Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: HqcBTy+ChR/J8ucpfjsWHHIercxkbuBjSCyNU4T6AFg=
Subject key identifier: B1:79:9C:62:12:1A:5A:6A:04:4D:AE:21:0E:4E:42:66:92:CB:4A:C5
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 019A0F3999DB856E11DABC0E51F0DF26309C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 1574
Signing time: Thu 23 Oct 2025 04:00:24 +0000
Manifest this update: Thu 23 Oct 2025 04:00:24 +0000
Manifest next update: Fri 24 Oct 2025 04:00:24 +0000
Files and hashes: 1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: 1OtIy+ZRAq4Fhou5B3cC0trrNKFTsem7vl15kdCXCvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:39:99:db:85:6e:11:da:bc:0e:51:f0:df:26:30:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Oct 23 04:00:24 2025 GMT
Not After : Oct 24 04:00:24 2025 GMT
Subject: CN=b1799c62121a5a6a044dae210e4e426692cb4ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:d8:7e:99:48:ea:04:77:ef:9a:37:67:5a:
13:f3:0b:03:1a:bc:e1:ee:0c:ff:14:ab:6c:6b:59:
58:ed:00:a7:46:ea:e8:d9:bb:c7:93:2a:64:6d:c3:
1a:ef:4e:55:43:5f:4f:62:fb:d1:2c:9c:fc:d0:01:
03:93:97:8f:68:49:dd:3b:55:54:1e:61:32:1a:5a:
54:6e:33:0e:16:bb:6a:2e:45:8e:26:17:50:b4:4a:
d9:d8:77:5f:64:c7:8c:46:a8:ca:e6:e8:5e:d8:a5:
48:8d:cd:70:87:f0:53:5c:b9:da:76:a7:53:d5:f9:
5e:7c:64:82:8b:82:b9:6b:84:cd:13:80:d1:88:28:
c5:e6:3a:6f:b4:8e:95:33:3b:ed:87:0f:9f:ee:21:
38:88:44:f0:ac:56:75:ce:6c:6e:f1:0e:ad:60:0d:
c8:6c:e8:49:9e:5c:2a:5e:f1:19:4d:10:31:55:30:
76:04:1f:1b:12:18:9a:bd:32:d8:f1:81:3b:85:59:
72:5f:55:e5:72:f0:74:b1:1d:f4:52:04:e3:90:51:
93:ba:01:97:ac:46:d1:2d:0a:be:d9:ac:0e:2f:14:
8a:85:df:54:fe:74:c7:b0:a4:4b:fd:b7:48:dd:87:
89:1d:fa:0d:7c:14:08:eb:61:8d:b2:d4:29:3c:0f:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:79:9C:62:12:1A:5A:6A:04:4D:AE:21:0E:4E:42:66:92:CB:4A:C5
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9c:1c:f9:b0:c4:e9:7c:6c:52:40:b9:46:fc:88:5a:09:dc:
16:46:d3:97:76:e6:09:6b:df:ed:b9:32:0c:3a:fe:3f:68:03:
62:39:a8:37:21:62:15:64:13:03:0d:5a:e4:e7:db:36:8a:4e:
ac:f8:2c:b1:4f:ec:6c:20:8d:22:a7:4a:3e:aa:2e:2c:a8:22:
73:78:9b:b7:ec:b6:42:7c:7a:8e:60:3b:73:fc:87:2e:b3:4e:
a3:2d:ea:ba:af:9f:a3:b2:99:d7:12:3b:f3:fe:91:a2:c4:67:
9a:9f:36:b6:c2:5d:ac:d3:ea:02:d1:74:eb:ee:81:75:42:c7:
e5:70:8e:20:ea:b9:94:6e:85:53:58:65:96:f2:7d:23:bf:0f:
30:4a:34:12:a1:f8:58:f2:3b:ec:5a:34:6e:4a:8e:6e:b7:42:
77:5b:08:2f:0e:86:76:15:f9:c5:32:2e:a9:44:b8:27:ec:0b:
c9:99:3d:c3:86:45:05:98:ab:57:22:76:4e:58:11:5b:65:06:
5d:44:3f:ac:8e:a4:59:ee:85:fe:92:36:01:14:94:60:3a:24:
d9:82:6a:be:e9:40:38:ee:dc:61:ea:49:98:b6:08:7a:70:66:
a6:d8:9b:00:34:06:4c:56:16:d8:33:15:81:30:d0:18:51:70:
23:17:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:12:51 2025 by rpki-client