Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: cvjV1lqa/y0sImk+p0yldYlK5iQncEyQ2UQ9CG120d4=
Subject key identifier: 4A:B1:8C:7A:9E:64:35:19:48:A5:6D:F3:15:BE:9C:9F:01:13:9A:70
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019A51511CD9A5A6D75A8211C01EC08C2186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 12D6
Signing time: Wed 05 Nov 2025 00:01:01 +0000
Manifest this update: Wed 05 Nov 2025 00:01:01 +0000
Manifest next update: Thu 06 Nov 2025 00:01:01 +0000
Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: oEChunik9gJurcQz6ZPDXBG8MGUE1dKHV7t6XvL4q4E=)
3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=)
6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:1c:d9:a5:a6:d7:5a:82:11:c0:1e:c0:8c:21:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Nov 5 00:01:01 2025 GMT
Not After : Nov 6 00:01:01 2025 GMT
Subject: CN=4ab18c7a9e64351948a56df315be9c9f01139a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:9e:f6:4d:68:8b:d8:0b:54:ae:3e:89:33:
e8:cf:d8:83:0c:4d:5a:e7:d6:f9:89:64:51:eb:d1:
ae:7b:19:ca:63:4b:28:69:bc:cc:8b:b4:8e:97:d0:
a7:fd:78:61:66:74:74:26:21:75:ad:89:50:53:57:
83:b1:5d:cd:36:7e:55:91:36:ce:cc:a3:57:f9:61:
d0:5d:d7:0f:eb:5f:e0:00:96:bf:49:f4:09:da:45:
5e:6e:09:30:e8:1e:21:7c:82:b5:86:c3:26:e5:97:
38:6e:b4:41:c6:24:b0:b1:b6:99:18:78:83:ed:78:
03:9c:13:dc:5f:7a:49:d3:2b:ee:0e:d1:80:c2:13:
07:b2:d5:a1:5c:d0:35:1f:54:c3:d4:a3:02:b8:7d:
26:81:4d:c1:92:b3:16:a7:78:6e:af:96:52:c3:14:
fe:7d:b4:8e:57:05:c4:10:89:4c:bf:97:47:ea:4c:
db:01:03:7b:05:d4:1f:73:db:35:b6:23:df:de:1e:
1f:28:4e:25:ae:c8:2e:9f:c0:eb:a6:1b:39:8b:cc:
7d:e5:9c:0b:42:64:30:a3:be:c0:6d:58:6c:bc:50:
ef:c0:d8:de:0b:1e:8c:5d:fa:53:bd:8b:a3:ec:f7:
cf:fb:42:f4:d0:28:47:02:fc:38:2f:75:2c:29:95:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:8C:7A:9E:64:35:19:48:A5:6D:F3:15:BE:9C:9F:01:13:9A:70
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9e:6e:69:23:09:c9:60:28:64:d8:97:8c:e1:77:1e:fd:be:
b3:ac:2d:2a:a4:82:de:b3:d8:61:40:71:89:bc:bc:f9:76:c2:
d2:fc:68:1f:29:bc:65:01:96:fc:86:bc:87:c7:22:d4:af:6b:
df:d9:25:ac:05:0b:d4:99:56:da:39:b6:4f:4b:6e:7d:66:7a:
d4:d4:59:39:cd:01:ee:36:fa:b6:88:e5:2a:d1:51:fd:a9:9a:
80:3f:ba:80:74:6d:06:06:72:d1:46:4b:6c:e3:25:62:74:ae:
a0:63:15:68:03:9a:ca:d6:d4:92:e3:26:fb:34:02:31:7d:21:
02:e4:f5:84:d8:0a:d7:e8:bd:f8:f3:31:e0:86:ac:3a:ee:1a:
13:56:c4:50:24:1a:2a:36:5c:8a:a4:60:62:56:df:5a:4a:2c:
0d:c3:81:a6:0e:9a:83:39:a9:52:37:f3:e1:d4:12:c0:fb:c5:
3e:37:8c:fc:ee:fd:81:0d:df:cf:40:56:ad:b1:79:61:c0:b1:
45:66:7a:9d:df:1f:09:0b:47:6d:88:79:38:47:30:c1:58:cf:
e7:2c:8c:f3:dd:c6:26:a2:68:f8:9c:75:e8:b0:c6:01:3d:23:
a6:62:99:e3:f0:ed:2c:b9:54:8f:77:29:b6:1e:0d:d8:27:b8:
6b:2c:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:33:57 2025 by rpki-client