Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File: m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier: 5oQ+Tx5lGmzL6uCBdfprTdbqzpMISXBjbaUph7+Riso=
Subject key identifier: 5C:B6:C4:97:B8:11:D6:3F:3D:08:9A:29:36:F5:C1:AD:9A:A8:7D:C8
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 019A23D378F396F7DA396A8A99F851950039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 04:00:52 +0000
Manifest this update: Mon 27 Oct 2025 04:00:52 +0000
Manifest next update: Tue 28 Oct 2025 04:00:52 +0000
Files and hashes: 1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: e4TW1sCWTqsm7rYMqpKBnSoNO6GJllHiio+4L19RbzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:78:f3:96:f7:da:39:6a:8a:99:f8:51:95:00:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Oct 27 04:00:52 2025 GMT
Not After : Oct 28 04:00:52 2025 GMT
Subject: CN=5cb6c497b811d63f3d089a2936f5c1ad9aa87dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:f9:fd:3c:a9:ba:04:91:e0:41:2a:19:0f:
26:6d:d6:b6:9b:2c:0d:b7:bb:09:93:e0:3c:f3:22:
ba:42:28:e0:dc:40:1e:a7:18:ba:60:47:ac:c4:e1:
fe:66:53:15:03:55:17:27:e2:ac:1f:4c:1b:c6:27:
9c:3a:17:43:4e:2c:ef:d2:38:69:55:e6:4f:bd:38:
64:2e:84:05:de:c3:22:df:0b:b1:ac:4d:6e:99:e4:
8e:5e:82:1f:eb:8c:b1:da:4d:c1:18:8e:99:7d:bb:
03:db:ea:4e:eb:08:0c:8b:eb:3c:43:30:02:a3:c4:
43:0d:e5:2d:76:5b:44:3d:f0:cb:1b:8b:d9:ae:4b:
4d:e2:22:5d:7a:90:b5:23:5c:5a:54:fa:37:2b:65:
b2:1b:f6:70:14:48:8a:5d:48:90:ab:f4:f5:9f:37:
0f:8c:11:da:37:1d:21:cb:48:69:f8:34:f5:5b:0b:
08:e5:e1:e0:88:cf:bd:a8:ac:6e:ea:d9:04:38:e2:
be:07:25:31:be:a4:f9:ea:b3:10:1e:b7:31:10:f0:
7b:e3:f5:4b:f2:35:b1:b5:e8:54:94:ce:51:ff:22:
4f:48:ad:90:4b:32:70:6c:75:f4:90:0b:53:92:10:
a2:b0:1b:16:01:a3:16:c8:2f:7d:7c:ac:6c:d8:13:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:C4:97:B8:11:D6:3F:3D:08:9A:29:36:F5:C1:AD:9A:A8:7D:C8
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:68:b3:4e:7e:9c:df:0e:91:27:dc:c7:f1:0d:4a:af:28:24:
82:50:1f:b4:22:e5:74:77:8e:d5:0c:48:6d:34:3b:d9:fd:61:
a0:6e:32:b5:1f:d2:5c:35:ce:c6:dc:df:35:41:20:75:7c:4f:
2e:ee:57:a7:cd:50:46:55:f4:44:10:9c:89:ee:9d:86:6a:6a:
2f:94:03:a0:58:23:55:75:5f:e1:51:f8:3f:a8:34:8d:8b:93:
44:7b:0b:23:4c:cf:fc:73:50:0c:54:5d:db:4f:af:41:b8:fe:
54:24:c8:56:d8:e7:94:d2:32:9d:c3:2d:3d:69:f8:cb:dc:0b:
77:83:a8:32:2a:33:06:1a:fa:3b:e0:a0:7d:3b:7f:77:b3:6b:
7e:90:3a:fb:16:3f:89:2a:d7:13:4c:90:d2:74:b0:26:24:4f:
de:33:5e:06:bd:b8:ab:00:02:83:23:13:1c:ee:ca:90:27:54:
9c:c0:33:3c:d9:13:d6:d6:82:83:1b:fb:23:29:28:5b:a6:aa:
20:a8:41:aa:b5:e8:e4:f9:5c:90:1d:1a:f7:54:10:0e:61:56:
00:3a:30:eb:ed:fd:7e:e4:33:60:c4:92:1d:85:85:60:d4:84:
a5:3a:25:98:d7:e3:c5:15:20:b5:62:01:7d:18:62:9c:78:90:
ab:ec:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:50:34 2025 by rpki-client