Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: QNCrhXqh0pz3XSdvPLUKzy3yOgJkdPudYdZjD+MIaHY=
Subject key identifier: A3:24:89:E9:DA:C0:89:02:A6:F3:D1:08:1F:25:CE:0B:2F:83:25:0A
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 0199FBEAF03C66927DE7696DB5FBE4E658DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 13E1
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: ZtSF/tzd3kG8W9KTyko3t32Qtpn2OW39uaPwoUyLvAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f0:3c:66:92:7d:e7:69:6d:b5:fb:e4:e6:58:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=a32489e9dac08902a6f3d1081f25ce0b2f83250a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:1c:85:9b:00:5e:45:c9:13:6f:77:70:26:
0a:45:85:67:14:b8:8f:27:d2:de:28:42:c9:4f:93:
2f:8f:2f:0c:0e:b5:8f:65:f2:2b:6a:7c:28:ab:22:
87:41:56:01:f3:3d:aa:ea:9b:d5:f2:f8:cf:70:81:
4f:12:be:8a:7f:76:97:aa:cc:12:c0:ff:44:87:f6:
65:14:8e:dd:96:2c:54:9b:be:a5:dc:a1:f3:41:5f:
1b:db:5f:a9:b5:e0:f0:8a:fe:15:cc:ac:66:d7:16:
b2:25:ae:df:99:93:f2:ff:2f:60:f4:12:ec:8d:22:
11:6d:ec:4d:ae:19:48:af:2d:7f:37:fb:18:da:27:
c8:0f:f7:34:cf:4a:e4:8e:96:dc:24:de:3c:f0:f4:
c9:52:a7:cb:80:6d:79:cc:ea:05:30:2e:93:6c:dd:
91:84:86:f0:2a:43:f2:98:ef:b3:08:ba:6f:9a:3b:
e8:20:8c:17:ef:e2:4d:db:91:3f:29:c8:96:23:2b:
fb:e6:18:dc:d3:60:ff:9c:fd:66:a2:f6:07:9e:1e:
2b:39:9e:5f:fa:6c:ab:1b:d1:b1:4e:99:33:99:d7:
46:f4:52:70:a0:59:77:d3:50:63:dd:3e:79:39:fa:
a6:cb:84:69:aa:ac:22:9b:23:a7:75:46:91:3c:d9:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:89:E9:DA:C0:89:02:A6:F3:D1:08:1F:25:CE:0B:2F:83:25:0A
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d9:f2:a4:d9:c3:38:cb:b0:44:b0:f7:ae:86:87:e4:68:2d:
de:5a:bd:48:bf:7a:cd:66:86:5d:e3:1b:1e:2b:02:f8:a9:ae:
13:10:d2:95:c8:87:fd:83:f6:d4:10:96:8e:6c:07:80:4e:dd:
f0:8d:16:21:3e:15:41:b8:e1:58:58:22:63:49:d4:05:90:d8:
cf:28:54:44:93:b2:0c:24:2d:f5:58:b4:2a:81:1f:17:f3:03:
e4:77:c3:91:69:5e:f0:ea:a5:d3:14:66:89:3e:cd:33:f8:f0:
be:e2:04:44:e3:46:8a:4b:5e:a2:fe:8b:35:3c:47:64:56:a8:
f6:b2:f3:a6:8d:67:d3:d2:a9:0f:00:cb:1a:1a:93:06:66:14:
bc:d2:05:de:c3:80:b6:13:55:b3:0e:75:69:98:ab:f3:60:9e:
ad:51:e3:29:7f:56:4e:aa:d8:e0:cb:ea:b8:84:91:d3:d3:fb:
fb:35:e5:15:f6:f0:0b:95:2a:06:f6:7b:3d:d2:db:4e:bf:0c:
18:8f:c1:1b:a8:74:3f:30:a0:fc:c1:1c:83:36:31:d1:96:77:
05:f7:d5:1c:d4:db:77:f1:73:29:8a:a2:c8:0a:a8:1d:40:bc:
51:f0:ab:79:24:34:2f:75:0f:be:e7:a8:49:ed:64:1c:ad:3c:
dd:9a:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:47 2025 by rpki-client