Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File: mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier: beKxAoOX32YQz4qyI+19oDA49QkLwt+PqQfNfSgHkMg=
Subject key identifier: C3:8E:16:3A:6E:07:7D:9D:47:24:5D:B8:80:89:94:EC:A0:4B:C2:20
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial: 019A71B8D16414FF46381A90E9929E198912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=)
2: Oo8Lhh4RlCa7xttIyBwx5LDEUoc.roa (hash: wrOx7qjHfGVS+J5guJXeAV7Who7QhhesA0WvqwwUSt0=)
3: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=)
4: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: fwBTjYRz7gzdvfc9w4weBgxbCxY4zQp/R4JxldNjrIM=)
5: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=)
6: vHN5MXtzccXdspQhStY4Z57CoPM.roa (hash: 4HXRwfo/a7HGgHSGpok7A4ldu5noCeEQDTLX8aICufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d1:64:14:ff:46:38:1a:90:e9:92:9e:19:89:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=c38e163a6e077d9d47245db8808994eca04bc220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:b6:83:83:96:2f:14:63:fe:3e:3a:d2:09:
24:b7:08:2f:11:84:e0:52:16:de:00:6e:8a:39:14:
8e:3d:1c:06:66:2b:c7:f1:43:69:f7:18:e1:b4:58:
ea:20:14:16:8b:0d:7e:63:79:24:e9:4a:2f:34:1c:
4b:4f:ec:8a:cb:59:40:8c:c9:2e:3e:f2:21:5f:1e:
83:01:6a:b2:50:f5:e7:4f:7c:10:ff:f3:e0:87:f7:
3f:d4:cc:97:92:bd:06:5e:4d:90:68:17:6e:1f:24:
e8:49:1e:dd:3a:92:27:ea:2f:65:c8:f5:24:02:ce:
52:66:cf:5d:28:97:31:93:d5:ed:a8:31:b3:ea:31:
dd:8a:93:6c:07:3f:28:6f:fa:12:6a:e3:8e:70:69:
05:c4:99:7f:04:d7:96:c8:d1:1f:94:d2:f2:5e:92:
de:47:75:33:e1:e2:a2:84:7a:cf:62:00:a5:51:62:
57:f7:e8:66:ab:ed:06:8c:e4:0e:dc:4c:14:fc:3d:
ce:69:7d:3e:16:ef:52:52:5a:86:cf:ff:b8:1b:da:
93:5e:86:62:a4:d4:ae:74:4a:00:59:b7:b4:06:00:
95:af:95:26:a1:5c:5e:f1:a0:65:0a:f3:60:4e:ad:
d3:07:dd:ab:8d:ee:b8:c0:00:36:08:87:84:63:45:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:16:3A:6E:07:7D:9D:47:24:5D:B8:80:89:94:EC:A0:4B:C2:20
X509v3 Authority Key Identifier:
keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d9:70:4f:bb:7f:5a:f6:87:86:77:1f:2a:46:9f:04:44:5d:
29:78:f5:5e:df:21:b9:29:ed:b4:44:2f:d0:23:55:b6:92:f6:
95:ce:af:29:70:bc:d4:81:7f:86:13:96:ff:61:0b:5f:38:58:
0b:b0:3d:e4:87:76:65:62:31:ed:a6:97:ca:b8:c6:fa:70:4f:
f2:9d:bf:56:3d:56:21:5e:ae:b9:60:f5:6e:db:e0:2c:ea:7f:
7b:b4:04:66:f1:e0:05:f2:e5:37:75:d7:63:30:e8:fb:f2:95:
90:de:57:3d:d4:55:9d:0f:9d:c0:66:0d:7f:8d:78:45:9f:d3:
df:19:85:6b:d9:8f:c5:16:bf:5f:34:40:ee:79:f6:87:38:25:
f6:46:52:1c:c2:ba:1a:e5:65:f9:be:1b:65:8f:08:c8:4a:56:
5c:20:bf:64:34:77:9f:ee:42:f3:e6:af:78:c9:8c:97:e9:1c:
73:f6:34:c8:dc:85:d3:52:56:af:59:61:30:76:dd:09:91:4a:
cf:ff:ba:d9:a7:c2:49:a3:94:12:8b:ca:60:c6:36:6e:32:ea:
8a:f8:87:29:d9:d0:ce:b3:bb:01:89:ea:78:75:26:af:e6:7b:
e8:8f:90:54:01:fc:5c:86:19:88:50:34:9f:18:b1:bc:d0:f7:
d3:a0:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:06:02 2025 by rpki-client