Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: a1iLjUpy+i/UFD0a0qCSyHoXBOo347Q4bxkuI1M/UQ4=
Subject key identifier: 15:85:7D:52:59:9C:B1:F9:D0:09:6F:C2:35:BA:E4:68:BE:7E:5A:E3
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 019A29308599960F9649D9ECC9D0ED719EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 05:00:36 +0000
Manifest this update: Tue 28 Oct 2025 05:00:36 +0000
Manifest next update: Wed 29 Oct 2025 05:00:36 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: PlMCsDT5XP3flYEQGwTOfO51IZeLGd8e1WqhgvNx8fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:85:99:96:0f:96:49:d9:ec:c9:d0:ed:71:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Oct 28 05:00:36 2025 GMT
Not After : Oct 29 05:00:36 2025 GMT
Subject: CN=15857d52599cb1f9d0096fc235bae468be7e5ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:e5:ab:5b:dc:9d:f8:63:41:19:5a:44:4d:
88:a8:61:21:31:bb:ec:2c:a9:be:88:d4:ca:53:ef:
b6:8b:d0:20:e4:fe:63:f4:97:01:0f:8c:c6:2f:79:
0a:46:94:9c:88:ed:aa:7d:71:7e:97:0d:eb:53:a1:
21:71:20:fb:3b:d5:78:e8:72:77:1a:2a:a7:f3:35:
84:2c:e3:0b:b5:53:3c:21:4b:21:48:b1:95:b4:a9:
5a:64:c2:86:e8:b8:e1:2b:b2:52:3b:4c:27:96:87:
0e:92:01:ad:24:82:f9:8e:3c:b4:8c:97:98:3f:2d:
10:0d:be:de:f1:7e:a2:d6:9d:93:c6:2c:3e:c2:85:
a9:a9:f4:44:50:e7:25:a9:1c:b1:d3:0b:4f:77:d2:
f7:0b:c1:af:c1:c0:f8:96:43:9f:00:91:60:94:69:
bb:0c:af:3f:49:61:5c:da:ea:73:80:a6:a5:66:5c:
d6:55:fc:1e:2c:3a:77:bd:69:64:47:6d:ac:bf:da:
7e:9b:8d:91:3a:56:5a:e0:33:94:61:4f:2f:8f:b2:
b0:a4:cc:b5:f6:38:e4:dc:bc:64:8e:c2:24:eb:02:
91:97:ae:b6:4c:8c:79:ed:a8:07:5b:b5:f9:d2:21:
a2:f3:91:ca:e1:26:f9:d3:17:dc:25:a3:b7:76:68:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:7D:52:59:9C:B1:F9:D0:09:6F:C2:35:BA:E4:68:BE:7E:5A:E3
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:dd:60:80:2b:1c:1f:a3:17:15:79:97:a2:e1:00:80:ac:e0:
82:5b:52:45:d4:eb:a2:0f:08:2e:54:7b:10:c3:c5:b2:89:64:
c1:5a:2d:c7:7a:80:4d:49:5e:16:69:bd:d2:16:a9:55:9b:e1:
9a:44:f0:00:ee:d1:f9:e1:bc:b3:c6:d2:8b:57:bb:ee:e8:8b:
b1:ac:ba:e7:d2:e6:a3:e9:5d:36:a1:e3:5f:a5:7b:45:27:e2:
38:c1:ab:2e:78:25:a8:df:f1:3f:6e:a1:3e:17:3f:a1:c8:ca:
0f:dc:a9:5b:68:39:2a:52:13:da:83:e9:fe:a1:67:2b:41:ac:
e5:17:3b:ab:a3:e5:80:5a:7d:4c:af:41:af:de:2b:05:4c:94:
e3:36:a1:a7:54:8c:50:d4:a9:34:f8:3e:47:89:23:da:05:cc:
38:fd:70:7c:1d:da:74:df:d5:99:87:30:e9:bd:74:48:ce:bd:
ed:f4:a9:63:2a:75:ed:fc:65:67:6b:01:72:02:e9:fd:39:8c:
02:9f:eb:b0:0d:33:55:b6:e6:4d:0c:cc:86:92:b4:6b:35:73:
36:fe:ce:14:a3:38:c9:da:ac:09:6e:2d:4d:81:49:5a:b7:95:
e3:ea:62:37:b1:88:b9:35:fe:0f:db:30:08:59:89:10:ef:8a:
c5:84:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:54:20 2025 by rpki-client