Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: WRFWdkMFvPLvoPymJIx3Fvcq/JoAbQNgO2ZZp6qFrn0=
Subject key identifier: B6:8D:4A:D7:C8:D9:E3:A4:A9:EF:FB:07:B6:8F:1C:0D:2A:C5:B9:19
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019A2A4440F53B822FA1E9CEE13131B52FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 10:01:47 +0000
Manifest this update: Tue 28 Oct 2025 10:01:47 +0000
Manifest next update: Wed 29 Oct 2025 10:01:47 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: hXR8Lz9U8DAouqG07m1q184GQ3CwyX2y+cZ/yxkT6ok=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:40:f5:3b:82:2f:a1:e9:ce:e1:31:31:b5:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Oct 28 10:01:47 2025 GMT
Not After : Oct 29 10:01:47 2025 GMT
Subject: CN=b68d4ad7c8d9e3a4a9effb07b68f1c0d2ac5b919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:f3:2a:19:78:ed:e7:2f:a3:c8:01:43:6b:
63:48:e7:f0:b8:74:01:53:5d:ff:22:c7:3b:f8:67:
8a:cf:e3:2b:62:1b:bb:24:c8:35:4a:e0:d5:77:55:
f1:64:f0:4a:0e:03:7e:f3:47:57:eb:82:0c:dd:97:
f7:8c:fa:46:a0:45:68:0e:3a:cd:cf:b9:4a:29:bc:
7e:f9:0b:0c:bf:64:2b:fb:aa:a3:ee:49:d0:36:45:
ff:87:6a:93:af:5c:0b:5d:68:aa:f1:0b:79:bb:f8:
9a:47:5a:46:ac:9a:4a:43:7a:89:20:17:ed:f9:18:
39:88:dc:73:4b:42:64:44:19:9b:ab:31:fe:e9:12:
b7:ea:69:43:3d:4b:19:b8:01:1d:79:ab:52:17:ff:
93:5f:39:a1:25:38:19:31:a6:8b:be:7d:a8:60:32:
06:64:37:a3:7f:45:8e:16:48:53:41:55:48:0c:a8:
11:24:80:2c:31:3f:6d:f5:19:81:0c:c7:af:27:fe:
8c:0c:5a:97:99:01:7d:b0:30:03:9b:46:d0:e9:e7:
17:55:7d:a8:bd:ac:45:5e:54:89:c9:3a:66:13:8b:
76:e3:ca:fb:d4:b7:d6:bc:a3:54:d7:da:d7:46:ed:
a3:b8:02:93:74:1b:a8:8b:8a:61:88:ba:eb:31:f7:
15:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8D:4A:D7:C8:D9:E3:A4:A9:EF:FB:07:B6:8F:1C:0D:2A:C5:B9:19
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:56:11:93:7a:93:d4:2c:09:6c:98:85:36:32:dd:a2:3d:01:
a0:96:17:a4:85:70:19:dd:86:8e:fb:8d:85:16:34:11:b2:e5:
06:a1:32:b8:bb:e7:21:7b:4d:a4:3d:12:b5:ed:51:7a:ca:7e:
1a:ce:c9:19:7f:47:6c:82:93:43:a7:9f:d2:46:22:dc:70:e5:
f5:cd:ae:41:dc:8f:bf:0f:e1:75:fd:a2:25:98:06:38:3c:8b:
b8:04:05:f1:4a:ae:26:6b:ff:74:4d:23:8a:4d:cf:67:9f:72:
c7:d6:ce:74:e7:4c:46:0c:74:c1:9e:ca:c7:45:57:14:7d:c3:
6a:2c:f8:f2:63:92:c4:68:a0:fc:be:21:70:72:b1:5a:6d:2d:
6a:63:72:31:12:1d:9e:7c:19:eb:b1:7e:f9:fd:41:bf:ab:47:
c8:39:f3:fb:86:b1:2e:2a:99:ef:05:dc:d9:29:1b:16:be:75:
2b:97:11:c4:2e:f6:58:c7:2a:6a:76:d7:c3:24:ec:51:39:32:
e5:0b:e5:d8:b9:c6:16:b9:33:7a:d1:6d:e1:a4:28:ec:97:5c:
e6:1e:09:b6:12:e3:bc:5b:16:e1:17:f1:f2:3d:a5:fa:4d:57:
90:0b:79:51:22:0a:fc:43:23:29:0d:17:b6:ee:f8:13:69:70:
f5:92:72:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:51:25 2025 by rpki-client