d9:52:
8f:8c:48:93:20:12:83:d0:a4:a8:a9:2c:81:e3:59:
40:a9:59:b9:d8:29:24:40:2d:8a:05:98:5e:3b:41:
0a:2c:ef:30:f5:2e:4f:e0:b9:a7:73:85:7a:39:f1:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:D1:27:32:25:2C:12:61:4E:8E:42:26:39:8F:27:93:74:92:0C
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:58:6f:f1:be:9e:9a:a4:70:7d:59:04:c2:40:cf:e9:fd:ae:
01:e6:e8:27:54:db:ed:8a:0f:bf:a9:5b:45:81:2b:70:c7:4c:
5a:b9:d1:62:da:e9:85:99:8f:8b:e8:72:e4:72:c8:e8:52:00:
d1:86:27:76:60:50:17:0b:6c:d0:84:3a:4f:74:78:66:88:46:
40:fd:c0:9f:d1:79:ce:49:6a:e2:ad:d1:7f:88:2a:bb:95:94:
06:1f:40:fd:6a:7f:df:24:7f:b8:89:91:11:41:4a:75:b6:d3:
ba:fb:9f:d8:50:07:a9:e6:32:8d:13:3f:44:e2:72:5e:39:2b:
c1:21:80:68:8f:fc:d0:c1:bc:ad:b1:82:45:27:90:68:b6:5d:
38:b5:72:7e:f3:24:23:96:ba:c6:07:cb:7d:ae:fc:2b:41:bb:
96:40:92:46:cb:0b:00:c9:ef:af:cf:70:67:e9:0d:75:fd:72:
6f:da:40:d6:a4:d5:7a:f1:1e:6a:c9:d8:06:9d:52:50:a2:61:
d9:d2:14:d1:e7:fe:4f:34:ec:13:ab:ab:e4:46:cf:51:f6:0c:
9d:34:5d:09:7c:23:a2:ab:f0:8c:93:ae:ee:b7:18:d6:8d:6d:
58:ef:a5:ca:49:2a:87:78:c6:df:c0:ed:cc:07:8f:57:6d:95:
25:6c:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:45 2025 by rpki-client