Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: JDIN1Rn+7LkBNoYjExXqpMdntN/t+1l8wEi8xLqAYWY=
Subject key identifier: D7:77:D4:23:A0:9F:E0:CF:2E:84:15:D2:6C:C9:BB:DB:AC:BC:EC:42
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019A52D15D552EBBBF7D69D640A3D6FB9BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 1100
Signing time: Wed 05 Nov 2025 07:00:43 +0000
Manifest this update: Wed 05 Nov 2025 07:00:43 +0000
Manifest next update: Thu 06 Nov 2025 07:00:43 +0000
Files and hashes: 1: LghvM2HkoxwkfnMrVuGOmbXEEys.roa (hash: 1OZRBAIe8Cgw+ndoc+DfU+Xu6V9sRaXB9Lxh1AlcmzI=)
2: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (hash: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=)
3: UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa (hash: 7E8VN4G/FyL9Hwi63NY6rXsJXVoge0Qr5gQg0WbzGjo=)
4: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (hash: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=)
5: i0UQOeJ6YNtAxZECZiMmxjiaF3I.roa (hash: Tq5saoxoAZ2SR0wF+u5fAsszTDxNlUp7BPSS54+/SOc=)
6: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: J5eX+4CoRhlLQe2HgcBUU8s6U/FUg4xF0lyY3iyIqro=)
7: pvwfGfIGO0NkgGvmujHM737V_EY.roa (hash: 8/XbrvFS8MorMNpio1PdeXOcDn2Zh23ItADh06c9qJQ=)
8: qOY7wbeKs3nIQqhImhSE17lPdCk.roa (hash: jaqajIIr+ngeFDOwuzVR6399SRRk8jyurbScXxLtxAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:5d:55:2e:bb:bf:7d:69:d6:40:a3:d6:fb:9b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Nov 5 07:00:43 2025 GMT
Not After : Nov 6 07:00:43 2025 GMT
Subject: CN=d777d423a09fe0cf2e8415d26cc9bbdbacbcec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:fc:f2:8f:72:ca:05:6f:a8:e1:15:38:0e:
19:d1:4f:5a:19:ac:5d:ad:9e:fe:a5:e6:67:4f:d8:
c3:ed:69:15:33:0f:ea:7a:d2:8a:70:ef:dc:f7:9e:
ae:bd:9f:f4:3e:a8:61:3f:5c:c8:88:b1:89:fb:12:
c9:78:27:18:29:1c:20:bf:f9:67:8d:be:81:4c:af:
79:f5:be:22:b8:49:3c:5a:bc:a8:fc:da:81:aa:c3:
36:01:a5:8d:27:b0:84:90:2c:6d:0f:e6:59:e8:51:
de:23:5d:7f:5d:b6:48:8a:f0:a9:e3:69:f8:a6:4a:
cf:61:92:88:8f:51:ac:67:49:e2:55:61:4f:53:7b:
90:1d:c2:69:10:f7:38:50:a3:e4:45:50:f9:21:27:
7b:88:03:88:8f:72:bb:cd:3d:18:3e:92:f0:e3:66:
8c:b9:71:b4:87:f8:da:61:8a:46:5c:de:db:3d:54:
c7:64:10:4f:f9:41:c2:da:66:65:d6:36:ba:3e:48:
f1:32:0a:ef:6b:ff:e0:45:bb:01:bf:c7:90:0b:cf:
66:73:19:ab:1f:95:95:97:3b:d9:10:b5:99:86:cf:
c8:f5:17:7e:6e:2a:39:e6:d1:12:25:fc:02:90:4d:
1d:fd:76:98:c4:3f:0e:0d:28:91:b4:64:0c:a4:0d:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:D4:23:A0:9F:E0:CF:2E:84:15:D2:6C:C9:BB:DB:AC:BC:EC:42
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bf:cc:0b:33:7f:3c:b4:a0:fa:7b:a4:c5:b2:8a:3d:00:a1:
a7:86:12:80:87:89:d9:7b:e8:b1:b3:20:14:92:c5:bc:17:42:
1c:aa:44:e1:f7:0a:bc:f0:26:3a:24:85:67:a7:20:41:8f:0c:
ac:97:68:e1:92:11:87:29:c2:ec:f4:ac:f3:89:a4:a1:c5:f3:
a5:d0:78:0e:a9:ba:4e:5c:41:00:3e:ed:d6:9f:1b:0a:d1:f8:
d4:02:e5:25:50:61:f3:5d:01:4b:fd:51:9c:8d:6a:7a:d9:6f:
67:72:53:2e:9b:07:7e:03:09:dd:b7:85:76:14:81:d5:9e:30:
05:01:e0:ea:f9:9b:e6:87:ea:1b:98:ad:78:b5:2b:c1:aa:4b:
f5:49:64:d6:f7:f8:3c:52:4f:00:ef:2a:6a:ca:d1:b6:d8:de:
dd:0d:1e:69:bc:e4:9a:bd:5d:70:56:24:f5:53:d0:f4:c9:83:
ac:ad:51:ce:4e:a4:5a:d7:d6:d6:13:25:e1:78:e1:8d:7e:f0:
e6:01:73:8a:95:9e:9c:9f:27:b7:a9:8b:9c:66:4b:76:79:13:
27:f0:97:05:b7:74:43:43:52:e6:8d:89:04:58:a2:b3:b1:77:
f2:30:12:37:da:db:26:63:52:8d:0b:87:f0:2e:fc:b3:72:a0:
d4:60:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:20 2025 by rpki-client