Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File: mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier: w4iGrC413oLuk+HBgDnCM6ZDZMJ30ZpWyLvQ2HZSxq4=
Subject key identifier: F5:01:AA:2D:07:80:98:52:0C:87:C3:F1:5E:28:29:F4:C5:DA:E2:CD
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial: 019A6CC8FCEB5AE342CC8DFE69598786D748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number: 129E
Signing time: Mon 10 Nov 2025 08:01:42 +0000
Manifest this update: Mon 10 Nov 2025 08:01:42 +0000
Manifest next update: Tue 11 Nov 2025 08:01:42 +0000
Files and hashes: 1: ONDqQfjr9_AJ9RydMAScKqXbPqA.roa (hash: tzIBuHIsI+gH6B58aDq25YyBMDZoGOkfi5bBeLvI+/k=)
2: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: RRB+8aOP7ezCiRaKMhc3B0a0WkhEhRlKFkuRyLxYD3w=)
3: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (hash: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 08:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6c:c8:fc:eb:5a:e3:42:cc:8d:fe:69:59:87:86:d7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
Validity
Not Before: Nov 10 08:01:42 2025 GMT
Not After : Nov 11 08:01:42 2025 GMT
Subject: CN=f501aa2d078098520c87c3f15e2829f4c5dae2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:3c:4f:e3:59:db:dc:94:fd:e1:9f:5c:d2:
19:8f:f5:d2:48:33:c5:25:cf:08:68:b1:17:78:4d:
3d:c6:76:c9:80:8f:bf:98:86:72:48:ae:85:f1:13:
c2:35:4c:9d:02:1b:a6:0e:06:6c:6a:8a:f1:e2:b8:
92:f2:18:86:d1:18:41:02:50:a9:98:9c:4f:a8:f1:
e6:7c:72:a1:04:b3:f9:47:81:e5:63:a4:96:6f:ff:
72:7f:11:0a:dc:fb:fb:29:da:e6:78:ea:26:71:e4:
e1:3b:00:eb:83:bd:db:91:cb:00:3f:0c:59:56:ce:
dc:38:5a:84:c2:c3:b0:14:58:a9:eb:16:78:20:be:
29:96:39:32:11:8e:f1:b8:b8:6b:f9:03:b6:5d:df:
59:95:7f:9e:2b:a4:ba:ff:dc:89:ff:a1:22:cf:e0:
d2:e4:51:15:3f:6c:84:d1:7d:58:91:ae:42:fb:01:
58:15:26:ca:3e:31:f4:87:23:82:5a:3a:d5:cb:1f:
cb:c8:fc:f9:cb:a1:3d:a0:73:47:bf:2f:fa:71:1e:
b6:2d:de:c8:79:6f:13:54:17:37:ff:ca:9a:bf:82:
26:07:2e:ff:15:03:7b:a3:0d:87:6a:3b:a2:e0:ab:
62:fc:fb:6e:ae:04:9b:ff:d2:a7:82:05:8a:5c:9a:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:AA:2D:07:80:98:52:0C:87:C3:F1:5E:28:29:F4:C5:DA:E2:CD
X509v3 Authority Key Identifier:
keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:97:82:97:9b:1a:bd:49:63:69:cd:7d:42:31:0c:3a:a2:c7:
21:8a:22:9c:42:21:0a:6f:fb:a1:48:4a:5a:12:33:33:81:67:
86:b0:5f:76:6b:83:07:99:6c:93:1b:4e:32:1d:90:fe:74:12:
31:24:c0:bb:e5:bb:83:68:cc:7c:6c:b8:a1:2e:a9:b1:b7:e0:
70:ae:17:a4:44:b7:0a:5c:47:62:ec:5d:1c:7c:e4:d4:8e:c5:
7f:41:12:86:62:a2:dc:d4:f1:aa:30:09:07:58:6c:87:96:b1:
e1:06:b5:14:90:09:50:8b:c7:e7:c1:1d:df:4d:9a:c3:16:65:
b7:c3:2a:a0:41:e4:f7:b1:59:0e:21:15:de:86:05:c9:37:17:
fa:2f:13:79:1e:91:9a:58:c3:63:f6:f3:31:1e:78:d7:c9:4a:
0a:5e:e6:c5:66:57:2a:c9:55:ee:7b:80:c1:95:0d:6a:ae:80:
98:f7:f6:75:19:6a:9b:b9:2c:99:e4:04:22:bb:3f:24:88:07:
db:e4:0f:69:eb:36:39:e6:92:8e:50:5a:c6:03:04:be:2f:b9:
26:08:2b:a3:09:8c:46:3e:9e:db:1b:fd:9b:31:88:ba:49:ef:
87:fb:e6:75:39:da:5b:98:54:53:8c:2c:90:82:af:92:fb:b8:
84:52:3f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 15:13:40 2025 by rpki-client