Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File: mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier: eP37v+uVbSnGeZCyBRQHmMR8kZ4lH2zT1+p1FR3wTBk=
Subject key identifier: 76:58:24:F8:C5:34:F0:BB:59:3A:77:6E:75:11:4D:EC:54:6D:CA:47
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer: /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial: 019A0636984B50E9C27CD422189D9033EF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 10:00:32 +0000
Manifest this update: Tue 21 Oct 2025 10:00:32 +0000
Manifest next update: Wed 22 Oct 2025 10:00:32 +0000
Files and hashes: 1: 1-2hqQTW3ul_bD8JHqn2arc4SQt4.roa (hash: 7Jb+agyXKOWc8cNwhtr84wIX4Xn98h0+c+7K9P4oPMA=)
2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: qzyfHvRxvT3YD0KX2+J9JaOU+QwA9J+tQHTYWSKJ1Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:36:98:4b:50:e9:c2:7c:d4:22:18:9d:90:33:ef:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Validity
Not Before: Oct 21 10:00:32 2025 GMT
Not After : Oct 22 10:00:32 2025 GMT
Subject: CN=765824f8c534f0bb593a776e75114dec546dca47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:df:4d:04:f0:3e:0e:9f:b7:c2:f9:9e:6f:
51:d5:ea:46:ac:e9:68:e5:99:c9:5f:e4:a1:01:a1:
b2:6f:02:c7:33:a5:92:3a:67:fd:80:76:0f:3a:2a:
bd:78:88:0c:09:06:23:5a:bf:8d:78:1b:c9:bf:6f:
28:ff:1a:d5:bc:b2:89:ba:79:af:a6:43:ec:dd:4d:
a0:1b:c8:29:0a:2e:57:d4:a5:e2:92:79:3d:39:bd:
2b:57:3a:03:f7:14:2f:96:e0:06:16:c8:a3:8a:85:
3d:c4:fb:b1:c7:41:a1:3b:f8:3c:ca:5a:92:1f:5e:
ec:46:2a:c9:05:1a:30:b7:1b:91:39:0a:b3:8f:7d:
48:18:be:3a:1c:e2:33:49:14:64:9b:68:55:cd:d1:
1b:f8:6f:43:75:71:1e:85:9d:c6:aa:d4:6d:20:65:
bc:1f:94:82:c6:33:1c:1a:3e:bb:79:e3:1b:3a:a8:
4d:38:cb:80:92:f3:96:8c:01:03:ae:46:f0:e7:71:
87:4b:40:82:26:40:1f:8c:42:d3:b3:82:8b:42:7f:
00:fa:c4:8e:1b:2a:10:7a:70:3a:d5:57:15:0b:d9:
94:0e:e2:9c:a5:95:ad:5c:ec:82:31:e3:a4:eb:0b:
76:58:81:8c:cb:0c:bb:a9:89:ec:37:f5:78:69:23:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:58:24:F8:C5:34:F0:BB:59:3A:77:6E:75:11:4D:EC:54:6D:CA:47
X509v3 Authority Key Identifier:
keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:e5:96:14:49:59:48:a9:0a:11:82:d3:83:db:30:d3:08:
6e:57:3a:a0:0c:a8:18:4a:be:9b:7e:e1:b7:65:d7:0d:d0:f4:
3a:75:66:2a:32:03:6f:c7:24:80:87:26:6c:f0:3a:f4:73:9d:
23:a0:94:5e:fd:65:cc:59:d5:c1:74:2c:b5:e5:00:dd:d9:3d:
7f:ad:fa:02:d1:3f:57:61:35:b5:3d:73:ee:4e:d6:65:cf:b2:
69:12:c5:6f:2d:05:e9:3f:b0:e1:91:4b:14:aa:8c:96:32:8a:
dc:0e:b1:fd:31:f4:f8:8c:0f:83:33:55:c5:d8:28:98:e0:bd:
12:ba:59:fb:8a:29:62:b6:6a:81:f7:d1:bf:3e:52:63:6a:62:
98:d4:68:68:62:99:44:d0:c5:16:81:7d:e5:ee:11:7d:2a:02:
6c:7d:0d:17:83:d6:18:b9:47:cd:b6:20:f2:97:4b:c7:ab:ec:
df:61:51:aa:54:7c:f3:c9:db:83:59:a2:ed:d1:8a:58:e0:42:
dc:67:59:49:6f:49:ac:d2:52:09:bd:1d:e4:a5:dd:c9:8b:b5:
5a:82:e1:70:44:a2:11:ee:10:ed:16:f0:39:69:41:5b:11:29:
75:35:ac:6d:a9:62:af:cc:1c:2e:0c:b2:54:4b:eb:ab:43:29:
ab:70:18:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:14:01 2025 by rpki-client