Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: WKM04u/tqqHh3+eyWwnAoyJjt6TL0t3dpVdUpmFN63I=
Subject key identifier: 16:37:7C:3E:DC:4E:92:A5:72:D7:6C:A5:6E:E7:B1:40:3F:E5:88:A8
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 019A552D50D706261A3FF250B754F86F75E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 06EB
Signing time: Wed 05 Nov 2025 18:00:24 +0000
Manifest this update: Wed 05 Nov 2025 18:00:24 +0000
Manifest next update: Thu 06 Nov 2025 18:00:24 +0000
Files and hashes: 1: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (hash: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: KnJLC38inBhi90nKYmCphCMRGRa7Vp3moel/mK3SWoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:50:d7:06:26:1a:3f:f2:50:b7:54:f8:6f:75:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Nov 5 18:00:24 2025 GMT
Not After : Nov 6 18:00:24 2025 GMT
Subject: CN=16377c3edc4e92a572d76ca56ee7b1403fe588a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:cd:f7:dd:65:a4:9d:cc:73:b1:f6:a7:c2:
80:d9:b8:3f:12:74:fa:4c:dd:59:95:4b:81:90:92:
d8:ea:24:2f:8b:c8:70:75:12:be:3e:d4:1e:0b:20:
bf:0e:fd:a9:4d:44:1c:ca:e3:ad:51:74:c3:e8:2e:
36:c2:7f:59:10:40:57:5f:14:cb:e9:89:77:34:4c:
f6:86:0e:6e:52:f0:73:ab:27:7d:8e:1f:a8:60:11:
c6:01:b6:eb:d3:70:15:46:ce:cf:36:4c:81:1b:2e:
d2:ed:29:74:58:31:e1:7f:d6:3e:ca:ad:53:42:bc:
98:9a:e0:93:20:52:c0:84:6d:48:e6:d1:63:bb:1f:
4e:94:b6:78:1e:8e:5e:c3:a6:bf:04:fd:37:2d:32:
7f:cf:af:75:c0:94:54:33:89:4b:6b:f9:b8:1c:4a:
7d:e4:06:3f:87:aa:7e:13:6b:1b:49:cf:ce:d5:4a:
5c:9e:3c:a6:86:1a:12:8f:3d:84:66:d5:53:d6:cd:
e2:32:06:55:3c:a2:38:77:4a:84:ea:90:24:33:a9:
bf:0f:a1:34:a8:74:e3:ef:c9:82:e5:cb:94:db:53:
72:75:e1:bb:fb:69:4a:ce:1b:1e:90:62:f9:e1:f3:
13:f0:b3:2b:5b:9e:80:4e:05:c3:64:e1:2e:45:7d:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:37:7C:3E:DC:4E:92:A5:72:D7:6C:A5:6E:E7:B1:40:3F:E5:88:A8
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dd:f4:9a:49:e5:e0:65:27:19:3f:e5:aa:d8:1e:f6:1f:05:
a8:75:82:53:bf:9c:fb:ba:de:12:14:cf:be:eb:4b:8b:76:c9:
d6:20:48:00:c5:4a:f0:5f:8d:8d:f7:83:cc:07:f8:8c:47:a4:
f3:9e:9b:d7:8e:86:79:e1:1b:90:01:00:0b:9a:60:a3:5e:94:
fd:58:5b:fa:7f:f7:83:47:ec:fc:7a:6d:5e:2b:6f:ff:1f:f9:
bf:cd:ff:f3:c4:29:1c:71:92:bf:96:d8:18:38:17:dd:a9:24:
6e:b8:67:54:22:d7:95:4e:19:5b:8b:c2:3e:ed:be:a1:d1:2a:
67:70:91:32:5e:d8:68:dd:59:5c:72:76:e0:a7:3f:15:96:d1:
01:14:bd:d7:46:60:ea:c9:78:90:d2:6e:7f:7b:44:16:7d:0b:
dc:bc:6c:6e:87:89:7d:92:9d:ca:d1:57:3d:86:6b:14:0d:f2:
00:44:4d:46:26:19:23:d3:d5:14:c7:35:54:6a:e0:5c:80:ff:
de:16:ca:ea:cb:88:83:a6:91:b3:b7:36:09:81:fc:dd:b1:91:
10:64:34:05:a4:31:df:82:bd:e9:24:33:69:a7:d0:0e:3e:96:
cb:f0:f1:45:3e:98:90:fb:01:87:40:1b:8d:86:07:c8:48:4a:
6f:26:cd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:56 2025 by rpki-client