Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: Qo+xLcdaVPN83nd5SRg5+AHClvpxwPOPtg86bmgjOvY=
Subject key identifier: 4D:6F:30:8E:AE:43:D4:4C:7B:DB:73:7A:ED:ED:EE:98:5F:11:C7:91
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 019A28F98B0A2B75E01AA5435F458E1B9730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 04:00:33 +0000
Manifest this update: Tue 28 Oct 2025 04:00:33 +0000
Manifest next update: Wed 29 Oct 2025 04:00:33 +0000
Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: nYxs/nT2BKhttEUUolIvJ4ctwfbWu7/YsdfB9UD4AWM=)
2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:8b:0a:2b:75:e0:1a:a5:43:5f:45:8e:1b:97:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Oct 28 04:00:33 2025 GMT
Not After : Oct 29 04:00:33 2025 GMT
Subject: CN=4d6f308eae43d44c7bdb737aededee985f11c791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:18:f3:e3:44:5d:12:ac:3d:05:50:94:f6:
5d:36:b1:3c:dd:47:5b:ac:7e:05:57:4b:1d:22:52:
26:a1:b7:8d:29:96:75:6d:4f:17:f2:c5:cb:5f:80:
c0:e6:72:97:9f:4e:db:4f:76:80:03:af:b7:61:7d:
0b:90:5d:a2:f3:6d:a4:3d:62:aa:89:55:ab:8a:65:
ce:66:9b:cd:b7:36:da:99:10:3a:ca:3f:c1:a3:ca:
86:44:0c:11:2b:b9:82:e8:69:85:63:26:ca:af:b7:
31:3a:9e:3d:7c:1a:54:9a:2d:09:a2:2e:15:c9:7d:
3d:f1:d5:64:3c:62:e3:7f:38:fa:2a:3c:74:fd:56:
6e:c4:85:9f:63:2f:ce:a2:24:45:a1:64:f6:a7:9a:
d0:ae:e6:2b:9b:79:78:61:a8:bb:ba:da:5e:5a:49:
2e:06:de:c9:d1:e6:ec:1a:21:13:f7:21:17:5d:f5:
34:73:ff:4d:9a:f9:45:e7:9d:ae:54:b4:91:c2:68:
79:2e:a0:7e:f1:7e:f4:6f:08:63:7b:5d:97:0f:05:
67:11:92:50:88:24:7c:c3:1c:8e:8b:37:f1:c0:94:
a7:4f:04:1e:d8:73:e2:f8:ed:10:54:f1:b3:7e:aa:
60:74:89:53:fb:eb:1b:be:0f:52:36:be:f9:e4:29:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6F:30:8E:AE:43:D4:4C:7B:DB:73:7A:ED:ED:EE:98:5F:11:C7:91
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:54:c1:3e:21:c3:04:44:bf:31:21:d7:59:42:70:3d:b7:45:
60:63:98:1f:13:ea:c1:2b:04:e9:54:00:06:4a:fa:91:16:67:
13:1a:1c:cc:ec:37:8e:f9:0a:b0:69:87:fc:fe:4f:9f:82:80:
ba:c0:64:dc:af:c2:d6:e2:e4:90:59:9b:2c:60:75:e9:96:ef:
4d:e3:81:90:2d:73:db:e5:b1:7f:b9:1d:46:53:3c:56:35:aa:
81:dd:18:92:d5:8b:1b:e6:32:64:f0:f3:be:12:99:65:37:35:
51:3d:35:39:7d:4c:54:7d:89:ed:cc:20:2c:94:68:24:c3:16:
06:85:0a:18:47:00:d9:a8:d7:19:91:2f:6b:4f:aa:57:5e:63:
1e:a2:dc:07:17:f4:81:a9:b8:8f:c2:03:a8:96:b2:0f:29:c1:
0e:99:1e:7f:9b:9e:97:dd:f6:7d:2a:f4:d6:ca:2a:ef:05:4d:
bc:56:99:d6:af:7a:6c:4e:5a:e8:b4:4d:95:ad:79:86:b6:71:
94:bb:a3:ab:3f:3d:f8:29:6d:e3:bc:a3:37:5e:05:9b:16:ab:
24:0a:23:b3:96:03:e6:fe:50:63:69:a8:51:f1:7e:6b:40:c2:
83:c6:5a:78:63:3d:2e:9e:c9:a0:ab:63:c0:bd:56:c6:5a:5b:
ec:8a:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:19:02 2025 by rpki-client