Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File: mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier: +rfcpeS/KwmahjwLAwKpEPuHC3sbNXnyJudaDOFPjBI=
Subject key identifier: F7:9D:D3:15:41:76:9B:1C:5A:11:5D:FE:E8:2D:47:B8:E8:BB:4B:FE
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer: /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial: 019A240A07C9A7B0620C98EDADC083989B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number: 1688
Signing time: Mon 27 Oct 2025 05:00:28 +0000
Manifest this update: Mon 27 Oct 2025 05:00:28 +0000
Manifest next update: Tue 28 Oct 2025 05:00:28 +0000
Files and hashes: 1: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: UH1N8z1XyL9H0eC1zO+JV6LcxEGqu0CYccA+4AXL3D0=)
2: zpGvhyYRAmjs5EUuaL_qNrktFtE.roa (hash: 24VotJmvmJDfDZLcY9ERb5W8a78zlapyR9WGVJQ5ABc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:07:c9:a7:b0:62:0c:98:ed:ad:c0:83:98:9b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Validity
Not Before: Oct 27 05:00:28 2025 GMT
Not After : Oct 28 05:00:28 2025 GMT
Subject: CN=f79dd31541769b1c5a115dfee82d47b8e8bb4bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:4e:ca:3c:9b:95:58:36:c2:0d:c4:4c:89:
f8:ed:bd:29:55:b3:f8:3d:cb:d8:2a:28:d1:f7:48:
03:ff:29:d1:02:cd:95:42:3b:50:10:58:0b:0d:9f:
00:f8:fc:d6:5c:4d:62:68:3c:c0:02:af:77:34:91:
79:a9:04:2b:9b:a6:fd:af:f9:3d:ec:99:5c:f3:61:
d9:04:7b:38:da:63:da:d2:87:56:13:4b:90:4c:21:
79:30:06:4b:5f:d9:4d:8a:9b:e9:94:f2:40:e6:dd:
1d:73:1a:b6:16:04:b7:69:a2:80:00:42:85:08:1a:
70:e9:81:7e:33:46:81:1f:26:d2:2c:d0:54:77:93:
0a:fc:22:6b:f0:47:0a:4c:55:6f:31:4f:94:cf:a7:
c7:d0:93:84:3f:37:67:c7:74:cf:7a:69:b0:2f:cf:
ac:cb:38:08:fa:95:d0:48:3e:69:44:36:c3:14:7f:
65:69:f8:20:c4:72:ca:81:62:ce:28:47:ca:d5:e2:
4a:d0:7c:30:3e:40:c3:12:71:cb:3f:ef:aa:25:20:
df:ea:ba:60:27:ce:c2:49:ce:da:36:9a:fd:a5:b6:
e2:4f:4c:ee:4e:f3:f7:b2:97:34:c3:7e:33:83:bb:
e0:fd:e2:63:2e:f3:4b:07:96:a2:d7:26:28:96:99:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:D3:15:41:76:9B:1C:5A:11:5D:FE:E8:2D:47:B8:E8:BB:4B:FE
X509v3 Authority Key Identifier:
keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:11:f2:f9:53:f2:80:78:83:de:b6:e6:53:23:02:33:bf:0e:
fa:b2:5d:f5:0e:e3:e4:86:da:11:7d:a8:a0:45:68:4f:83:c1:
2c:39:cf:7b:87:d5:59:2b:fe:ea:6e:6d:3e:cd:5e:23:71:25:
cd:49:82:18:53:40:11:7f:e6:36:c3:16:38:df:bc:92:f3:02:
f1:63:9e:a1:e9:ce:0f:b6:0f:05:ec:5a:08:aa:97:51:77:01:
c2:ca:7c:dc:13:0b:b4:60:46:24:e8:02:88:4a:1e:f7:3c:0a:
e1:44:f9:a0:a2:b9:71:ff:18:f0:a8:35:bb:ef:c2:3e:8e:a2:
76:c1:b0:0b:d0:c3:70:92:4d:02:97:8e:8f:eb:5c:67:0c:58:
08:9f:90:56:c6:35:75:8c:6f:90:1a:48:80:ae:ad:c2:eb:5c:
65:1d:6e:b6:62:6e:ed:cb:6c:7c:9c:1b:79:a4:16:47:fc:a4:
c8:47:d6:97:21:c9:06:a6:12:d4:66:4e:dc:89:26:dd:1d:a3:
36:92:78:1c:b6:08:0f:e7:a1:3a:9f:fa:b2:1d:05:2e:2c:57:
ec:4b:3a:bd:8d:c2:52:65:54:f9:d6:0c:db:5c:5c:fc:ae:d7:
c6:b1:c6:72:1a:6c:15:e2:f1:cf:3d:0f:71:28:f4:ef:98:26:
67:f5:f8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:10 2025 by rpki-client