Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: q4WLI0gINVwIuQedmco0a3Y+Xsriywql7VKmasCH19Q=
Subject key identifier: 7D:A3:FC:57:48:09:64:AA:72:BC:1F:03:05:FE:F8:E1:7F:D7:A9:E3
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 0199FA6A1002BFE3F71BF07EC01C6BC1B14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 12A9
Signing time: Sun 19 Oct 2025 03:01:18 +0000
Manifest this update: Sun 19 Oct 2025 03:01:18 +0000
Manifest next update: Mon 20 Oct 2025 03:01:18 +0000
Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: WujUQyLXHOjiXXVr6hV0kaDaKwLmiWfrtm2gii/2EUY=)
3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=)
6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:10:02:bf:e3:f7:1b:f0:7e:c0:1c:6b:c1:b1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Oct 19 03:01:18 2025 GMT
Not After : Oct 20 03:01:18 2025 GMT
Subject: CN=7da3fc57480964aa72bc1f0305fef8e17fd7a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:28:c8:f5:f7:6c:41:8d:75:18:24:2b:0e:
a6:8e:80:7e:98:10:47:2d:5e:af:0b:a1:7e:13:71:
25:36:fb:33:27:6c:0f:3e:fc:3c:21:ff:84:28:9b:
28:de:b4:3f:53:49:49:12:93:bc:37:e3:dd:02:7a:
ac:62:72:ba:cd:10:51:62:58:05:ac:39:ca:6e:1c:
85:00:96:ea:e9:4f:ed:e5:35:08:9c:87:bb:34:f4:
3c:5d:45:d1:84:38:a2:dd:c4:38:9e:79:6b:c0:4f:
36:a6:20:3f:01:ec:56:4f:09:0c:dd:aa:52:6a:df:
2f:9e:f0:d9:65:d7:f7:22:5c:9d:ca:f2:c6:4f:6d:
59:f0:d4:87:d9:ed:8c:3f:be:5a:91:e7:c6:fd:bf:
4e:32:2d:45:05:4b:7e:0e:49:ac:ab:0c:1a:11:59:
0d:68:e2:9f:f7:6e:27:ed:25:82:92:8e:01:28:19:
8f:17:02:c1:03:38:89:42:1f:cf:a2:a3:64:26:37:
1f:1e:54:6d:24:e5:99:ed:a1:eb:c4:39:ac:f8:6f:
04:3a:da:91:93:9f:25:fe:a5:3e:bd:e8:2d:3a:43:
e2:f1:b5:74:92:16:6a:ae:ee:95:10:4a:11:21:93:
0c:19:2c:e5:97:e6:e3:76:fd:31:b6:0c:7c:b3:92:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:FC:57:48:09:64:AA:72:BC:1F:03:05:FE:F8:E1:7F:D7:A9:E3
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:df:af:f7:97:93:44:96:a7:85:28:b8:50:60:d7:9d:2c:29:
75:ac:20:bc:ea:33:dc:f2:f2:ad:93:5a:a0:53:39:64:84:73:
5a:01:8e:00:a5:ba:18:36:dd:92:62:a7:a7:7f:bc:d2:fe:b8:
96:55:53:eb:79:15:cc:4b:ba:72:d5:de:c6:fa:83:d6:56:21:
50:3d:a2:be:a9:c1:a3:59:c2:77:d3:97:ef:03:f9:ea:38:5d:
17:f9:da:38:c2:c1:40:e5:3d:33:38:87:6e:8d:54:e3:5c:c5:
cd:25:d8:c4:37:85:15:8e:28:3d:32:2d:52:64:53:92:ef:90:
4e:da:0a:e5:e0:91:c8:22:85:fd:90:ad:bd:3c:24:51:e9:88:
77:12:59:b9:6f:5c:7c:75:11:da:47:48:0e:95:92:4c:af:32:
46:8a:a3:e9:85:a5:be:c1:ec:df:ac:bc:46:83:54:f6:db:55:
cb:1b:58:df:11:ff:b9:3a:62:fe:92:ca:05:96:76:89:d5:59:
8b:5b:7d:c2:1c:96:3c:e3:f7:4b:e9:6b:2d:f8:52:28:44:52:
e0:d1:30:8e:04:83:43:52:39:01:98:39:df:90:28:72:d2:84:
cc:de:3d:9f:04:b7:9f:cd:16:f5:8a:0e:d7:7d:cb:c2:ff:7a:
2a:48:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:43 2025 by rpki-client