Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: KMfoWd1X0rFIT2bciNnevL8hj9RnzdU14g7jkIc+S0w=
Subject key identifier: 28:C8:CD:77:52:1E:39:41:42:9D:54:0F:58:FE:B1:36:DC:FC:AE:68
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 019A7225E5BA19382E3708CB2FA19A83B28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 06FA
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (hash: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: 0M1w0T94P3aMYyS85osLq63K1aXz4T5Ey1XDea0sLUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e5:ba:19:38:2e:37:08:cb:2f:a1:9a:83:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=28c8cd77521e3941429d540f58feb136dcfcae68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:33:a0:c7:c2:4a:25:5b:42:44:23:77:0e:
e2:5e:6f:8b:2a:52:cf:92:2e:d1:ae:78:51:f6:1e:
88:6b:14:a8:de:f1:14:6d:29:05:53:ed:aa:c5:fc:
f5:65:ee:a4:12:75:62:29:d0:68:fe:f3:5d:51:04:
5c:29:79:cd:85:26:5f:69:eb:46:44:cd:4e:d3:d4:
58:00:1f:f5:72:e9:de:c7:7e:8f:58:5b:35:0e:36:
9b:a7:30:7c:2e:9d:e2:88:3d:0e:85:5a:1c:cb:36:
dd:36:fa:0d:e1:a5:56:e2:d5:df:7a:56:cb:81:94:
68:5f:7c:76:15:93:e9:5b:59:d9:02:ba:61:a6:21:
69:d8:44:a3:c7:3b:14:6e:b1:78:52:99:e9:c6:2f:
ec:88:24:d8:d3:51:eb:4d:ec:65:b4:6c:4a:b7:b5:
be:b1:09:fa:b8:6e:4b:0f:9c:1f:e8:5a:ca:e5:bb:
d4:79:4b:65:8c:7a:01:67:e1:b9:dc:d4:ab:c0:34:
25:58:1b:1d:27:7e:ea:f9:6d:9f:f2:6b:fb:be:69:
ab:50:ed:20:23:e0:e5:8e:e6:07:1a:49:5a:67:67:
62:85:51:b1:e5:77:e4:17:e9:f6:5f:4e:2a:20:d7:
39:89:2f:e8:69:88:9d:4b:cc:32:b6:d8:b5:1c:01:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:CD:77:52:1E:39:41:42:9D:54:0F:58:FE:B1:36:DC:FC:AE:68
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f9:d0:14:bd:6d:39:16:b4:87:28:94:f6:98:4d:ba:c9:79:
b8:5f:79:0f:78:b1:2c:b2:20:0f:9e:ad:03:9e:8c:f4:6c:94:
65:09:58:bf:ff:a3:e0:a8:71:c6:f0:16:a3:22:ae:ad:a9:92:
ef:e7:c5:11:03:70:02:e4:15:87:ef:f3:dd:00:89:fd:bc:68:
2a:a3:43:2c:0a:40:b8:01:df:cf:32:8c:ff:29:9d:e6:58:da:
5a:c5:9b:4a:e8:90:f9:e0:66:74:0f:64:d3:a2:58:21:80:73:
a2:2e:15:4d:82:ba:3b:4c:2d:fc:de:af:3e:de:f7:7b:1d:81:
3b:18:0e:35:94:bd:44:ee:16:06:83:cd:fb:6b:83:be:a5:83:
94:9d:81:0b:6b:d1:8b:34:f1:14:53:5a:89:a2:fc:95:55:2e:
69:a0:16:10:67:f1:70:e0:ac:a5:b5:77:ee:bb:f1:62:3a:05:
20:77:b9:41:05:0c:8e:c5:42:34:33:7d:a9:ab:a2:93:65:85:
e8:96:34:41:04:5c:31:7f:53:53:ff:c6:a9:d4:ce:35:89:df:
b5:14:ad:b6:04:3f:12:3c:c4:2d:af:ad:86:1f:10:27:97:c6:
04:c3:1e:ca:9b:6a:64:92:f5:9c:99:9c:c8:a3:62:31:44:57:
f8:c2:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:08 2025 by rpki-client