Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier: zBT/U+dIHK54K68ZM4y3UgF34gEk1ECLqDQJusw+EsY=
Subject key identifier: A2:C5:E0:0A:D2:A7:9E:11:88:EA:14:3D:71:2D:99:9E:F1:0A:AF:B1
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 0199C3EAA3ECBED523B8A362141F464B4C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number: 0822
Signing time: Wed 08 Oct 2025 13:02:38 +0000
Manifest this update: Wed 08 Oct 2025 13:02:38 +0000
Manifest next update: Thu 09 Oct 2025 13:02:38 +0000
Files and hashes: 1: 19FcmSsxW-HAmGMu8vNic8GlPVQ.roa (hash: A/x/ATh8VjymksFnyMMUZUGv4QdGRlkBRngH5oIt50M=)
2: 6-NzyccAUUtINjY98ZwTPTgTOqw.roa (hash: VRIswTWRK8wp1kBAJ6oGriHopkql4l7787Pjx0zb2Uk=)
3: Olq79L64wCg-hHRooByi3vPZULM.roa (hash: 7iTlVlX50RF0+9QmCG7iYPxhRnhcj6E2kkA6pnlrhOE=)
4: d-6oHxGBu3uoNsynUGQ-jykLpuY.roa (hash: nTvRGLOiSbzDI5kbpr4PxXlAAgieGj6+zvY9qnISFeU=)
5: m7d5O-mEzrcubvS3JW6tnbVNKd4.roa (hash: Qq9s73nF/u8j1iRoR74NKiqmiIz0zgUdTQSpGdm7mb4=)
6: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: BJtTuKPKXM3FNV4bUXblDgNpaUtWPrbaP7OBCOyrMtM=)
7: pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa (hash: BRmqr+fKFFdKHRHLRNEIxp96b16KAoY3BPtxfqv5huI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:ea:a3:ec:be:d5:23:b8:a3:62:14:1f:46:4b:4c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Oct 8 13:02:38 2025 GMT
Not After : Oct 9 13:02:38 2025 GMT
Subject: CN=a2c5e00ad2a79e1188ea143d712d999ef10aafb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:21:de:d8:ab:13:eb:e3:d3:93:f7:ec:32:
82:b7:93:9c:03:ff:86:7d:dd:8d:f8:43:7b:43:8e:
7f:1b:3b:b9:f2:63:18:68:03:28:00:5b:92:a2:9c:
3f:21:25:45:71:6a:f7:0f:ed:d9:9b:cc:5a:db:e9:
c3:6a:35:9c:15:de:1b:41:79:51:ac:54:7a:6b:68:
82:53:95:15:f1:de:67:a0:a9:27:39:9d:1d:31:08:
5c:56:d0:c6:36:c1:fc:5e:17:d7:3b:02:5b:e5:1d:
0a:d4:c7:2d:24:2a:54:14:92:ce:87:21:bc:bc:6e:
be:a7:e5:e9:32:87:1c:23:c1:1c:03:45:24:bb:c9:
f1:89:6d:d4:18:f5:6e:41:7c:74:f2:22:1c:89:12:
8d:10:c0:44:0b:d1:c8:44:34:f9:7f:9e:a7:cb:5b:
42:31:01:2b:c7:a3:3d:b7:6c:bc:36:0b:81:1f:06:
4d:99:22:05:76:f3:e5:ea:ff:fb:54:b1:83:3b:4f:
4e:d3:bf:9a:95:15:eb:be:a2:ea:f6:ac:49:c5:92:
59:2e:78:da:10:a0:4f:c5:4f:18:91:dc:57:68:61:
dd:b2:6e:e1:af:9b:c2:71:af:29:9a:fc:c2:92:ea:
29:4a:a1:91:10:ac:ac:92:9b:dd:8b:74:ba:3c:28:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:E0:0A:D2:A7:9E:11:88:EA:14:3D:71:2D:99:9E:F1:0A:AF:B1
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:96:a4:67:e0:8a:b3:a4:e1:94:d1:af:ad:38:71:0c:db:5a:
0c:97:ad:16:ab:c6:ff:4e:bf:e5:69:22:a1:72:ae:46:72:76:
8e:5b:1f:a6:d5:de:49:3c:56:0f:43:8b:3e:bd:9d:0e:dd:cc:
02:78:43:56:75:ca:95:d1:35:54:9a:c7:6c:ea:d2:9b:b3:01:
57:91:49:cc:f8:5a:80:29:1c:1a:ce:60:c8:0d:18:19:32:aa:
19:eb:06:35:63:4d:ac:74:08:2a:6b:4f:e4:02:57:98:f1:85:
94:3d:76:65:47:d6:4f:ce:b8:88:1c:6d:a7:33:45:2e:e7:b0:
d5:4a:4d:a9:4a:50:b6:19:ba:33:a8:fa:99:2e:ed:e7:60:d2:
da:e3:27:56:01:18:14:1e:68:59:5e:83:49:b0:5f:fa:0f:71:
72:70:fc:d9:c8:e4:ab:43:99:9d:d7:f9:20:72:9f:96:39:f8:
ea:64:33:3f:99:3d:de:10:fa:c8:73:75:49:2b:f8:a4:53:93:
e9:ec:e2:2b:57:f2:37:b2:7d:ba:be:70:a7:27:64:8f:09:d0:
4b:b2:23:2c:46:68:a3:2b:d2:6c:f6:84:4c:84:73:9c:03:f9:
f3:ee:9b:0c:cc:9a:d4:32:a9:62:64:f3:45:77:54:0f:d0:a7:
08:ad:1f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:08 2025 by rpki-client