Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: 9GLm7Zr+zEys101X6eK2CVvEHEfLr+0tIWjpg9Dlrak=
Subject key identifier: 2C:84:AB:80:2C:83:C5:89:7C:84:4C:6D:52:E2:CF:87:EB:6C:34:99
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 019A1FBF188F22A9549D5E9061756D79046B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 15D8
Signing time: Sun 26 Oct 2025 09:00:08 +0000
Manifest this update: Sun 26 Oct 2025 09:00:08 +0000
Manifest next update: Mon 27 Oct 2025 09:00:08 +0000
Files and hashes: 1: 2z0NeYZe1xNl9FiaXMK1zDvmewM.roa (hash: cOILWkUhsnduTiBD7sHiLuG2BYfCl/U6Tpdfh+0XXP8=)
2: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (hash: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=)
3: Cb9IfbvVd462ED5QHHlj-LEweLw.roa (hash: 7Eevpsqm9wy59M0ZaZdGU+Ma/l1JUlTqTqjFG2nGxwA=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: NR8KDjDFVVt5vSlGdbuqN0chHfQJp8Y4qdZeZ5mKzT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:18:8f:22:a9:54:9d:5e:90:61:75:6d:79:04:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Oct 26 09:00:08 2025 GMT
Not After : Oct 27 09:00:08 2025 GMT
Subject: CN=2c84ab802c83c5897c844c6d52e2cf87eb6c3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:bb:23:47:89:db:f9:85:3b:20:65:72:c1:
d3:56:27:1e:ae:15:81:42:e4:0b:bf:ea:d9:a5:86:
53:a6:27:94:87:8e:0e:8f:e2:e8:8b:b1:7f:22:f8:
f7:75:48:0e:79:97:49:05:16:bc:8f:aa:a8:fd:83:
a3:50:86:c2:4d:80:e3:15:e6:e2:87:b3:53:0b:45:
b1:e1:d1:73:70:96:b2:1c:d9:d2:28:db:ee:d6:10:
78:3b:40:b6:7b:d1:5a:66:e7:ac:5f:a2:09:71:cb:
d9:8d:06:dd:79:3a:a5:00:ad:1a:b2:bd:8b:44:94:
2a:97:fa:ba:6c:4f:ee:51:24:7f:41:c4:09:eb:a3:
07:45:49:fa:50:fd:37:c1:4b:02:8e:a4:a9:d1:3e:
f4:cf:95:69:f3:1f:dc:bc:02:e4:df:fc:4a:8a:02:
bb:0e:2a:31:4b:25:36:ad:1a:99:c6:9f:e7:17:5b:
f5:5e:0c:2c:60:1f:ff:9b:c8:ae:c3:2d:06:03:60:
d1:a0:a7:d7:2b:4e:09:77:f9:26:6e:79:6d:bd:87:
51:45:dc:68:e2:64:c3:3d:ca:e8:f9:36:c7:4d:11:
d9:62:47:97:54:b6:82:67:4a:ae:9d:80:5f:84:06:
90:bd:c5:9a:65:5f:cd:b2:6e:3e:08:57:07:ff:9f:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:84:AB:80:2C:83:C5:89:7C:84:4C:6D:52:E2:CF:87:EB:6C:34:99
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:60:37:82:63:54:1a:89:35:ef:09:ae:6b:98:37:f4:1b:32:
95:81:6e:af:e7:52:d6:3a:ec:33:2d:26:b4:14:0d:bc:e3:51:
a4:a6:5c:2e:c0:94:5b:85:75:2f:0e:92:93:3a:d2:f1:bb:57:
24:0a:0e:06:fb:a4:bd:53:eb:af:10:a9:42:ac:09:83:93:a0:
9f:4a:8b:cd:a8:aa:16:17:50:f4:9f:a6:46:2c:a4:4b:ea:64:
25:ce:01:15:4d:a6:e6:6c:a9:96:c6:99:1f:f1:e9:4b:b7:af:
d1:c5:55:7d:4f:2e:c5:ff:74:4c:aa:db:cd:9e:f0:4d:3f:b3:
f5:1b:a2:38:fc:1f:4e:71:06:a6:ef:98:54:39:0f:06:34:61:
29:37:e0:2a:7a:44:eb:9b:bd:eb:20:86:7f:ea:68:f4:6c:92:
4e:2b:73:16:d5:94:82:44:b7:6d:ad:39:9c:f1:44:ef:b1:7a:
fb:36:25:48:ad:ef:3f:03:69:92:58:1c:ed:22:d3:67:72:9f:
fb:01:4a:4a:29:44:e9:45:7a:35:39:7c:d4:e7:58:e5:09:8e:
c2:8f:0c:56:ca:c3:e3:eb:98:aa:76:0e:45:27:07:9b:a8:fd:
24:25:15:50:04:78:8e:9b:b7:89:82:0e:d4:5c:c0:84:77:fc:
af:00:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:47:36 2025 by rpki-client