Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: 9pvxRdszgqaPrVwgAP5ERRzpe8SO5MhiZMFvxJPCBCE=
Subject key identifier: 9C:3B:79:88:2F:88:E9:FB:84:04:FD:27:6C:47:C3:C4:6B:25:5D:3C
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 0199FC58310923B0FFA8DCBBA5590C589419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: AxlOkUh9D685BnHWg1/MnoCjymkGO24QtFyjnM1bgSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:31:09:23:b0:ff:a8:dc:bb:a5:59:0c:58:94:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=9c3b79882f88e9fb8404fd276c47c3c46b255d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:32:b9:37:f2:51:2c:49:12:7b:78:b8:66:
6e:92:4c:6b:20:fa:d8:2e:12:e2:30:15:06:49:82:
46:fe:07:7e:83:e4:68:46:07:e6:1e:bf:81:6a:16:
59:e6:8a:54:b7:4f:80:04:59:33:3c:d0:c6:08:b0:
e5:b3:5a:0e:30:a4:27:03:b7:71:d1:22:66:f5:be:
34:bd:14:dc:a2:25:b3:1d:5d:fe:e0:47:7c:49:03:
39:34:6d:38:95:93:7f:14:a5:3f:cd:96:ba:fd:1c:
30:6e:f4:9e:f1:bc:bf:e3:c2:4d:dc:00:cc:d9:f5:
e8:3a:5c:08:ac:3f:56:b6:e7:68:2d:32:08:be:b6:
5e:b6:01:6a:7f:36:fe:fc:af:9c:8e:94:4f:dd:e5:
12:d1:a3:46:70:29:50:fc:c1:00:83:85:4c:23:48:
2d:56:80:49:ec:06:c0:65:8a:c8:cc:9e:7e:f5:91:
99:5e:3f:ff:09:c6:80:30:53:2c:da:d5:10:75:ab:
7e:2e:22:8a:eb:92:7a:df:a1:7f:96:0f:a9:fd:5e:
90:21:9d:d3:9e:3c:43:90:54:40:5e:92:49:c6:b6:
c0:91:b7:c3:f6:f1:ca:e0:f7:65:f0:fe:fb:b5:94:
63:37:5d:9a:34:04:82:8e:02:9d:cd:98:7f:d2:f0:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:79:88:2F:88:E9:FB:84:04:FD:27:6C:47:C3:C4:6B:25:5D:3C
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ea:43:2b:a3:37:23:1d:a0:62:66:03:ef:db:8d:1c:22:eb:
92:7d:b6:26:a9:ae:ce:ae:1a:93:7a:e0:0d:3c:7d:11:b8:13:
2c:e2:ff:9f:3f:dc:c1:80:64:80:72:1f:e7:a3:30:c0:ec:76:
25:d6:33:a8:fe:15:6c:67:27:e8:84:93:b7:13:33:bb:45:6c:
c4:bf:5a:34:a8:98:62:29:f0:60:2c:c8:67:e8:81:35:66:a7:
1e:8d:7e:0b:3a:50:1b:69:2e:19:46:d5:70:af:8d:2c:da:32:
16:70:d7:53:fc:08:0a:ac:b1:1f:44:f4:4c:8b:dc:6f:c3:f0:
8e:67:5d:43:78:0e:fc:24:32:a8:06:98:d5:3f:97:9f:0d:bc:
ef:96:e4:be:50:85:76:26:c7:5e:e9:ba:72:69:15:94:85:0b:
6f:9d:95:06:9b:f4:9f:43:e4:9e:6f:38:53:c7:8f:45:a8:e5:
78:c1:93:25:fd:bf:24:ed:b9:59:cc:12:fb:3f:b4:24:1c:5f:
7c:69:00:d5:87:ef:f8:06:7b:82:c0:99:97:f7:3d:23:00:df:
e8:3b:6f:08:04:ed:35:b2:02:ff:fc:e3:de:7e:87:b3:a3:a0:
bf:3f:ca:67:64:19:e5:f8:40:46:2c:22:c6:f6:d8:22:fa:b9:
6d:80:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:37 2025 by rpki-client