Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: 2XTNEXVdRcH7aa5gSVoDx1o8dWo7BM23KdMZgkCkgj8=
Subject key identifier: 1A:D8:FF:EF:1C:4A:AE:37:FA:78:90:47:16:FB:39:09:EA:EE:2B:5E
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 019A70A578A66DB412F4AAFE493BAD7ED326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 1524
Signing time: Tue 11 Nov 2025 02:01:23 +0000
Manifest this update: Tue 11 Nov 2025 02:01:23 +0000
Manifest next update: Wed 12 Nov 2025 02:01:23 +0000
Files and hashes: 1: dX70ap0ffv2FBe6b9Bt26afmx5k.roa (hash: cA6YfbXERPxQEeXnO3dLN4qw3GbtwfitkG8Nn52ipuk=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: f5C6nAmHvciOVywN4TcaQJDmZpUkMvrT4B17AII9RO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:78:a6:6d:b4:12:f4:aa:fe:49:3b:ad:7e:d3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Nov 11 02:01:23 2025 GMT
Not After : Nov 12 02:01:23 2025 GMT
Subject: CN=1ad8ffef1c4aae37fa78904716fb3909eaee2b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:b0:03:ce:02:a1:c7:30:2b:f4:ab:f6:07:
45:a7:bc:6d:e3:72:74:ab:05:22:cc:bb:be:be:d7:
75:3a:3c:f4:b2:49:d6:e3:5b:d7:46:12:03:af:d3:
11:6d:4f:a7:f1:b9:e9:0b:08:5d:f4:d8:19:57:61:
c9:33:1f:b5:65:47:fe:cc:80:33:71:91:a2:a4:5a:
11:df:b0:06:af:c6:66:4a:70:98:ad:06:9e:2f:ef:
44:69:14:50:bb:83:7e:cd:ec:4c:06:05:ff:77:0b:
41:71:d9:d3:3d:a3:c9:ee:c8:4e:3a:bd:5d:c8:cb:
4e:4a:74:ce:13:a0:1d:c3:a2:01:a4:96:a4:7c:5a:
d2:a5:16:06:9c:fd:86:35:d7:71:9f:2f:8e:29:13:
fe:f4:2c:1c:30:8d:be:8a:70:3d:a3:41:db:e1:b7:
c5:b9:e6:11:c2:79:f2:3f:3d:7b:32:7f:af:8d:f3:
e0:28:0e:ae:f7:30:d0:6d:85:77:bf:48:a8:4e:e6:
e3:90:cc:83:68:62:8c:e2:7f:0b:1a:85:bf:0a:b0:
f3:46:7a:35:21:2f:41:fa:46:a1:e2:90:17:66:e5:
5b:56:ef:42:26:cf:80:00:e9:0e:12:f6:a7:be:a2:
93:3c:e8:c0:a5:28:51:01:f7:0d:a9:9c:a0:0f:fd:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D8:FF:EF:1C:4A:AE:37:FA:78:90:47:16:FB:39:09:EA:EE:2B:5E
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1c:9f:a9:07:19:25:77:18:02:ce:3a:68:9d:9a:31:88:85:
b4:1c:6a:74:37:df:ad:27:e2:0c:88:a5:51:aa:37:38:60:21:
54:8a:10:73:7c:ca:7f:33:28:44:5a:fd:35:24:db:64:49:8d:
ae:7c:12:d3:0f:e1:c6:21:35:85:77:3a:ba:7a:81:73:fc:94:
9e:05:89:87:9c:9e:7c:6a:9d:6a:50:2e:7a:cf:d0:a6:1c:23:
1d:28:56:3b:a3:dd:e9:ce:4a:e9:b0:3a:12:0d:38:b1:6f:8a:
22:f5:07:0e:bd:f3:7e:29:14:fd:2b:69:1c:1c:44:48:e7:6a:
6f:f2:26:85:03:d7:41:70:2b:b0:8d:1f:7f:85:61:29:0b:30:
a6:63:79:d1:c0:48:99:e6:be:12:0e:e2:75:95:e3:ab:4b:d5:
86:5d:41:da:b6:44:74:dc:be:3b:5e:4e:2b:5c:ff:74:d0:d4:
4d:34:96:b9:e2:82:26:9b:00:e5:a9:76:86:e2:74:18:30:d3:
c5:dc:03:18:62:35:88:de:a5:67:97:e8:80:06:ce:87:8d:a4:
3b:9b:52:60:1b:2b:e9:e6:50:13:ec:c1:e1:98:ee:5f:ca:01:
9b:ed:a4:b0:a7:fd:b8:34:47:4b:b2:06:7b:e2:bf:ad:4f:ef:
d5:1c:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:28 2025 by rpki-client