Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier: +YFvmdtY3SFJDZBIEVTpYKaD+rug7ptW5itiLg9/fjw=
Subject key identifier: 9E:DE:0C:4D:64:CE:2F:D9:DF:3E:35:1F:E1:65:5F:E5:78:B0:F2:8F
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 019A2E207383BF4836918C6347E1C8F50181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number: 12FB
Signing time: Wed 29 Oct 2025 04:01:09 +0000
Manifest this update: Wed 29 Oct 2025 04:01:09 +0000
Manifest next update: Thu 30 Oct 2025 04:01:09 +0000
Files and hashes: 1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=)
2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: uWTSolyVhfmh2IZa1dL8nzvOkMbTtQnjv9zKIDTE/Ig=)
3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=)
4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:73:83:bf:48:36:91:8c:63:47:e1:c8:f5:01:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Oct 29 04:01:09 2025 GMT
Not After : Oct 30 04:01:09 2025 GMT
Subject: CN=9ede0c4d64ce2fd9df3e351fe1655fe578b0f28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:7d:12:a1:18:2d:46:7b:e3:dc:dd:bf:10:
ca:25:18:ee:9e:7f:a1:78:6d:48:09:4e:fa:de:a5:
42:ce:14:a3:d1:ad:21:31:cf:56:f8:c9:ac:26:2e:
3d:99:7d:41:03:5e:cc:34:78:18:47:2a:22:45:22:
99:da:3d:bb:81:9d:63:f5:07:1a:e8:35:f3:a1:ab:
65:c5:13:00:6a:7e:96:ec:af:f4:d5:7d:2e:71:36:
50:16:23:4f:bf:1d:65:4a:74:ca:c2:b2:61:29:d8:
bd:d0:81:f1:c9:09:b2:7f:d2:67:30:e2:b2:6a:81:
57:80:f9:28:40:cf:22:b3:41:5d:7a:3b:10:0e:ca:
25:e8:69:18:38:9f:30:06:1b:f9:1b:d8:d7:56:79:
39:a8:09:35:0a:75:6f:5d:41:01:43:51:cb:28:ec:
d4:b3:53:28:94:33:e0:50:7f:45:28:74:35:a8:95:
49:de:9b:f1:f6:7f:f2:71:01:2f:ee:3f:af:e2:59:
80:ad:a5:9e:4d:d7:17:eb:a5:9d:7b:66:7d:ae:3c:
ee:8a:98:5b:5d:19:7a:5a:52:12:10:55:ad:ab:40:
0e:c8:2e:6c:d5:dc:ed:d1:6f:0b:02:01:5f:0e:2f:
19:17:69:1a:e3:1e:d1:03:45:bc:3e:b9:9d:eb:60:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:0C:4D:64:CE:2F:D9:DF:3E:35:1F:E1:65:5F:E5:78:B0:F2:8F
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:42:7d:91:a7:e0:f2:e6:44:13:92:3b:17:87:e4:e7:7b:62:
89:d5:a6:29:6e:c7:0d:91:db:f0:9e:3b:07:31:0d:0b:83:6e:
20:cf:75:70:da:02:82:44:f7:28:26:98:27:d6:72:f9:a7:f6:
2e:32:cf:75:6d:6c:a6:9b:28:06:c1:e4:71:ed:0d:ff:74:d0:
b6:68:2d:6c:9b:20:d0:c2:16:85:d0:35:43:fd:9a:14:21:cf:
b3:ab:c7:42:e0:dd:02:f2:ec:cd:39:c9:ea:49:4e:b4:68:a8:
31:0b:7b:f8:dd:e8:1e:e8:e2:20:41:7a:31:fe:8f:4a:5b:09:
0b:18:e0:43:21:ef:08:57:6f:ac:9e:43:de:c1:5b:dc:2c:3f:
20:c9:eb:70:19:c9:a2:63:04:84:1c:12:d4:0c:12:66:d0:d0:
e0:c6:db:93:5f:93:1b:13:a4:5a:64:cd:21:b3:f8:36:80:d3:
1e:50:ca:89:e4:3c:54:e1:f0:6e:2f:68:d0:97:8e:7a:81:10:
fe:76:56:34:c4:ef:71:31:aa:a0:9f:c6:e7:84:00:03:3b:f6:
62:4d:05:e6:42:ac:57:7f:7c:c5:a1:0b:a7:83:65:9d:da:93:
87:a9:d2:7f:b6:6f:d3:37:db:00:c5:90:7c:a8:38:11:9e:6c:
be:94:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:56:22 2025 by rpki-client