Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: tbSpJeme6/sw6PP5h+8vX1SG4WD4rb2pKESz15x93es=
Subject key identifier: E1:09:7D:D2:B0:2F:4A:6B:34:F3:E5:6A:49:73:30:EF:3D:82:3D:48
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019A5007766CA9AE6ECBDE14E6DE02415979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0F5D
Signing time: Tue 04 Nov 2025 18:00:57 +0000
Manifest this update: Tue 04 Nov 2025 18:00:57 +0000
Manifest next update: Wed 05 Nov 2025 18:00:57 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: HwK2e7/QpvokREc1//upgu1P+eBJpmmutEPJmtxj0J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:76:6c:a9:ae:6e:cb:de:14:e6:de:02:41:59:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Nov 4 18:00:57 2025 GMT
Not After : Nov 5 18:00:57 2025 GMT
Subject: CN=e1097dd2b02f4a6b34f3e56a497330ef3d823d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:00:eb:ed:48:2b:55:3b:5a:a4:b7:b2:e7:
52:96:f3:b6:8e:6f:ba:29:24:0c:c0:ee:87:6c:48:
7c:7a:fc:7f:c8:2e:6a:b4:fa:d1:b1:3d:38:5d:a4:
c1:a6:73:90:b2:fe:63:59:dc:b5:fd:61:64:84:f0:
38:50:f3:3b:2c:c5:eb:0e:ca:a3:c7:56:6d:02:80:
8a:65:38:b8:fb:65:73:73:15:9f:03:c7:a8:56:76:
cc:2b:6f:1c:f6:92:53:58:56:dc:77:5c:4c:69:3d:
3e:aa:6d:e6:90:a3:64:c4:0b:d8:ee:30:ce:15:12:
ad:2d:cb:eb:a1:25:7c:3b:91:12:c2:91:23:39:32:
bb:6a:b1:9d:14:23:36:98:05:58:dd:c8:b5:76:71:
73:6c:ad:8b:d3:ed:8d:6a:25:b9:94:e2:ec:49:c5:
b7:0a:10:c6:a9:1b:9d:30:b9:42:e6:74:79:6f:6d:
77:81:dc:b5:41:e1:81:0f:de:23:11:f2:1e:20:c6:
3d:e3:96:11:cb:63:5a:bd:19:73:ff:a2:f8:af:ca:
c2:bc:9e:cc:0c:db:93:b4:47:21:9f:4d:b4:0d:cd:
26:1b:d1:25:43:87:d1:fc:5a:67:c4:0e:da:b9:fd:
92:42:de:0c:9c:10:d2:59:64:3e:bf:b6:3c:c2:09:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:09:7D:D2:B0:2F:4A:6B:34:F3:E5:6A:49:73:30:EF:3D:82:3D:48
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:23:5b:fd:06:14:1b:91:9b:8c:5d:5b:f8:ff:c2:e8:27:24:
de:24:1d:36:73:c9:a0:3a:87:7a:4c:89:00:b3:df:f9:90:0b:
04:02:bb:0a:ca:8e:6d:6a:90:54:f3:e9:90:94:06:e2:94:5d:
37:01:6d:12:79:57:d5:ae:79:a9:45:66:e1:43:6d:73:65:1c:
93:f4:2a:49:88:b7:f3:92:c4:18:76:77:7e:4f:5d:af:7a:5f:
7c:a3:45:d4:0c:3d:5c:3c:d9:fb:a1:40:7b:1b:b1:99:a2:5b:
b9:a0:d4:3e:8e:9c:60:db:bf:d7:b4:8a:0d:70:e7:2e:55:c6:
4c:40:90:46:2c:5a:e8:f1:a2:5e:62:6d:37:4a:41:f9:c9:b5:
1c:0b:7f:65:98:65:40:c6:8c:94:8e:9b:03:a3:27:ca:f8:52:
40:8b:39:d2:a6:da:ed:60:6b:63:95:8f:ed:5c:44:c9:70:90:
90:ec:b9:69:6e:f2:df:b0:6b:39:ce:fe:c5:c8:e3:60:0f:04:
83:54:2a:b5:22:b9:5a:e9:f3:7c:19:bd:7d:e1:0b:05:da:76:
cd:00:4a:4d:c9:27:46:df:f2:01:1d:99:7c:bc:ce:2a:34:f3:
d6:32:54:1e:0d:12:5e:e6:e3:49:9a:98:0f:a4:36:29:b5:50:
d8:e1:94:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:30 2025 by rpki-client