Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File: m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier: tROXufhlWblGJABMg2l9m8c8HzUrWZf1Sd1JLu2WnU8=
Subject key identifier: E8:BF:EA:39:97:8B:C0:BA:6D:39:40:75:A1:84:D2:93:96:AD:8F:25
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial: 019A2553D7255535458E4AC53F5FD648A07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number: 128E
Signing time: Mon 27 Oct 2025 11:00:42 +0000
Manifest this update: Mon 27 Oct 2025 11:00:42 +0000
Manifest next update: Tue 28 Oct 2025 11:00:42 +0000
Files and hashes: 1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=)
2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: 1jYZN3U+gOWm6csGJii1pUvrenv2Uk7kIr4Q39eLVFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:d7:25:55:35:45:8e:4a:c5:3f:5f:d6:48:a0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Validity
Not Before: Oct 27 11:00:42 2025 GMT
Not After : Oct 28 11:00:42 2025 GMT
Subject: CN=e8bfea39978bc0ba6d394075a184d29396ad8f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:e2:77:e1:a6:65:97:3d:33:f0:04:76:f6:
f2:f8:51:9a:d0:98:e3:48:a1:69:80:9f:10:e1:1c:
de:d9:15:d1:4a:42:59:03:5b:fd:b9:1b:bc:c4:16:
4d:21:66:b1:d5:d4:9d:49:5e:e1:90:42:71:bc:68:
56:f7:65:48:3c:d8:2a:8b:92:1d:1c:70:9a:6c:53:
ff:0d:b3:c7:b6:f0:bd:4a:df:d5:9b:bb:2d:d9:c7:
d0:04:5b:36:8b:cb:c1:76:d1:49:69:5a:26:39:d1:
19:ae:e7:a4:00:06:42:21:98:1b:a9:c0:36:97:35:
f1:25:de:d7:0a:df:ca:5f:9d:6d:40:8c:25:eb:9c:
d7:fc:36:c1:a9:e8:f6:11:6f:92:34:08:2d:b6:15:
69:6c:18:7c:a9:d2:47:d1:1b:e1:f1:94:45:91:2f:
b8:42:81:92:bb:ac:5f:ee:11:c5:bf:e3:db:89:fd:
fa:d4:87:c3:8e:99:55:af:f0:03:9c:f3:ed:9d:74:
62:05:8c:c8:88:2b:68:6b:f6:5d:77:ef:10:9a:55:
e4:0c:3e:5f:e5:5e:5f:00:ab:c2:a2:23:25:30:4e:
75:68:72:b4:b3:b6:a3:a0:75:24:29:0d:5c:34:46:
18:66:0a:bb:46:29:9b:fc:1e:88:57:ca:67:b5:ec:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BF:EA:39:97:8B:C0:BA:6D:39:40:75:A1:84:D2:93:96:AD:8F:25
X509v3 Authority Key Identifier:
keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:43:34:c1:cb:0e:80:33:cb:bc:d3:ee:80:58:59:0a:87:
cd:38:f8:01:98:f5:33:ad:6e:15:c0:01:7e:8e:95:89:02:e4:
37:01:60:4b:4e:18:e1:1a:ed:b9:66:5b:17:90:b8:0f:99:ca:
1f:39:5d:3f:b5:0c:8d:e1:d6:ea:19:c8:51:e1:fd:95:22:b5:
cc:b0:d1:e4:f2:a2:3e:72:65:6f:10:16:29:7f:b7:bd:d9:a7:
67:e0:77:60:14:c2:ac:0d:e1:bd:25:67:54:31:f8:2a:b4:a9:
5f:95:09:0b:41:7b:86:7b:d8:cb:eb:7c:d5:3a:67:59:db:81:
59:47:3c:a7:0a:84:a7:dc:13:87:37:e3:cf:29:ba:bc:c8:27:
80:79:99:9c:f2:07:c1:3f:35:15:16:95:4c:7d:cd:ec:9a:20:
be:d7:d8:83:bc:71:ed:00:1c:0d:75:a1:19:46:41:d2:71:cb:
5c:11:3b:70:02:6c:9f:f6:74:f9:5a:59:78:33:bc:09:84:34:
84:4d:15:4c:62:5a:30:bc:dd:0e:ab:f5:ed:5c:07:ad:7c:3a:
30:00:94:09:52:3f:f2:87:7c:91:09:16:84:58:ca:6b:7d:a5:
0c:8a:45:52:57:50:3f:e1:a6:4a:ed:3c:c8:63:39:ef:64:dd:
7e:cf:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:04:22 2025 by rpki-client