Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
File: MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json)
Hash identifier: OlNKbz03hxg0E9jOCaHCZ43JMMtUyejVXK5KDjXSzFA=
Subject key identifier: 86:16:16:6A:39:5C:EC:F9:29:D0:F4:55:77:16:55:BC:DB:ED:5B:4F
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial: 019A11289BE22CA3CE83EA06E0FDB49816F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
Manifest number: 16F7
Signing time: Thu 23 Oct 2025 13:01:05 +0000
Manifest this update: Thu 23 Oct 2025 13:01:05 +0000
Manifest next update: Fri 24 Oct 2025 13:01:05 +0000
Files and hashes: 1: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: y29pACqXcDN/yM6LaERRL1Hj4bSC0zEwbKAVeVdipTw=)
2: a9vur_G-Sv_-WDNvoaN6FO-mp_Q.roa (hash: 5mLv65w3uElW3I7UtSlBFzQFnR6wfzkGH2z+n02Go3s=)
3: ckPg9sFMxT2re8tM8nExJep_9Qs.roa (hash: DU25ajodIpeW2jQoXz2wnkJ8CRhq6NHvl6w7hFsUi60=)
4: yFSjMkcgtQ4jugHf3jpWTH9Nbv0.roa (hash: hqHHntvNx6acptoTgy50EVxfDKrmw52pRvx+yFRJ3nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:28:9b:e2:2c:a3:ce:83:ea:06:e0:fd:b4:98:16:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Validity
Not Before: Oct 23 13:01:05 2025 GMT
Not After : Oct 24 13:01:05 2025 GMT
Subject: CN=8616166a395cecf929d0f455771655bcdbed5b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:11:03:22:46:97:9b:fb:2e:b9:87:1a:eb:
d2:bc:88:e9:3e:86:34:7e:44:f8:3c:4e:40:80:c2:
1d:1e:d0:b2:fe:ba:92:88:8c:e1:99:73:13:fc:97:
9f:e5:a5:0b:f1:ce:c0:34:cd:f1:c5:f8:d2:df:1e:
54:c5:ae:b8:4f:9d:08:7f:89:4c:ff:de:0d:7d:4e:
f2:1a:06:bc:84:85:b2:d2:27:d6:eb:86:79:35:f6:
bf:5f:cf:b6:f3:f5:80:70:94:c4:f8:f5:88:84:33:
c2:92:52:aa:32:9b:71:c9:0d:d4:74:f3:6b:b5:ff:
fb:91:1e:21:0b:69:ba:88:3c:cf:71:10:c7:c1:cf:
17:aa:5f:e7:95:71:2e:39:2a:d4:b4:5c:d4:29:2b:
73:2c:dc:5b:d6:ae:29:cd:65:b4:29:f6:c6:0c:a9:
46:f1:21:ff:98:35:f2:0a:62:cf:20:11:6c:f3:87:
34:2f:b8:10:7e:db:c4:9f:fb:36:ce:4e:05:e3:1b:
c5:cb:10:23:aa:e1:06:8b:0f:ff:9c:b3:40:04:a1:
bc:2d:28:cb:14:be:47:8d:be:c0:2c:8b:6d:d8:0a:
ed:53:c5:16:be:40:ca:2b:32:85:21:e9:60:62:50:
99:72:1b:07:55:81:fb:66:9a:a4:b4:16:9d:5e:ce:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:16:16:6A:39:5C:EC:F9:29:D0:F4:55:77:16:55:BC:DB:ED:5B:4F
X509v3 Authority Key Identifier:
keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d6:92:42:90:0b:8c:76:97:a7:39:da:a9:77:ac:dd:79:84:
46:b4:83:d6:1f:6a:79:ad:cf:15:51:a1:d7:b2:8c:cf:8d:b8:
e1:a5:0e:1f:04:4d:10:6c:25:0e:bf:af:cf:4e:03:3c:03:f8:
1b:1b:1f:9c:81:8f:af:e9:ef:8c:10:2c:32:c3:56:d0:0f:6f:
e5:f2:f7:dc:99:68:ec:ce:db:c6:67:d2:7c:ff:01:e8:d1:8c:
47:cf:a3:78:4f:a2:af:fb:56:c3:df:c8:83:3f:37:2f:26:d7:
73:59:fe:05:f8:df:06:38:c3:a7:86:0a:22:b8:62:19:7a:b9:
6f:13:26:a3:61:e7:09:57:b0:2b:57:bb:94:58:cf:3c:c6:58:
cb:5c:ad:e5:f2:82:6c:a0:5d:db:8b:21:03:ec:0c:d3:81:5b:
94:f9:af:bc:3a:72:0b:9f:9d:a6:c9:d8:09:5d:5a:08:4b:16:
c5:8e:48:26:9d:a5:4b:ae:45:fb:ad:6c:95:60:a7:7f:0a:e8:
d1:c6:ff:73:54:d3:f8:29:a7:f7:99:75:49:dc:5c:2d:f2:4e:
bf:94:3b:d3:d1:20:ac:0e:ea:24:dd:10:38:4d:34:d5:65:5f:
6d:fd:5c:33:43:2d:b6:90:6c:f1:e9:ab:8f:c1:cb:1b:07:95:
83:7b:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:39:04 2025 by rpki-client