Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: 5Mcfj3DwTTxBkcRLbSrTYtxGBWMdrFdhdw/894Iv2zA=
Subject key identifier: 29:40:7B:5E:56:EF:FA:EB:66:67:5E:0C:F4:1E:0D:DE:5F:4A:40:47
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019A21092093C93593EBE5A50C967F300EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 12BD
Signing time: Sun 26 Oct 2025 15:00:37 +0000
Manifest this update: Sun 26 Oct 2025 15:00:37 +0000
Manifest next update: Mon 27 Oct 2025 15:00:37 +0000
Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: orcmm43KdgMlPnIj40SFlx+0sa041EobR6gwu2PykS0=)
3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=)
6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:20:93:c9:35:93:eb:e5:a5:0c:96:7f:30:0e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Oct 26 15:00:37 2025 GMT
Not After : Oct 27 15:00:37 2025 GMT
Subject: CN=29407b5e56effaeb66675e0cf41e0dde5f4a4047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:db:41:71:7b:83:bb:7d:41:6f:44:f4:f1:
4c:77:7c:70:a0:73:9c:fd:c5:57:43:e2:19:63:29:
54:41:3c:a7:61:75:d2:83:8d:ae:f8:14:d2:b9:31:
7a:43:ee:de:f0:59:33:7c:25:98:eb:e2:ee:1b:d1:
57:b9:0d:0e:e1:03:10:f0:e6:58:b0:b5:61:0f:a3:
92:ae:c0:0c:d8:89:10:6a:74:93:9e:98:38:3e:80:
b0:ad:ca:e4:d3:a0:48:4f:71:39:d9:c0:59:37:fc:
01:8c:37:5e:d5:b9:05:7e:79:8a:37:a3:f0:b2:04:
59:aa:d2:db:c4:56:77:34:b8:05:88:48:16:c6:d2:
58:a9:da:9e:0e:df:65:66:e6:1a:a3:8b:e9:a9:8a:
e3:fa:c5:8b:f6:e2:f8:18:f1:97:50:1b:2b:f5:04:
22:99:03:7f:3c:55:e2:3c:94:af:ac:07:e1:4a:75:
cf:0c:60:4f:63:c6:72:77:99:25:a2:8d:40:b3:6f:
79:75:d7:de:16:22:d9:b9:fd:a5:ff:7a:17:d9:e5:
91:80:16:43:a4:9a:be:cc:f6:22:97:96:6b:49:76:
f4:a8:1c:75:3c:a0:53:90:6e:a5:c7:ae:6b:3a:ef:
91:ae:08:4e:47:8d:9c:ee:aa:22:dd:38:c4:2d:31:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:40:7B:5E:56:EF:FA:EB:66:67:5E:0C:F4:1E:0D:DE:5F:4A:40:47
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:00:70:09:9a:54:9a:89:59:86:53:b0:a9:d0:a2:fd:62:b7:
43:e6:4e:d6:26:3d:ce:94:b5:24:e9:22:b3:c4:b2:e1:c5:66:
1b:c9:5d:77:c9:15:58:a3:38:f9:99:b9:c6:43:64:52:7d:c3:
d1:78:53:6f:f9:30:62:e3:86:06:fa:65:7a:22:38:23:49:85:
03:27:35:d3:af:d1:47:a4:e4:9c:fc:b3:d0:ec:c9:f9:68:32:
2d:6f:fa:82:b1:35:11:a3:85:2a:23:6d:be:62:2a:7d:d1:1c:
67:d1:e4:08:5a:ec:86:82:48:cd:59:f4:4b:67:6e:e2:65:66:
7e:7e:af:41:1f:bf:a9:63:2c:6e:bf:dd:8f:ac:8f:37:f7:32:
de:00:90:9e:e2:cf:8b:d2:4c:ab:2c:03:fd:58:1c:12:ae:43:
c2:67:8d:8c:a2:09:de:6d:59:3c:94:ef:4e:a6:b7:17:2e:3a:
b9:be:44:37:9e:ae:86:06:85:bb:37:44:19:8c:7a:56:d6:8c:
01:35:96:66:b3:02:8a:a3:42:63:7c:24:df:9b:64:b1:b9:3b:
97:ee:73:a3:e1:71:de:b4:a7:e6:e7:87:4d:bd:76:74:1a:1b:
4d:d9:8a:f7:76:4c:53:8b:f3:c9:33:ca:de:d5:5c:5a:41:55:
bb:1c:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:56:44 2025 by rpki-client