Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier: BmTCwekrNlHXnm202zW1jV5oVia7Mv8dneMLH2Onuns=
Subject key identifier: 11:0A:AE:8B:BB:FD:19:6D:F5:98:34:FC:65:C6:4E:CA:FE:CE:A2:73
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 0199FC8F59EB34D5BC7CC6E77086DEDE538D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number: 0E3F
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: 3gb4hpZPfSwkW9pn0AKJ01S2p8VEaBj1yWZfzHKkmC4=)
2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:59:eb:34:d5:bc:7c:c6:e7:70:86:de:de:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=110aae8bbbfd196df59834fc65c64ecafecea273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:de:fb:91:94:d4:ae:2e:b6:32:71:57:56:
2a:81:9b:9f:98:36:b1:ac:26:38:8e:0b:fb:a1:68:
87:6f:68:a1:02:49:59:79:9e:2f:79:9f:ef:70:fd:
68:51:d3:10:b5:ae:0a:c0:3d:83:8e:26:42:b2:45:
e5:86:11:21:f2:32:16:d3:b4:54:46:dc:fc:94:ab:
b0:1a:6b:83:bc:7f:95:4b:88:3a:79:9d:1e:c8:c3:
bc:fe:b7:43:ad:a6:e2:08:a9:01:27:f3:ab:e7:22:
79:66:cb:7e:0a:d3:5b:28:ee:69:32:69:57:d3:8c:
6e:dc:1f:21:7a:1c:bc:41:6e:87:72:69:51:42:7d:
68:e0:68:a7:eb:d2:6b:57:c5:c5:a2:81:17:7f:47:
81:20:b0:87:64:e7:ac:33:4f:a3:61:c1:7d:fe:52:
ce:fd:7b:bc:8b:c3:1b:ed:6c:2f:75:23:76:08:f6:
38:c4:a2:22:aa:93:19:be:9c:6f:ee:9a:33:cf:05:
bf:a4:1b:1e:7e:1d:76:8f:61:66:75:db:2e:68:ce:
00:d0:9d:b7:e7:9d:5d:e6:4e:f6:57:35:a1:9b:cb:
20:fb:c7:f0:a0:1f:91:56:41:90:c1:73:a3:4b:f3:
e8:10:6a:c0:e4:6d:40:b8:d1:f5:57:fd:fb:24:a3:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:AE:8B:BB:FD:19:6D:F5:98:34:FC:65:C6:4E:CA:FE:CE:A2:73
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cd:34:68:4c:b5:6d:19:bc:1c:ba:d4:25:43:d1:33:13:39:
92:65:4c:11:38:e0:c7:81:24:92:20:d6:46:17:b6:02:97:88:
4f:00:91:19:6f:da:72:b2:2f:26:49:0e:bd:63:4f:b9:c1:56:
30:75:62:f4:4c:62:ba:e5:3c:55:3c:36:92:0c:1e:4e:7d:b9:
73:2f:8f:6d:41:76:44:7a:79:3f:4d:51:72:b5:95:bb:24:ed:
56:d6:bb:ff:05:5f:ee:07:b4:91:af:43:b2:d3:9c:86:10:7c:
ab:c1:14:5f:ed:57:52:ca:2b:ee:38:9b:d4:99:30:57:03:aa:
17:78:f9:85:48:5f:af:48:8d:74:61:f4:bc:60:a2:47:ab:f6:
64:9e:d7:44:99:74:8f:4e:4d:47:a4:1d:6f:c5:e5:fc:3f:c8:
e7:9c:0a:1e:d4:58:1c:c6:1d:ef:10:23:22:7a:98:94:02:3b:
b1:f0:fc:15:30:63:a8:7f:84:4a:13:0d:2f:f0:5d:d0:06:10:
02:d4:cd:7d:51:c2:d4:21:8c:77:29:f8:dd:4e:de:0f:c5:e6:
90:2a:46:65:04:47:a9:bd:ac:06:5c:a8:0c:53:f6:d1:15:9a:
77:65:b1:7f:a9:62:8a:80:51:4d:77:52:27:32:68:e6:f9:c1:
85:ad:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:35 2025 by rpki-client