Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
File: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft (raw, json)
Hash identifier: cvMimX7PBDxjm5SdZJGZhp2N+dAJwD4FRGt3D/XIP0w=
Subject key identifier: C7:8D:82:79:79:E1:9C:C9:F2:A5:45:04:5C:44:74:E7:E8:59:EF:42
Authority key identifier: 9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
Certificate issuer: /CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Certificate serial: 019A22C06ECA95657EADD17844921C36045B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
Manifest number: 14FC
Signing time: Sun 26 Oct 2025 23:00:27 +0000
Manifest this update: Sun 26 Oct 2025 23:00:27 +0000
Manifest next update: Mon 27 Oct 2025 23:00:27 +0000
Files and hashes: 1: 1-gKSfvIN-nj0ZloNW8DzQVcPMUI.roa (hash: jjlcCOoXxhW/QhUDEGdmxYJMbYMGzmfukEFaEb16efs=)
2: Q5geBAbDdm6rceW2SdCihO9xnZc.roa (hash: qZEJzIP9JlpWgbCaDR3U8w6e1Yf/y2ElsSB5u5JRzoI=)
3: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl (hash: KTCx8o5LbNz528Tc8AKQhwAzn5YpZcddPmpCtCkjjsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:6e:ca:95:65:7e:ad:d1:78:44:92:1c:36:04:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Validity
Not Before: Oct 26 23:00:27 2025 GMT
Not After : Oct 27 23:00:27 2025 GMT
Subject: CN=c78d827979e19cc9f2a545045c4474e7e859ef42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:04:fd:8c:8a:34:b9:a6:dd:ca:27:b6:8d:
7a:0d:b2:5d:bd:b2:7f:eb:22:d3:b3:92:50:cd:03:
fb:86:62:0e:55:2f:f5:df:35:07:f3:2e:99:fc:b5:
13:12:fc:15:0e:93:b0:01:b9:53:c9:c1:77:29:be:
09:08:f3:38:7a:b5:9b:42:43:8c:a7:fd:3f:b6:74:
08:a2:f1:44:6e:39:5d:65:90:0c:7f:b3:de:e5:38:
16:24:41:2c:39:11:9c:2c:8b:66:02:75:df:11:8c:
41:f7:68:57:10:00:1c:99:45:63:27:61:d2:0a:5e:
97:e9:ae:11:6c:fe:5c:9c:32:40:43:c3:5b:68:14:
9f:a1:4f:88:9f:d5:d0:f9:de:26:33:5a:f0:03:f2:
59:d0:90:2c:eb:26:a6:6b:98:47:1d:e3:8c:03:0b:
c7:23:7a:89:0c:2d:5d:b3:ba:16:19:70:8e:97:41:
27:ad:df:57:9c:ee:61:f8:23:b3:23:1a:ff:81:93:
de:a3:7a:7a:08:5a:23:47:ab:cc:fd:a8:38:dc:ae:
55:71:46:bf:be:89:b3:f2:5e:04:74:33:0b:93:46:
e5:65:dc:e7:b9:10:01:9f:fd:39:63:b1:b9:2d:9c:
b0:e1:5e:34:c9:28:cc:8d:cb:f8:58:95:75:27:b5:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:82:79:79:E1:9C:C9:F2:A5:45:04:5C:44:74:E7:E8:59:EF:42
X509v3 Authority Key Identifier:
keyid:9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bf:df:c1:97:0b:b5:49:83:5e:ed:87:57:a1:4c:ba:cb:32:
2d:cc:e6:68:96:02:57:6e:15:f9:a0:ae:77:42:09:be:51:ef:
ea:b4:29:e8:1d:aa:56:fe:6f:92:e8:a6:76:54:f7:e9:e2:dc:
72:26:94:66:0a:6f:37:ed:ad:8e:03:17:6a:04:48:e7:df:93:
d7:cd:f8:71:35:ac:1c:49:bc:9a:8e:53:9c:87:6c:50:18:e6:
3a:18:7f:9a:7d:50:79:84:80:5a:84:10:5e:a9:ae:d4:ae:db:
a5:82:4e:f8:67:ff:1f:02:40:44:7d:a4:49:ac:61:d9:d7:89:
6c:a1:f6:60:88:62:9e:28:b6:eb:b6:44:95:c7:82:79:84:20:
68:f3:53:e2:5f:47:d2:82:1d:c6:2d:48:66:d2:bb:cb:73:16:
72:ca:28:d6:6f:e4:a1:98:54:c4:4f:42:80:0f:76:98:b7:3c:
1d:8a:18:ce:1b:7a:cf:f6:90:14:7a:b3:6a:35:3d:41:97:c6:
5d:78:dd:e7:c7:77:9e:90:52:99:d5:ac:c7:e2:ed:5c:a3:f0:
03:87:ca:de:3c:75:da:02:cb:3a:ed:de:8d:0e:1f:5d:70:51:
87:8f:33:52:73:b6:9f:37:43:93:8a:5f:9d:35:98:35:31:e0:
64:3b:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 08:59:19 2025 by rpki-client