Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: q28A7rXx/3BqV0Fo0ANqz0btSXIQL86egQxRAfIrCE8=
Subject key identifier: FA:76:88:85:0A:BB:C1:56:C8:5A:F8:29:99:6A:95:3A:AF:0A:32:89
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 019A232E501A0DF6597E2B39B0F44D6452A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 0E78
Signing time: Mon 27 Oct 2025 01:00:28 +0000
Manifest this update: Mon 27 Oct 2025 01:00:28 +0000
Manifest next update: Tue 28 Oct 2025 01:00:28 +0000
Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=)
2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: Oumm6/HGcLaHBEj08YocGneU1P1Whfu8clc+WJk3V2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:50:1a:0d:f6:59:7e:2b:39:b0:f4:4d:64:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Oct 27 01:00:28 2025 GMT
Not After : Oct 28 01:00:28 2025 GMT
Subject: CN=fa7688850abbc156c85af829996a953aaf0a3289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:c4:80:da:47:d1:04:9e:9f:af:0f:56:b7:
24:7a:65:1a:a1:e7:ae:19:a8:28:ea:f4:f8:4f:50:
04:a6:ee:74:e0:b6:94:da:38:0a:6a:f7:0d:0e:6a:
c6:3b:42:ed:03:d5:d7:23:fc:34:6d:6c:f4:9b:a9:
b6:37:9c:43:02:4d:c7:8c:3a:01:e8:10:f8:5f:e6:
35:55:be:97:89:66:13:64:78:0d:f1:7d:f0:45:8e:
9f:a8:7f:00:30:c8:1e:69:aa:94:9b:de:cf:51:ef:
7c:7c:de:36:4f:cc:61:5d:95:4e:68:21:dd:44:4e:
98:c1:71:7f:34:99:26:6b:c6:d0:8e:90:5c:3b:97:
26:2c:54:bf:ab:19:22:7b:36:0f:41:d3:71:79:9a:
9e:40:a3:95:1b:1b:1a:2d:68:34:f1:72:f6:53:fd:
fa:91:9d:64:2f:c5:0c:2f:2a:a8:d8:e7:30:75:31:
05:89:4b:cd:53:93:9e:bd:4d:04:c3:1c:ed:62:60:
87:86:20:d3:ba:2e:82:f8:14:5f:34:63:a8:bf:fa:
8c:bd:10:a2:1b:c1:0c:a3:08:3d:f4:ed:bc:d3:14:
3c:ef:ec:9a:9e:4a:a6:86:8b:4f:8c:af:24:13:79:
b3:f8:29:fb:84:e9:41:81:1f:a5:32:dc:3e:22:dc:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:76:88:85:0A:BB:C1:56:C8:5A:F8:29:99:6A:95:3A:AF:0A:32:89
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4a:04:44:41:f0:15:c2:72:62:fd:b5:11:57:f1:30:65:6d:
ec:65:0e:83:21:be:3b:2d:63:3a:e1:a0:75:a4:a3:22:6f:14:
45:4f:d4:1d:85:a8:3c:a1:b7:30:a2:9e:f0:7b:22:f8:cc:4e:
97:8d:e8:5e:b1:b5:3e:f2:80:12:35:5f:44:3c:bd:44:57:d1:
51:fb:6b:f4:b9:30:d1:d1:12:fe:d8:d0:21:71:88:57:f3:a9:
07:83:06:59:95:af:17:15:4b:27:dc:ff:cb:ca:bc:b5:9b:7d:
7c:c7:dc:5b:55:db:36:69:d2:f4:63:70:51:02:84:51:da:a0:
2d:ed:88:f9:05:19:7e:c1:93:47:91:0f:9f:ff:a3:80:49:59:
c2:94:a8:bc:01:54:da:d1:03:2a:83:aa:c7:11:b8:77:00:d1:
53:66:5d:d7:8b:31:b5:a1:f5:91:5c:d3:63:59:6a:23:db:47:
8b:e7:6c:03:1c:e5:de:0e:56:f3:19:20:99:31:a3:9f:82:2e:
da:40:38:de:0a:9b:d3:91:9b:41:94:61:d0:e3:e6:6d:c0:93:
2d:30:4e:35:91:55:47:26:88:df:3c:e8:63:e3:5e:d7:bb:1c:
85:a1:00:30:36:b2:e1:f0:02:6c:e6:93:d3:87:9b:71:36:47:
9a:0b:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:58 2025 by rpki-client