Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: YK7XSHGgxd7KlhWzB6X6uXJ1noWRKLbrN1B+jqtTE1U=
Subject key identifier: F8:EF:D8:41:CD:F1:76:2A:A1:38:D1:9B:B6:0F:86:DD:FB:0C:61:28
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019A13F2562ECF90647DF9781F32EEAA1764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 1333
Signing time: Fri 24 Oct 2025 02:00:40 +0000
Manifest this update: Fri 24 Oct 2025 02:00:40 +0000
Manifest next update: Sat 25 Oct 2025 02:00:40 +0000
Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: g6yAKcNr9IdvOG5I8g86tCfp7PBpN7tljMYLEwUzRYA=)
3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f2:56:2e:cf:90:64:7d:f9:78:1f:32:ee:aa:17:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Oct 24 02:00:40 2025 GMT
Not After : Oct 25 02:00:40 2025 GMT
Subject: CN=f8efd841cdf1762aa138d19bb60f86ddfb0c6128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:8b:5b:57:45:90:c4:99:6e:5e:c1:c2:e0:
b2:cd:5e:d7:0d:ec:0e:53:b8:ed:db:49:55:a0:7a:
ee:0f:50:2f:57:87:02:26:05:95:6a:7e:d2:b2:38:
17:e0:f7:4b:bf:77:d7:9b:6d:91:59:5f:9b:8a:73:
01:7b:f6:ef:6f:37:21:b7:c0:96:77:9f:0d:8f:b3:
b5:ac:3c:2c:86:ce:cd:5e:1e:50:52:6e:df:a6:4b:
36:63:85:3d:4d:0c:e7:3e:a5:78:e4:b1:b5:be:2f:
9a:35:d1:f9:5d:bf:7f:99:a1:2b:bd:9a:38:13:31:
05:ca:f1:68:e9:93:bc:ff:a2:18:77:85:de:f7:65:
cd:d8:6c:76:f6:15:a3:84:04:5d:d6:09:a9:5b:75:
9e:d9:6d:05:51:66:51:2b:4c:fa:57:07:59:06:21:
9b:5f:9f:fb:3a:54:47:de:86:d5:a3:d9:89:cd:74:
ef:b9:7e:04:c4:5d:7f:9e:a1:49:e7:39:c9:76:d0:
37:82:7f:10:9f:fd:d8:e1:90:49:11:a2:7e:a4:b5:
04:95:8a:11:a3:d6:6f:ff:42:5f:e4:bc:2a:d5:84:
40:88:e2:75:6a:70:73:52:3b:1c:4c:1d:98:da:77:
fe:5e:05:81:b7:09:5e:84:bd:ba:4b:e2:88:67:a9:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EF:D8:41:CD:F1:76:2A:A1:38:D1:9B:B6:0F:86:DD:FB:0C:61:28
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b8:92:3f:7b:17:d3:53:31:85:44:e1:e6:9d:47:25:8a:63:
ba:c0:bf:21:2b:fc:e8:18:d6:3b:c7:bd:94:24:45:b0:d1:c2:
4d:f0:15:f5:69:c4:03:ea:3d:b1:7d:d7:22:cc:da:b7:58:e1:
d2:52:37:6f:d6:50:65:0b:2b:cf:2a:7d:ef:f9:ea:cc:ad:b2:
77:4c:30:1d:8f:6f:9b:f0:1d:b4:81:1d:94:70:0e:86:47:09:
e3:ff:9a:b1:4a:57:20:52:c7:6c:5a:c6:3b:f2:22:ae:28:22:
ec:33:16:3d:e6:9d:70:3a:78:37:0f:ae:af:a4:37:cf:47:ea:
0e:31:24:cc:47:05:a5:95:e0:2d:8b:30:9c:0c:b1:be:1f:c7:
9f:1a:ce:65:d8:e0:ba:2b:0b:ed:64:00:6d:ce:2b:4f:bd:ae:
df:e6:5e:df:01:1e:92:5e:ad:f1:d4:c7:c8:4c:5b:db:40:ff:
60:52:c8:95:b8:38:ef:9f:61:1f:55:52:f8:09:0f:b9:fb:f6:
67:3c:87:2c:08:1d:f0:5c:17:6d:b6:3a:79:95:23:5e:e0:70:
94:b8:da:cd:e2:b3:ed:ae:0a:a8:b9:62:6f:0c:63:a7:b0:45:
a1:dc:35:2f:51:6e:69:72:19:15:dc:bb:37:92:69:0d:83:30:
f2:a0:f9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:59:23 2025 by rpki-client