Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier: 5K1MURG+UiM4/f2XyFoypHtbmXtndhxARD2DDAO6Myo=
Subject key identifier: 43:1F:C0:7C:D2:0F:DA:5A:B3:25:0D:A4:58:56:DA:2F:6D:17:32:21
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 019A71EEEAE38EF097E743757D7343792B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=)
2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: bxnyc0m6Wj75Kr76j6dCoqoIV4qwph/VzyYNtM7MkB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ea:e3:8e:f0:97:e7:43:75:7d:73:43:79:2b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=431fc07cd20fda5ab3250da45856da2f6d173221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:91:41:f1:4e:69:54:62:71:d2:a2:8f:42:
02:0c:ca:28:97:71:cd:3d:5c:7e:36:df:f2:2e:75:
7d:cc:73:72:d0:81:b4:68:8f:a1:76:bb:07:7f:70:
07:82:b6:20:bc:5f:b6:89:04:b1:de:71:a2:07:46:
23:2e:d9:86:25:0d:8f:9a:12:a1:d1:3c:5b:f1:e8:
8b:53:77:ff:b1:6a:5d:b3:89:a0:00:b5:0d:43:f6:
31:de:fe:9b:40:b3:dd:39:e2:8b:92:f9:70:33:7a:
1c:01:0e:ad:f9:39:19:28:1e:fd:70:6f:98:dc:5e:
6d:27:4a:2f:96:db:3c:c1:bd:71:77:a1:a2:6f:36:
d0:d0:4c:ec:f4:f4:68:4f:2c:e5:52:24:2c:6d:10:
9f:92:0b:09:4b:e6:78:e8:b4:7f:9c:a4:9a:70:53:
c7:97:24:dc:5c:38:33:4a:db:f2:79:84:fe:9c:77:
22:cf:03:77:bf:f0:a7:f3:b4:bd:f3:eb:d3:9a:18:
75:da:41:7e:6c:49:9d:b0:1e:0a:de:63:3e:c4:b5:
0a:b5:8b:83:7c:b0:68:aa:27:77:c4:61:f1:dd:99:
31:15:ba:2c:79:71:f9:3c:fe:8f:81:75:c9:af:0b:
29:85:b0:85:c0:04:36:9a:9d:aa:8c:e0:a3:ea:27:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:C0:7C:D2:0F:DA:5A:B3:25:0D:A4:58:56:DA:2F:6D:17:32:21
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:06:12:f8:80:45:4d:fb:48:e5:67:fa:e2:53:b1:3c:37:00:
a1:56:fc:8a:c6:b3:b5:17:8e:9b:53:58:e9:7e:4e:b7:f3:2d:
bd:80:13:a4:15:3f:87:bc:dc:89:ba:09:54:ff:a1:8e:ac:6b:
4d:9d:01:b6:2b:ed:e3:ba:7f:a3:67:56:12:42:93:a6:6c:2a:
42:43:6e:e1:e0:b7:a7:e2:c2:b9:a0:a7:dc:bb:ba:88:68:18:
a5:79:21:b5:54:50:50:a1:ef:90:0a:c7:af:64:9d:95:ea:f8:
dd:69:f8:5f:a4:e2:b0:cb:f4:19:60:c8:54:cd:68:63:54:0a:
d0:10:ad:18:94:f5:8c:87:17:89:c1:5d:c8:3e:c6:8c:a1:1e:
49:01:ad:4d:10:a3:be:62:d5:9f:48:e9:05:ba:66:22:3e:31:
7e:da:f8:3d:df:e6:94:9b:e0:18:0c:67:f4:f0:57:8b:a6:e8:
5e:b5:7f:a8:d6:92:c0:38:a3:24:8c:57:12:46:0e:8a:d5:d6:
40:7a:a1:5a:69:5e:d7:de:9e:29:fa:82:30:c6:eb:94:e6:a2:
63:dc:be:82:e2:a6:69:ad:8b:3a:f2:3a:c1:57:38:f4:6e:b4:
74:b6:e4:5e:83:0c:fa:28:7f:44:1f:39:88:3a:8c:1f:4e:3a:
a0:a9:38:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client