Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File: mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier: sN3aDzbce5m9Lrxza2oaw8aaWDS+pWAlG8uOziEXBm4=
Subject key identifier: 45:E1:D9:84:38:52:04:8C:0A:08:7A:9F:C5:A8:B6:50:05:CE:68:4A
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 019A2553588DA0154E6638976BCC267835F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number: 13E6
Signing time: Mon 27 Oct 2025 11:00:10 +0000
Manifest this update: Mon 27 Oct 2025 11:00:10 +0000
Manifest next update: Tue 28 Oct 2025 11:00:10 +0000
Files and hashes: 1: 8d3irncdHLZkdRnMP5XTaUSwUDg.roa (hash: rzsl5FRJP8PNH7SlWyQWAee7OQ1otGN4ArKngJgMF9U=)
2: Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa (hash: S5Af46ICAzl/XprWaWxfdUsVmQ9qZwM6fg2ZXROy37M=)
3: c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa (hash: nRoWd4CNF6uxWBOBAy58vxnhfOJmaxOekRUGTIQqLKA=)
4: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: SSjJsA8j9eb8+7nY3hYCtYVxQAqQFCf9cNK3d1t0z+Q=)
5: yODnLhtEhpSHZKcWtftsr2wrfHM.roa (hash: vGS7Y/f4ssyV0t0WiPGg8Dqt5gZnLrzS3R4VljxDfWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:58:8d:a0:15:4e:66:38:97:6b:cc:26:78:35:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Oct 27 11:00:10 2025 GMT
Not After : Oct 28 11:00:10 2025 GMT
Subject: CN=45e1d9843852048c0a087a9fc5a8b65005ce684a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:2c:99:3b:6b:43:db:f2:25:59:65:07:8c:
ce:2d:de:17:c8:4f:af:d5:5d:c2:92:c9:3f:1f:cc:
04:1d:8a:83:5a:0e:1d:3a:a6:bb:cd:17:70:62:ed:
80:9d:6c:53:f5:d3:8e:d3:4e:13:54:84:10:95:40:
77:76:c3:7e:70:fe:05:d0:0b:bf:94:2d:5f:17:5f:
5a:87:3b:99:d1:39:b5:8f:e4:61:fe:27:1f:38:7c:
5d:0a:93:b4:71:cf:62:03:69:8c:d7:79:78:34:08:
86:27:71:a1:a1:6e:0b:de:62:50:89:1a:73:40:c8:
c6:4b:73:45:ca:41:28:61:ff:e8:63:9f:a2:9b:05:
53:8d:5d:4d:f2:2b:b4:f8:77:11:b5:ea:b1:87:4b:
60:af:64:f0:d1:f6:27:52:cf:dd:96:98:0b:47:d9:
75:79:32:91:37:72:7c:b6:d7:28:1b:a8:d3:17:36:
81:8c:61:42:29:76:b0:f5:c7:7c:f6:3c:90:f1:97:
18:a2:64:22:60:01:b8:9b:85:49:3d:4b:45:b8:5c:
de:b2:8d:f0:51:f0:9d:ba:07:0f:0c:4e:44:f7:ae:
49:30:f0:50:f2:24:fb:eb:d8:8a:8b:e8:45:bc:68:
cf:71:7f:03:74:90:c3:d8:28:4c:48:3b:27:80:20:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E1:D9:84:38:52:04:8C:0A:08:7A:9F:C5:A8:B6:50:05:CE:68:4A
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:60:21:dd:13:d7:32:71:37:92:a7:ee:54:89:0c:34:57:64:
1b:9c:26:92:e7:df:ad:7f:15:12:ad:ef:61:00:50:5e:11:a8:
16:bd:b4:7f:7c:85:c8:9b:d4:c2:52:30:ef:9a:b2:ca:2c:e3:
82:f9:af:64:e7:c0:a4:49:32:c8:1c:5e:a3:df:90:c3:3a:d2:
d5:75:f2:7b:85:4a:7e:83:02:af:31:42:62:d1:02:65:54:20:
17:51:b8:3b:eb:f4:90:08:92:1b:f1:1c:7f:74:6b:8f:3d:a1:
f1:28:2b:8e:02:a1:a7:57:68:27:5c:bc:ac:c9:e7:25:d3:64:
c4:30:84:bb:0b:21:2d:3c:da:ec:36:2e:98:f5:48:fa:cb:0c:
56:1f:0c:49:cc:dd:4d:88:af:79:e7:1c:3e:1e:21:63:1b:c5:
df:85:3b:44:78:56:b6:62:4c:07:16:39:1b:8a:79:7f:4e:ef:
6a:c7:10:92:25:88:6e:81:95:66:5d:09:2a:f1:5b:e2:31:c3:
59:40:99:3c:c4:b6:d1:cb:88:02:b5:c4:60:a7:c6:af:b8:86:
1f:b7:29:7d:d3:f0:d1:c5:6f:6b:31:d1:fd:5e:ac:91:97:6f:
dc:24:f4:06:3b:5c:f3:1d:c1:cc:48:a5:f1:bf:7f:7e:b9:c4:
f1:52:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:23:24 2025 by rpki-client