Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: /QE7vonf4ZJJnYhI99C1IeI24CM9jBZrkx43jZstBl4=
Subject key identifier: EE:7A:ED:1B:DA:D0:8F:A4:B0:46:B7:C1:7A:D8:03:CC:93:CD:C2:96
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 019A307C44872CF56D654F6B527558B50A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 170C
Signing time: Wed 29 Oct 2025 15:00:41 +0000
Manifest this update: Wed 29 Oct 2025 15:00:41 +0000
Manifest next update: Thu 30 Oct 2025 15:00:41 +0000
Files and hashes: 1: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
2: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: ev2PlgbQh7z3OWPa2ZUCsRzOzvFEf6TKEPM7sENZC9Y=)
3: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
4: mgPiyECi3IMewfduoQECoQO6hW8.roa (hash: FFtqOGC8SNkaXVCBxgLc9ho6RyB8i6aMWoVYlwMrees=)
5: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:7c:44:87:2c:f5:6d:65:4f:6b:52:75:58:b5:0a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Oct 29 15:00:41 2025 GMT
Not After : Oct 30 15:00:41 2025 GMT
Subject: CN=ee7aed1bdad08fa4b046b7c17ad803cc93cdc296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:e8:4a:c2:7f:a3:74:e9:32:7b:fe:91:e9:
42:e0:f5:4e:4d:ff:75:ba:4b:01:d9:df:71:d2:84:
01:67:45:36:bc:6f:3a:ef:a9:ff:66:9b:04:2d:c5:
2a:a1:12:c1:c9:8d:03:39:31:ac:a9:db:dd:22:82:
28:b4:69:21:56:60:72:f4:12:6e:86:c0:b7:69:ad:
0d:65:00:96:ad:92:25:ad:11:45:11:c5:d9:e8:2b:
84:f9:cd:6c:30:04:2c:48:7d:75:55:89:c1:f8:81:
30:09:b3:62:d1:1d:e2:91:cb:27:87:9d:c5:4d:85:
00:6c:6f:12:fb:36:53:7b:1b:18:d7:f2:70:8c:f2:
8d:af:45:62:12:49:7b:db:84:57:e4:3c:a7:67:90:
56:68:11:25:bd:2c:1e:ef:a6:04:83:7c:7a:58:ba:
79:88:86:99:91:49:3e:3d:74:f8:26:b7:8f:45:39:
34:d4:a6:c5:ec:25:f1:6c:0e:3b:d8:4a:1f:1c:b4:
e8:19:51:66:c8:54:4e:b5:ad:88:0b:ce:8a:86:80:
d1:6c:42:23:b7:d2:16:b3:92:ac:ef:1d:d0:cc:01:
8f:fe:a6:1c:db:05:bf:a7:34:f0:fd:4d:41:b9:c3:
3b:ed:6c:f2:d0:fb:11:36:61:72:0e:09:03:0b:6b:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:ED:1B:DA:D0:8F:A4:B0:46:B7:C1:7A:D8:03:CC:93:CD:C2:96
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f3:5a:4b:f1:3f:7d:26:a3:d8:6e:98:89:ec:0a:33:48:1c:
02:2b:15:77:12:38:fb:a5:1b:33:e5:12:04:61:d5:83:b8:d2:
cd:df:0b:b3:3f:0d:ab:47:49:86:b5:eb:f9:d1:37:1b:dc:1d:
3a:a4:d2:4f:29:e3:8c:06:c3:a8:6e:0a:58:d0:34:27:4e:0f:
2a:ab:c5:38:1f:8f:d2:87:94:eb:17:41:9e:f6:ff:74:45:56:
96:79:36:f0:56:9a:23:d3:c6:57:13:fe:bc:3c:55:6a:23:ce:
dc:dc:c6:76:63:38:d6:a0:c7:33:53:53:4c:2e:01:5d:85:d1:
0b:1b:e2:b6:a3:cb:3c:53:99:4b:84:b7:fe:85:0c:65:61:9e:
a5:52:b4:61:11:1b:c0:58:a3:fe:1c:6b:77:17:b2:fc:e7:90:
85:af:72:0d:4f:00:30:be:b4:9a:f1:37:4e:94:00:53:b3:75:
1d:11:96:80:72:3b:aa:ac:7d:f1:fe:3a:03:2b:6e:b0:a3:6c:
86:fb:ef:15:00:1a:0d:2b:13:b1:54:07:7f:fb:38:16:35:14:
4a:52:fb:94:48:13:e8:d0:fe:3c:59:57:8e:d9:6f:1c:58:b1:
29:1e:c1:cc:5a:70:c1:3e:cb:72:21:aa:09:06:5a:e8:68:2b:
e4:4b:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 01:05:56 2025 by rpki-client