Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: 2dSnfXVU/vj1Ho8Et+K42qV9KavNIM9yD9Fsky8oyuw=
Subject key identifier: E9:54:6A:72:BD:2C:23:87:68:81:02:A4:A2:FF:6C:E1:54:03:5D:5F
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 019A51BE403AF91CF5BE2D80EA573922E689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 02:00:13 +0000
Manifest this update: Wed 05 Nov 2025 02:00:13 +0000
Manifest next update: Thu 06 Nov 2025 02:00:13 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: 6MUjCRcUoivmU7OR/mRE3VoZ3meKUSl1bSB6dEmpJTs=)
2: 86fKM31DBBSwZ8M6qcIf6r_iQR4.roa (hash: EWjBxOajWLT9vZOY8gky8VpcjsYK4HfbzBG5oTI1lvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:40:3a:f9:1c:f5:be:2d:80:ea:57:39:22:e6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Nov 5 02:00:13 2025 GMT
Not After : Nov 6 02:00:13 2025 GMT
Subject: CN=e9546a72bd2c2387688102a4a2ff6ce154035d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:da:b1:63:8b:45:19:75:bb:1e:4c:f3:14:
a2:35:dc:0e:32:ef:ab:84:e3:8c:c0:35:df:7a:d8:
aa:00:c8:a1:b7:c4:42:b4:1e:67:e6:10:a4:61:f2:
b5:1e:bd:0d:80:7c:a6:31:d5:1b:c4:1b:7f:77:1d:
f6:36:59:d8:5f:0f:7c:41:a6:0c:1e:5d:60:13:9e:
26:49:20:78:1e:6a:33:87:e7:6e:4b:11:0b:2d:eb:
60:51:cc:de:20:ff:fa:1d:43:76:65:2f:a8:1c:5c:
4a:99:e0:f8:dc:7a:f7:a3:be:61:56:5e:ad:d5:8e:
14:c6:f6:fd:54:55:31:26:d4:87:45:3b:86:72:cf:
23:25:6a:9a:1f:4a:d1:3a:c2:76:d8:44:0c:6e:bb:
96:04:cc:9e:08:f6:f5:c1:11:02:43:32:88:f1:54:
66:c8:64:c9:7e:88:f3:22:1d:41:3c:8f:26:16:ef:
39:dc:1f:a0:de:92:e5:f4:44:8c:97:2c:4b:24:c6:
03:04:37:af:69:98:32:92:0a:62:56:df:54:4b:ec:
4d:82:0f:98:12:50:b9:4c:3a:4e:f9:ab:b2:5e:d2:
5b:e8:01:c5:69:e1:a0:c8:e6:a2:a8:85:bf:b3:70:
3f:71:92:95:eb:22:3e:97:f9:95:cc:9e:2a:4e:41:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:54:6A:72:BD:2C:23:87:68:81:02:A4:A2:FF:6C:E1:54:03:5D:5F
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:48:52:9b:d3:df:bf:f9:47:bb:58:a1:4c:d1:74:19:c2:1a:
6d:80:87:6f:3f:f2:ff:f1:b3:d9:03:44:b4:5a:a2:28:80:84:
dd:dc:ad:fb:c2:a0:e4:5a:36:04:0e:c2:fa:5d:da:3c:76:06:
8e:54:42:4d:01:73:4d:83:c4:f8:21:b1:1f:68:5c:b1:e0:2f:
1c:b2:3c:b1:78:62:e3:5e:c7:d9:09:76:40:c0:c5:ca:60:b8:
49:74:e9:9f:95:9f:cf:c7:d5:67:32:e4:10:16:e3:b2:83:82:
45:73:c4:d8:2b:31:6d:17:8b:6c:85:d0:de:dd:e3:43:51:7b:
c6:a9:ce:66:95:8e:a4:91:0f:7b:11:16:80:35:86:55:e9:8b:
54:7b:6d:ad:b2:aa:ab:4d:3d:91:f2:34:98:f8:c9:f7:7c:0a:
74:01:3e:91:ab:3e:60:0f:b5:c5:ce:95:8d:47:08:e3:7d:7b:
e2:9d:3a:3f:75:87:f7:7b:b2:9a:bb:e0:45:09:c4:b6:b8:17:
e5:ca:f4:64:21:b5:e2:42:69:2c:b2:fc:43:f9:94:06:23:54:
85:e8:11:12:eb:36:a1:fb:4c:36:53:6f:b0:6d:f3:5a:d2:8c:
83:76:e1:bb:1f:03:af:aa:d2:22:ba:48:ba:d7:da:b2:d7:88:
e6:cf:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:39:15 2025 by rpki-client