Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File: m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier: 4wieU5yoH0jkP2fhnWsFbV+im5rVh6WA7AAK0W+DiJw=
Subject key identifier: 5C:BF:0E:5F:E7:D4:19:A6:E1:93:F0:7D:3D:54:7D:72:B0:0C:0D:0F
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial: 019A4DE22BADC894D83A22E03D3897EF0763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number: 0D8D
Signing time: Tue 04 Nov 2025 08:00:59 +0000
Manifest this update: Tue 04 Nov 2025 08:00:59 +0000
Manifest next update: Wed 05 Nov 2025 08:00:59 +0000
Files and hashes: 1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: DZa42gF4KChaT/2bClOfCFDhnwjIgV98+ckhYFdtGW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2b:ad:c8:94:d8:3a:22:e0:3d:38:97:ef:07:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Validity
Not Before: Nov 4 08:00:59 2025 GMT
Not After : Nov 5 08:00:59 2025 GMT
Subject: CN=5cbf0e5fe7d419a6e193f07d3d547d72b00c0d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:97:a7:b3:fd:ba:29:58:63:84:3b:b6:41:
2d:61:3d:b7:bb:ec:40:85:e8:ba:a1:3d:ab:3d:42:
d7:19:27:4c:05:cc:10:03:93:0a:d6:02:42:8a:b8:
1e:01:a9:78:61:5f:4e:35:f1:bf:60:1e:11:ee:5c:
e8:c1:ec:33:33:72:c5:ac:19:9a:55:32:ab:1c:0b:
a6:9e:32:d2:17:3e:3d:00:28:d6:17:44:3a:5d:2c:
6d:5c:ca:38:22:7a:be:78:a1:45:37:62:a6:20:29:
3a:fd:65:1f:39:72:a1:43:27:f9:c4:0c:09:e2:7d:
dd:57:1d:18:47:f2:fa:5a:4f:86:14:f5:ac:c0:fd:
b5:9d:f1:fa:8e:36:f3:59:68:39:9d:57:aa:da:6d:
5a:eb:37:64:4f:bf:d4:f1:77:7d:0b:e2:0b:cc:e8:
16:e9:c0:7f:f9:71:e2:16:21:c0:f0:56:f9:f8:08:
eb:2a:3c:2d:63:b3:3d:65:ba:72:a6:4d:a0:e7:b0:
ad:96:50:fa:e2:aa:99:87:76:a7:7d:19:70:ce:da:
4e:bb:a3:0d:ed:ed:dc:28:59:c1:a4:dc:63:89:a7:
49:69:a7:d6:cb:7e:78:45:6d:f0:f3:7d:b8:4e:e5:
b9:71:e7:f0:52:d3:f6:8e:87:53:44:b6:a3:4b:30:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BF:0E:5F:E7:D4:19:A6:E1:93:F0:7D:3D:54:7D:72:B0:0C:0D:0F
X509v3 Authority Key Identifier:
keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c8:d7:bd:28:c3:4b:7f:40:b2:1d:31:ae:8f:e8:77:d9:6c:
23:66:f4:14:fd:2a:62:45:78:67:e0:9b:17:20:c4:49:72:a5:
f8:92:01:db:7b:66:b6:b1:0b:a7:c0:83:84:6f:1b:b5:f2:12:
b2:66:b1:6f:96:87:f8:14:01:82:03:2b:2a:82:2a:c4:86:29:
e1:04:60:44:54:2d:92:a4:4d:b0:51:a7:22:21:c4:12:be:a6:
3d:22:c1:20:f0:7f:9c:fb:7f:18:45:c4:44:b2:de:ab:13:c6:
c9:3a:81:26:33:2f:fc:9c:06:43:e3:a2:9f:87:85:a1:ba:4c:
5c:92:c2:fa:fd:9b:7d:6a:f0:76:4a:aa:18:91:56:76:e1:b6:
61:48:52:01:bf:8f:c9:d0:ea:dd:85:70:f8:98:83:8a:68:84:
57:2f:8c:50:8f:3b:98:ea:56:f4:43:4b:34:7d:3e:14:a1:5b:
93:cb:04:9e:3f:33:3d:11:7a:0e:eb:04:66:b4:17:67:65:e4:
9b:8d:98:21:9e:d1:99:2d:a6:df:38:93:95:6c:e3:a2:25:b7:
66:47:02:02:ac:10:54:7f:f2:86:08:40:57:ba:c1:44:6e:99:
eb:e9:43:84:cc:7f:5a:ce:25:23:40:89:c1:ac:1f:74:67:3d:
ed:48:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:59 2025 by rpki-client