Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File: miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier: NsGA+TCI3lBha6kIvI5ioHDO04TflKI/58nwxDmNYXg=
Subject key identifier: 58:26:3D:BD:FA:65:A0:8A:21:FD:EE:D0:F3:1D:D0:9C:4F:63:16:64
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial: 019A52D1F5D0588FF849070851B87ADE0FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number: 0605
Signing time: Wed 05 Nov 2025 07:01:22 +0000
Manifest this update: Wed 05 Nov 2025 07:01:22 +0000
Manifest next update: Thu 06 Nov 2025 07:01:22 +0000
Files and hashes: 1: 091iixnQKcvUxbZE0chkzY9OKaI.roa (hash: JSnoQNQ5Cj53Jy2TNMmAxUXyySm/GL1z5FN+d2LDjbk=)
2: 65SCsGDULNXmsnaaY_HwCpiRDJs.roa (hash: BdpbgQGpWh/WB7tfPqtYzLSc4bRtCkrcb4wfalu+zjk=)
3: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (hash: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=)
4: hZOTpFRy13nYnktswcCNkeUCTr8.roa (hash: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=)
5: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: VMRG3956Brk+C8xZAIHATmzHlv/6NZ05QT6nPHpyAYQ=)
6: yATYs5RQnNSomy8BdI2rSObywPg.roa (hash: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f5:d0:58:8f:f8:49:07:08:51:b8:7a:de:0f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Validity
Not Before: Nov 5 07:01:22 2025 GMT
Not After : Nov 6 07:01:22 2025 GMT
Subject: CN=58263dbdfa65a08a21fdeed0f31dd09c4f631664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:28:79:e7:76:28:22:d7:07:4e:76:b3:dd:
7b:99:00:d4:51:3f:87:64:58:cb:d3:90:53:21:be:
86:50:2a:78:5f:1c:21:be:e3:38:a5:16:2a:8c:ec:
42:71:50:d6:a6:c8:36:6f:a4:5a:1e:65:ca:d5:0e:
43:52:e2:c7:69:25:5e:c8:f6:83:68:17:b8:8a:6f:
e1:df:8a:96:54:13:25:aa:65:c2:35:bd:8d:85:05:
e2:b1:d7:d3:51:4c:45:28:28:b0:07:0d:ed:47:8b:
f4:a5:3a:45:53:44:2b:7b:e9:1a:40:6f:8a:e1:05:
b6:9f:44:42:eb:43:12:53:e7:b8:6e:ab:da:19:56:
77:ab:34:dd:b7:54:e8:0b:ad:40:bb:32:85:a0:7e:
c9:81:66:ae:80:ae:15:25:04:39:fb:1b:cf:b2:3f:
fc:40:e8:65:6e:f8:09:02:e1:9a:14:a7:f9:6c:a6:
58:60:e4:91:a9:c3:f9:ab:20:41:85:49:7d:07:27:
4c:05:75:c0:35:9d:19:5c:8a:c8:2f:77:cd:fc:a9:
8f:5e:a2:e4:94:d3:39:b6:be:04:44:41:b2:2c:51:
15:04:86:30:54:08:c1:0d:d0:3f:41:4e:33:4c:51:
6a:b5:c0:5a:f9:c0:6a:4b:f9:40:db:a3:9d:46:69:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:3D:BD:FA:65:A0:8A:21:FD:EE:D0:F3:1D:D0:9C:4F:63:16:64
X509v3 Authority Key Identifier:
keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:db:44:32:a7:b2:f7:4b:e0:8e:c7:96:b6:4d:e5:ef:5c:8e:
8f:08:21:ce:61:aa:9e:33:c6:b5:a7:bb:72:50:22:35:62:7d:
53:f3:b6:7c:5f:63:b7:1b:7f:36:4d:e0:ae:09:0d:1d:e9:7f:
a7:f1:c3:f6:3d:c3:b6:c2:db:c7:6f:be:d8:c4:f4:84:46:fd:
98:4e:48:94:7d:78:9f:a6:84:e6:61:01:1a:31:1c:a2:21:f4:
a9:c8:79:54:54:5d:d8:6e:15:9a:b5:b9:c7:e8:70:9c:13:e7:
0c:ca:4d:26:41:60:6f:bb:98:37:93:6c:ef:a5:a6:10:de:a4:
14:18:0d:27:e4:67:5d:7d:4d:c7:5c:51:60:38:7a:3b:42:f2:
45:58:f4:fd:d1:f8:af:c8:3a:91:41:a8:a7:88:8e:05:da:4a:
36:a3:f0:55:72:d4:71:13:0c:a6:80:8c:e2:09:cb:32:1a:6e:
29:66:90:b5:97:53:7a:78:42:3e:3c:48:d8:88:f7:fd:1c:fe:
c6:e9:da:22:45:6e:90:47:b7:a0:fa:26:7b:67:5c:19:bf:39:
5e:ab:bd:9f:26:0d:a9:97:50:36:93:78:b9:c7:39:64:e8:51:
98:6b:99:8b:08:4b:73:3c:7b:ac:07:79:c6:24:08:8f:1d:66:
ee:f9:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:12:47 2025 by rpki-client