Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: 1bVBidTCGHLXmMT5wqJPDlypMdPeYVlnEqs3gJRkoQM=
Subject key identifier: AF:79:9D:81:B3:DE:F5:CF:11:1D:B2:0A:B0:D3:C0:FD:22:15:75:33
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 019A2409FE267AC418640B9963E92F1E2187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 05:00:25 +0000
Manifest this update: Mon 27 Oct 2025 05:00:25 +0000
Manifest next update: Tue 28 Oct 2025 05:00:25 +0000
Files and hashes: 1: 2JXcaA80r7d-EIDaMijpbBPasoc.roa (hash: gf95/nywAYIZdNJbfxynwrtY4coqSX3R7aiF8YJONgo=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: UoTtvOB8CzsNDTeaRFVx11kHFMyOqZbeHQ2lz80O4h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:fe:26:7a:c4:18:64:0b:99:63:e9:2f:1e:21:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Oct 27 05:00:25 2025 GMT
Not After : Oct 28 05:00:25 2025 GMT
Subject: CN=af799d81b3def5cf111db20ab0d3c0fd22157533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:ff:66:c6:b3:f3:d6:50:c9:f6:36:65:ef:
16:6a:a2:7d:0f:0f:30:32:ce:ec:37:eb:a1:c8:f3:
85:76:31:54:75:3f:1d:4c:a7:9f:73:a4:78:05:50:
76:4a:a5:e8:17:fb:91:51:30:e3:07:0e:02:a4:56:
dc:bf:48:04:cd:12:57:43:02:8f:34:ec:e0:c5:28:
24:08:19:ab:f6:93:85:22:2d:0f:f9:5d:28:43:c8:
bb:65:eb:73:3e:aa:03:75:fe:f3:a3:dc:62:00:2c:
dc:21:49:a3:85:20:26:33:4e:41:26:bc:e8:b2:61:
de:2e:2d:fe:dd:dc:ff:75:70:c0:ba:3e:3e:02:e4:
6b:b2:e5:f7:48:12:2e:8f:a4:50:ad:e9:06:76:d2:
08:7b:f6:89:7d:2e:21:f8:73:9c:6f:0b:cf:e0:a9:
21:14:33:39:94:18:cb:18:71:13:11:ef:1a:88:f3:
95:c5:a4:c4:d0:38:b4:53:60:4d:5b:79:33:37:81:
69:e9:87:26:fe:25:45:89:4e:0d:8d:0c:51:8d:0f:
05:7d:1b:aa:da:c8:7d:a6:0d:4a:37:07:32:51:5a:
e3:4a:45:e7:f5:43:46:f4:ec:b3:ff:11:4e:20:68:
cf:af:1c:77:6f:9f:05:7e:c0:87:ff:a3:23:9e:be:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:79:9D:81:B3:DE:F5:CF:11:1D:B2:0A:B0:D3:C0:FD:22:15:75:33
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e9:a9:39:a5:17:e7:11:d4:be:18:a0:07:80:3c:94:e3:41:
f0:bd:03:e5:27:32:0a:9e:17:9f:f7:eb:04:69:9d:51:32:f2:
8c:94:e8:06:c5:c8:0b:41:30:9c:8b:c2:7d:9e:2b:3b:ef:0b:
1b:00:48:06:d8:61:3e:6c:54:cf:47:b0:85:e1:44:70:aa:01:
35:7d:91:ea:62:f8:77:46:d2:0d:6c:43:da:a1:81:ac:e4:1a:
c9:ff:8f:b1:5e:65:07:a3:15:e9:03:d7:28:fb:99:a9:13:88:
58:31:88:00:2c:35:95:0a:bb:b7:7c:ef:8e:8d:65:1a:7a:76:
eb:d0:d9:50:7a:ce:68:b2:51:58:3e:ae:14:39:ca:46:b1:4f:
79:4f:c1:57:3e:a6:24:8a:12:7f:a9:c1:d9:73:a7:d9:d9:6b:
69:84:c5:41:95:51:71:c4:d3:e0:09:82:d1:1c:97:96:14:98:
d9:9a:c4:86:b9:5b:b1:5b:84:d8:73:10:b9:ad:b3:e7:d0:9c:
df:7e:8b:35:06:66:a9:8c:d4:c5:ff:c7:f7:49:8f:0c:40:a4:
bd:ec:02:08:3d:be:fc:2d:0c:41:02:35:5b:91:4c:97:06:26:
d1:ae:e8:23:19:d2:98:79:17:aa:30:90:94:42:26:77:6b:24:
c0:6b:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:06 2025 by rpki-client