Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: PH4TXsUJY9fMiNO/noBHoblGp1z2qTq4OjJF5ZfOYb4=
Subject key identifier: 74:32:08:B1:12:6C:F1:C7:27:66:EE:69:1F:80:03:AD:D8:84:C0:F3
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019A0AEF6222D9F89194DE5AEEB50619CA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 1364
Signing time: Wed 22 Oct 2025 08:00:51 +0000
Manifest this update: Wed 22 Oct 2025 08:00:51 +0000
Manifest next update: Thu 23 Oct 2025 08:00:51 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: qowhcjof0yUVFJa0nadcaFqQJxI2DTQ8XIqWSqkToE0=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ef:62:22:d9:f8:91:94:de:5a:ee:b5:06:19:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Oct 22 08:00:51 2025 GMT
Not After : Oct 23 08:00:51 2025 GMT
Subject: CN=743208b1126cf1c72766ee691f8003add884c0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:a7:a1:af:f7:8e:f1:46:db:59:34:9d:09:
66:e2:c9:81:0d:60:08:0d:e0:70:a4:ea:bc:b2:ca:
cd:93:9c:4d:e3:e3:be:db:93:5c:60:4d:f1:88:cc:
aa:5b:4e:6d:61:8d:a5:80:ce:08:a8:72:84:09:6b:
58:cc:a0:8e:12:5d:b3:15:d1:44:14:c5:c3:64:72:
07:95:6d:0f:79:e8:b1:ea:a8:89:8b:b4:b9:f7:91:
61:d2:86:7b:88:cd:3b:6e:27:9c:ed:ab:04:1f:64:
57:79:e7:e6:c4:1d:bc:05:c3:a3:d3:c6:03:c0:22:
3f:bf:4e:fc:e2:cd:56:2b:b9:7f:66:6e:8d:98:cc:
47:80:2b:a6:2a:b6:1b:cf:b7:5d:6a:cf:a6:a0:7c:
39:ff:11:62:34:27:14:c6:03:a6:e4:93:f6:5c:4f:
0e:3b:4c:3c:5a:86:83:a1:c9:68:f8:37:6b:69:71:
27:8c:5b:31:e8:5b:26:96:42:63:7d:40:3f:d0:ef:
f7:32:60:83:6d:d7:5c:5b:13:99:10:ec:a1:d3:0e:
87:b8:57:c0:1a:a4:1b:d4:e3:92:3b:b3:98:ba:1a:
de:d4:33:f2:05:27:69:b1:25:ab:09:28:70:25:b9:
06:3f:a1:0f:85:0e:1a:e7:c6:3e:27:9e:b3:54:c5:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:08:B1:12:6C:F1:C7:27:66:EE:69:1F:80:03:AD:D8:84:C0:F3
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:36:42:71:bf:e9:93:12:0e:67:a2:2d:6d:84:9f:e0:b7:ff:
d6:bc:d3:f7:d4:59:4c:7d:1b:c7:c0:6a:51:4a:d8:fa:cd:d7:
6d:4b:7a:6b:4a:2a:85:9f:2b:a2:d1:e3:99:e1:2d:c6:a2:b3:
39:15:55:2d:cf:37:f3:38:47:6b:ce:3b:ff:3e:55:86:33:8f:
07:97:1e:87:92:c9:bc:c7:89:9c:1d:c9:6b:65:59:ff:3a:52:
04:d0:d4:6f:8d:57:a2:a1:36:3c:fd:43:72:9e:c2:d1:b5:41:
b9:81:46:eb:4a:63:e7:8f:ac:86:0b:24:03:0e:4d:28:f8:85:
ec:1e:9f:3c:e3:3a:4f:dc:e7:e1:b7:f9:d4:46:71:c2:d9:ee:
6d:aa:22:d7:7e:76:fa:11:60:f3:70:18:dc:c1:80:24:ca:1f:
ef:2f:2f:78:ef:1f:fd:dd:89:9d:5e:ec:c4:64:20:0a:6d:fc:
af:1c:75:6e:79:fc:f3:d0:8a:53:a6:61:92:2f:f0:76:5e:bc:
cb:43:14:e1:ff:65:c6:a8:05:2b:85:18:a7:d0:1b:15:6a:e2:
bd:33:1a:88:b7:97:bc:43:ed:c3:03:a3:db:cf:fa:a0:27:59:
12:e4:6a:82:28:0c:b1:64:07:25:44:9a:f7:c7:7a:fe:71:b5:
ac:35:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:49:22 2025 by rpki-client