Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: vV3cfpO51R+U4j4y62k7JUXEnd2ftiKHZMOZZUGev2I=
Subject key identifier: 8C:88:7E:21:D5:FB:3C:BC:5E:37:03:CA:50:50:F4:4F:3F:52:D2:A8
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019A22899458A2C7225A41693BA8B6185985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 22:00:32 +0000
Manifest this update: Sun 26 Oct 2025 22:00:32 +0000
Manifest next update: Mon 27 Oct 2025 22:00:32 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: 8Gn2E/hZH2Zfa6GcgFsH29PVi1GT+5YHcGSghrAxD1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:94:58:a2:c7:22:5a:41:69:3b:a8:b6:18:59:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Oct 26 22:00:32 2025 GMT
Not After : Oct 27 22:00:32 2025 GMT
Subject: CN=8c887e21d5fb3cbc5e3703ca5050f44f3f52d2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:ed:65:47:19:7f:bc:ca:2c:18:9a:ca:ff:
27:99:33:e9:31:bc:fe:b4:32:d8:ca:49:d2:34:ff:
7c:30:99:b1:10:00:f3:97:28:af:a6:9f:60:0e:32:
52:4b:5b:82:f8:bc:82:c4:49:69:e2:04:14:c9:30:
92:ae:d5:68:61:9d:c4:ce:e2:d7:bb:ac:68:2f:d2:
1a:6e:04:f3:f4:ff:26:3e:3f:4e:b3:90:64:14:7f:
2e:5d:ce:50:c3:9b:f3:06:3b:b4:64:2a:c4:01:45:
89:6c:ac:3a:6d:5b:13:39:62:b0:db:fc:39:8c:59:
5c:4f:3d:86:0e:dc:0e:4c:b3:a9:38:83:76:8d:e2:
2e:f3:6c:57:4f:a1:37:4e:0f:d1:61:9f:d1:f8:a2:
3f:33:22:64:4e:f9:eb:44:ec:87:0f:77:7a:29:f3:
1f:4c:be:14:83:84:26:b4:87:9b:43:68:cb:6c:f6:
89:b3:87:2e:94:db:01:f5:6c:7d:f5:1e:41:70:c3:
22:80:5c:03:bb:b8:82:ba:81:0c:ee:da:00:7d:ce:
dd:e5:b7:2e:c6:0c:10:0c:95:ef:de:94:7d:bb:4f:
52:3d:8c:6a:ef:5f:af:c9:59:3d:cf:fa:a9:f7:22:
4f:98:8e:29:d9:1d:ec:11:b5:03:76:1c:24:ce:fa:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:88:7E:21:D5:FB:3C:BC:5E:37:03:CA:50:50:F4:4F:3F:52:D2:A8
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:a2:8f:03:54:e9:a7:3a:48:74:48:9e:8a:a8:ac:b7:12:
91:63:f1:cf:ec:be:04:71:2d:0f:0f:e6:3e:0a:71:e9:9a:ef:
76:54:41:55:45:87:05:3f:78:68:ef:dc:f0:78:90:54:f8:08:
0f:48:b7:f0:6e:a0:27:c9:b2:90:f5:ff:0c:e9:6b:65:83:f9:
e2:cc:1a:25:89:4e:e9:af:a6:24:ea:84:e6:bc:a3:f8:48:be:
ef:a1:39:c2:e8:d2:84:6c:f1:2f:13:72:bd:be:89:72:fd:b6:
c2:89:1f:4a:ce:0a:f5:12:f7:ca:9f:fa:4c:26:6b:0e:0e:5e:
de:93:9b:4b:a4:25:f6:7a:1d:4b:4c:cf:24:13:a3:d7:53:29:
19:28:cc:e2:86:b7:4d:e6:78:41:3a:10:55:59:e9:bf:3c:2a:
18:8c:04:6c:e4:ae:cd:ce:50:b1:df:dc:00:c4:0c:ea:14:25:
fd:49:46:50:a2:9e:97:de:cd:d1:28:0c:5e:d4:fb:ba:30:e1:
15:62:44:bc:0a:a5:a0:b8:d0:0c:d8:62:61:2d:9c:2a:b0:1a:
63:13:77:bd:fd:7e:a2:97:e5:38:66:ec:5d:3a:8a:8d:5b:09:
ce:39:12:b7:ba:91:5b:ac:f1:b9:23:ff:fa:87:81:4a:26:f3:
9b:27:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:52 2025 by rpki-client