Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: dBXVQobq/plk/HNPI/t6Y6jzspzmVmRNnWQf5vFuIeA=
Subject key identifier: FB:12:8F:C1:27:CC:32:DA:2A:2F:8F:DB:AA:2C:4E:E9:44:DB:DF:AE
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 019A134D674D1BC2C72DC1E23BBCE8452D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 0DCC
Signing time: Thu 23 Oct 2025 23:00:31 +0000
Manifest this update: Thu 23 Oct 2025 23:00:31 +0000
Manifest next update: Fri 24 Oct 2025 23:00:31 +0000
Files and hashes: 1: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (hash: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=)
2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: /CO63wCqTisvNipOIxVs1ia8b9mS0hYVawlcNR0WCGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:4d:67:4d:1b:c2:c7:2d:c1:e2:3b:bc:e8:45:2d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Oct 23 23:00:31 2025 GMT
Not After : Oct 24 23:00:31 2025 GMT
Subject: CN=fb128fc127cc32da2a2f8fdbaa2c4ee944dbdfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:82:10:0f:b3:3a:14:63:e3:d6:d0:0a:f9:7a:
08:be:d2:17:b1:0c:e4:bb:92:91:c3:20:56:9d:a0:
d7:e3:cf:da:97:f8:57:5b:b7:1e:70:bb:0a:b9:32:
42:84:02:92:2a:7a:41:48:9b:84:a3:7f:dc:36:e2:
8d:94:02:30:98:5a:bb:25:02:43:73:07:06:48:1c:
14:42:90:25:ab:80:55:82:21:f5:5b:58:01:1c:97:
61:76:42:fc:fd:05:59:f2:0c:dd:2e:50:4f:45:74:
86:6e:fe:c2:28:25:ad:60:75:f8:a3:43:1e:99:6a:
84:e8:96:90:20:c7:0f:f9:38:34:21:b4:f6:09:8e:
86:db:3c:b5:4b:7e:de:35:f7:3b:09:c4:f6:09:6f:
0e:b8:82:6b:43:c7:c6:34:c5:41:f7:36:59:32:97:
8a:aa:1d:1e:04:98:e1:24:0c:84:9f:02:b5:2e:7a:
a9:d8:c8:60:a4:1a:66:62:df:67:b8:96:51:b2:67:
cb:7b:8e:04:41:8e:d0:a6:5a:f2:45:19:14:4f:9b:
0f:f0:42:90:22:24:4d:52:43:2b:d7:55:99:c0:5c:
0f:fb:31:22:f3:da:04:bd:60:25:9e:b6:45:b9:9d:
0b:de:cf:40:f2:d7:13:0b:00:fb:1f:c3:f3:6b:51:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:12:8F:C1:27:CC:32:DA:2A:2F:8F:DB:AA:2C:4E:E9:44:DB:DF:AE
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:19:76:dd:02:41:f0:b0:7c:68:9d:0d:9b:ea:4a:0e:1a:2d:
f1:c0:94:24:c9:81:28:1a:89:b3:25:b3:91:b0:92:b0:20:6d:
42:4f:8c:8b:3c:94:61:03:ae:e6:3c:72:28:ae:51:d9:27:e0:
dc:23:b4:23:65:d7:51:49:e5:d7:88:03:18:25:c6:d2:55:32:
9a:89:1c:c1:ae:08:d9:33:15:30:26:89:d5:06:a1:8e:94:2c:
8d:31:36:4f:a7:25:e2:6c:a6:f8:5f:8d:59:8e:14:7d:53:15:
41:5a:eb:71:a1:6a:ce:24:d8:0a:9f:d4:ff:4d:2f:03:82:4d:
29:21:89:79:1d:7e:e0:80:58:a0:1e:c5:73:4a:ec:83:1e:14:
b2:e2:ab:c0:9f:f7:c6:47:12:45:bd:4d:c1:25:47:a6:38:17:
b1:cc:f9:cf:25:a1:ec:6c:c2:ed:b2:8c:e6:21:e3:27:47:06:
1b:b7:a5:6a:e1:06:95:ac:b5:0e:0a:ec:68:40:d4:a5:45:af:
0d:fd:8a:73:a1:3c:d9:cc:84:bb:77:d4:b0:48:50:21:a6:ff:
df:ce:d0:50:e8:3c:c3:4c:15:40:b9:41:42:a8:42:04:3a:bf:
0f:a1:5b:5d:d8:ea:23:bd:f9:5a:da:58:b1:a6:c7:23:e1:dd:
ae:48:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:41:02 2025 by rpki-client