Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: r4hMyvu65dC+uSrjFzaDrDB5LFgRISZ3v7dtsUL+G+g=
Subject key identifier: 66:7E:E5:D2:37:D9:A0:F9:33:44:F9:B6:44:C6:23:F6:17:F0:D7:5E
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 019A2930DA4BD8295073D558221A03B06C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 168E
Signing time: Tue 28 Oct 2025 05:00:58 +0000
Manifest this update: Tue 28 Oct 2025 05:00:58 +0000
Manifest next update: Wed 29 Oct 2025 05:00:58 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: W66n9RAwIU6YaE0S/Raohkg0T03mR5GOzVaJVMZ44uE=)
2: 86fKM31DBBSwZ8M6qcIf6r_iQR4.roa (hash: EWjBxOajWLT9vZOY8gky8VpcjsYK4HfbzBG5oTI1lvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:da:4b:d8:29:50:73:d5:58:22:1a:03:b0:6c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Oct 28 05:00:58 2025 GMT
Not After : Oct 29 05:00:58 2025 GMT
Subject: CN=667ee5d237d9a0f93344f9b644c623f617f0d75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:37:a6:6c:4c:82:c3:74:4f:59:24:1b:5c:
0e:79:64:21:d8:37:24:05:4e:73:f1:2e:e7:11:92:
7e:25:3a:07:7e:22:5c:eb:ec:ce:a8:40:fb:6b:26:
ac:e1:f0:45:f4:fa:bb:ef:51:9a:62:b3:2a:6c:c6:
9c:7a:db:2b:6a:c2:ee:d0:b7:ab:19:1e:96:df:11:
9b:ec:33:cd:67:08:5a:68:a7:06:f0:47:5e:5b:ff:
be:e7:3c:b6:78:73:cb:8c:b6:55:57:2b:6f:62:4f:
f1:8b:97:82:e9:d1:e1:bd:32:a8:3b:a1:15:7f:46:
9f:aa:c9:a4:4e:41:27:f2:b6:c4:fb:24:35:2a:f6:
11:4e:e3:3d:9a:fd:66:45:b2:aa:b7:25:64:08:e7:
d6:83:d4:f8:cd:4b:1a:ed:0b:86:4e:96:8b:f9:50:
f4:d0:fd:47:16:b3:f1:6d:a4:76:bd:2d:f1:66:2e:
cc:02:66:5f:17:98:01:ee:55:ff:63:70:9a:4a:74:
ef:80:09:48:d6:00:66:23:90:ae:6b:c4:eb:bb:cb:
ca:b8:65:7c:95:a0:9e:8f:4a:df:f2:7c:59:c8:a9:
08:a1:41:25:88:ef:3d:89:48:82:1e:d1:ec:6b:4a:
54:26:09:ee:1c:4b:4d:7e:5a:97:1a:a3:75:d0:09:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7E:E5:D2:37:D9:A0:F9:33:44:F9:B6:44:C6:23:F6:17:F0:D7:5E
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f6:0e:f3:76:0d:ef:a8:26:bc:ab:b4:3f:a7:67:90:1a:15:
1a:e7:c2:5a:39:4e:97:92:20:4e:09:10:e5:47:8e:dd:c4:b3:
6a:84:c4:6f:31:f9:fe:8d:9c:11:e7:e2:41:56:88:31:74:b5:
98:8a:aa:4a:eb:72:cc:d7:83:e2:b7:39:26:7f:3f:62:44:b9:
0a:89:d7:9f:78:b9:bd:5a:80:47:e9:fe:88:85:b0:62:50:5e:
02:33:4a:e2:dd:61:c8:9c:35:35:ad:88:ff:74:02:ae:64:79:
53:04:58:f3:78:ac:53:1e:a9:a2:a2:ef:6f:99:64:67:d7:81:
3f:b3:57:11:92:91:5f:90:72:d0:a4:82:9d:9c:db:a4:3b:40:
95:15:11:e4:bc:33:e9:7e:9f:6f:f3:54:95:6f:0f:47:d2:6e:
82:3f:b0:61:a5:ca:64:03:2e:e5:0f:5d:22:39:02:46:dc:bb:
5d:86:eb:38:7e:59:a9:44:20:cd:98:bb:9d:09:c3:98:d9:58:
4b:1a:ef:81:56:7e:f7:73:26:58:ae:95:e3:2e:2a:f7:ed:18:
60:b5:33:2c:62:d2:77:46:95:0c:cb:bb:fc:c3:7c:64:f4:a9:
ba:c3:5a:46:48:83:bf:4f:f0:60:c4:b1:66:6e:f2:af:d2:84:
3a:64:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:34:45 2025 by rpki-client