Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier: b3O7MzjbyqFD+kojqMlHw0lV3ilXi5ydf0/LTVsP4PA=
Subject key identifier: 2B:12:E0:03:59:CA:BE:1A:DA:37:06:0D:FC:F0:FB:6D:BA:1A:FA:5B
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 019A4093D9D957257274859C8DF084DF9F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number: 1244
Signing time: Sat 01 Nov 2025 18:00:22 +0000
Manifest this update: Sat 01 Nov 2025 18:00:22 +0000
Manifest next update: Sun 02 Nov 2025 18:00:22 +0000
Files and hashes: 1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: FP8Eh7tY1QSMZ0XEQyukQnD3oJ6PgV0p5cI/vj4UAso=)
3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:40:93:d9:d9:57:25:72:74:85:9c:8d:f0:84:df:9f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Nov 1 18:00:22 2025 GMT
Not After : Nov 2 18:00:22 2025 GMT
Subject: CN=2b12e00359cabe1ada37060dfcf0fb6dba1afa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:23:c6:65:92:20:8e:b3:2c:09:60:4b:44:
72:1c:ba:c4:53:8b:69:a8:79:9c:a8:9a:3f:06:9d:
15:4e:fd:2d:0c:af:1a:b9:65:19:1e:b8:c0:11:f2:
a9:a8:ed:78:88:e5:c8:36:e5:21:62:56:69:9a:3d:
fb:a0:a5:c8:23:ea:93:21:80:88:09:b0:94:28:7e:
62:5d:14:7d:24:f6:56:ff:2d:9b:d7:bc:22:56:f3:
17:c9:c8:41:01:5f:9f:b7:05:ab:0e:fb:3c:02:9a:
c2:04:a0:1e:1d:ff:43:b7:0c:0f:28:ad:7d:66:84:
94:ab:6f:6e:72:78:41:fd:3d:f4:eb:45:d0:bb:b6:
b4:93:2e:9c:1c:26:1a:86:db:18:34:16:27:21:8c:
67:33:56:e4:b2:0b:20:04:8f:b8:83:7e:99:73:88:
76:10:5d:52:5d:68:c0:5e:41:90:62:12:e3:2e:77:
87:db:0a:78:22:07:02:1e:9e:60:be:5f:85:80:d3:
fc:36:8b:15:a7:a1:46:c0:ac:4c:1d:ed:80:4a:5d:
07:0d:09:36:3d:5b:2c:3d:29:1a:0d:90:7e:3c:a3:
9a:3c:5a:a0:d2:0c:33:94:49:4e:e9:0f:8e:ab:d2:
20:10:7d:84:e0:d2:a5:b8:8f:5c:68:56:6b:45:6a:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:12:E0:03:59:CA:BE:1A:DA:37:06:0D:FC:F0:FB:6D:BA:1A:FA:5B
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:64:13:e2:51:a6:00:b7:0f:bf:f2:24:e6:9b:c9:9c:01:2a:
30:54:85:db:82:25:35:0e:78:28:8a:9c:94:00:8d:16:f6:a7:
fa:8e:97:c0:48:8a:15:56:83:6d:28:f4:5c:37:77:f0:bf:d0:
90:ea:92:95:bf:90:e5:df:84:1a:cb:9f:c1:94:8a:ec:ae:dd:
9c:8f:41:c6:72:94:7c:35:ff:45:b3:cc:3b:b6:0d:d0:82:f6:
62:ef:ef:73:b8:6e:02:08:83:3a:91:51:e4:85:88:61:02:54:
e6:75:d5:a9:02:d7:86:4b:ac:c4:4c:fb:b3:d5:f4:05:0e:86:
63:5c:54:ec:6b:68:71:d4:3f:f3:13:c0:b0:40:46:22:99:6e:
f9:15:62:42:d4:f0:d6:59:ca:9e:d8:66:fa:50:a4:29:fb:80:
18:65:62:de:fd:22:a2:e1:4a:3b:88:d8:59:ad:e7:89:71:5f:
71:29:5d:09:5e:fb:02:f2:6d:aa:86:0d:38:f3:82:c7:ce:b7:
93:e8:f5:6b:47:71:ba:14:b4:68:e5:56:21:58:80:72:26:72:
a7:2c:08:48:0e:93:a0:1d:88:98:7c:bb:7d:5b:02:54:41:a2:
06:91:d5:36:1b:39:8d:4c:51:dd:36:2e:e2:13:92:f2:7e:18:
40:4d:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 03:32:38 2025 by rpki-client