Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier: kKZeBz8jqU0OFvBX30yzQBTjRFktxvLJpLpkBu5Ikic=
Subject key identifier: B0:B5:0C:5E:89:DD:4C:4C:D5:35:1E:4F:C3:37:13:BF:35:17:D7:03
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 0199DE84968EAD218DDED93BACDBADA68EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number: 166F
Signing time: Mon 13 Oct 2025 17:00:55 +0000
Manifest this update: Mon 13 Oct 2025 17:00:55 +0000
Manifest next update: Tue 14 Oct 2025 17:00:55 +0000
Files and hashes: 1: 5wpBu9lqq6Eh5bxmApWBHSmv8rU.roa (hash: OWwgDNZvQnVhoKGxoJou3ziQhvyReIZ9m1NH7rz0BqA=)
2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: BFSQ22Yrstb+YzCpeY0rgOOiNYCkyj1Bpey7CHVlC8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:84:96:8e:ad:21:8d:de:d9:3b:ac:db:ad:a6:8e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Oct 13 17:00:55 2025 GMT
Not After : Oct 14 17:00:55 2025 GMT
Subject: CN=b0b50c5e89dd4c4cd5351e4fc33713bf3517d703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:47:f3:b6:05:80:41:0a:50:e3:b5:ab:56:
f8:c6:94:c9:48:2f:8a:ce:2f:0c:ad:dc:ab:12:92:
eb:d0:10:33:24:7f:2e:13:30:90:a8:63:63:cb:26:
30:97:88:40:1d:ab:b9:9d:45:cc:35:e8:ae:48:a6:
99:70:7a:a9:60:ba:40:6f:79:b4:f5:a6:65:4b:d4:
69:7a:69:3b:b3:22:65:6d:20:57:e7:18:e5:67:62:
98:fb:94:cc:57:42:9e:c6:c4:27:a8:eb:e9:71:cb:
ca:c5:bf:f4:13:c2:ae:59:43:5b:7a:33:6b:40:e7:
a4:95:4c:8c:f0:91:bf:bf:60:51:fa:f0:ef:c7:a5:
fc:bd:0c:7f:23:fa:9d:a6:b2:e8:71:1f:b8:36:17:
f1:a4:60:db:25:d6:5c:2a:1c:da:c7:5b:94:b1:e1:
78:d9:e4:bd:34:c5:0b:1d:48:5a:22:b9:34:c5:0c:
d5:d2:cd:10:64:70:55:7e:df:2e:cd:5d:8e:85:e0:
3f:15:e7:34:ea:d1:98:ca:88:38:b7:57:ac:d9:84:
c7:0c:8f:08:1c:5e:e4:b8:d6:eb:c3:0e:eb:17:0a:
d2:ab:55:4e:33:58:73:83:79:c4:fc:72:69:99:a5:
3e:11:f5:42:f1:b5:32:5d:3d:14:2d:12:bf:d3:10:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:0C:5E:89:DD:4C:4C:D5:35:1E:4F:C3:37:13:BF:35:17:D7:03
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e3:1e:e0:dc:0c:47:13:17:2e:b9:5c:d3:b2:b4:8f:b4:51:
7b:eb:04:74:ba:f2:3a:5e:81:b5:24:90:a7:7e:40:fc:5b:e0:
1e:55:62:11:a1:1c:e5:80:09:9a:35:36:23:fd:b9:de:56:fe:
28:1d:ed:1f:bc:48:6c:5a:eb:99:57:9b:c2:05:be:36:a4:da:
db:08:98:54:35:ee:92:14:f1:76:cf:e4:31:a5:6e:bd:ff:ab:
12:20:67:b3:4c:14:b1:03:d5:07:e1:b0:19:26:5a:49:b4:9c:
74:0f:da:85:31:4f:ff:5c:a9:a1:49:5b:9b:a6:6e:b1:94:35:
26:3a:ea:12:19:16:6e:5a:58:cb:32:c8:0f:a7:0c:43:90:00:
2b:3e:3f:63:52:36:04:b8:72:6e:ec:15:ea:50:dc:4e:0a:73:
36:39:50:45:2a:f9:56:27:e1:7d:96:50:91:4b:9d:2f:7f:76:
37:79:64:59:1c:a2:7e:c4:74:5a:47:c7:5a:ba:35:39:98:c4:
31:98:a0:6e:36:03:d3:43:88:d4:4c:2b:26:d5:2e:d3:d6:8b:
d4:aa:d5:45:b4:c3:b6:4b:24:fe:66:16:af:09:79:35:61:f0:
00:9e:e6:09:90:1b:d2:56:9d:14:9c:58:83:74:7e:37:a2:e5:
d3:f1:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 00:54:36 2025 by rpki-client