Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier: Eq6XBCyf1iO2HNSRydt3RtWt4CBWvi1eQrcXKhsTaYw=
Subject key identifier: 89:AB:B6:2A:AB:0A:21:F9:DE:48:A2:D4:2A:A9:A8:40:4D:61:51:0A
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial: 019A119599D0490379C99ECAAD8A7000D285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number: 142F
Signing time: Thu 23 Oct 2025 15:00:08 +0000
Manifest this update: Thu 23 Oct 2025 15:00:08 +0000
Manifest next update: Fri 24 Oct 2025 15:00:08 +0000
Files and hashes: 1: 34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa (hash: 0+PPWp0o1/rwBJiAmqaqRlxFY24T5j6RDdie2DfGC7Q=)
2: CqJnQHuWTrr1JOb1x2qlCn7qYBQ.roa (hash: raq5ehc6BfIUJsoK2h14SXHgtvt48xPVADOcv/2fuZ8=)
3: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: /JZ3uV6exyFbycDjHuj919rd9q1zovX1YWTx0QEAI3E=)
4: n5tnQjmPsSAa7e0U_BISzqIEQuY.roa (hash: MzEMfBEyS0reuH82ojDXQdP0KgBQQ3sK4Mxn6oyxx3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:95:99:d0:49:03:79:c9:9e:ca:ad:8a:70:00:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Validity
Not Before: Oct 23 15:00:08 2025 GMT
Not After : Oct 24 15:00:08 2025 GMT
Subject: CN=89abb62aab0a21f9de48a2d42aa9a8404d61510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:2e:d4:e0:7d:30:38:86:54:1f:d9:ab:fa:
e7:02:9c:3e:72:72:56:6e:3d:b0:22:40:01:98:a4:
57:f8:01:f8:a5:6b:26:a5:82:86:3e:30:f5:7b:c3:
e6:72:e9:73:ab:1f:ed:3c:1b:e0:18:72:b2:9b:9f:
c7:bc:ec:74:3e:80:4d:ed:4a:92:85:e5:34:59:5a:
18:32:ff:fb:a0:5d:fa:5f:27:29:5b:95:ff:cb:51:
80:8a:b1:58:53:90:f5:1b:36:8e:19:ce:08:33:0b:
b5:46:d3:f3:0c:62:e2:29:da:da:1c:63:0f:bc:6f:
a9:f5:95:09:38:1e:6d:b4:7b:d1:5b:03:20:3f:5e:
8b:ac:68:80:dd:ac:c9:a5:98:ec:70:a2:37:89:32:
fb:d1:80:11:a1:26:82:42:68:80:18:07:f6:3b:0e:
e3:8a:3b:bf:3b:10:38:88:29:67:52:cc:47:e5:f8:
c7:3c:87:d0:08:5e:9f:1c:4e:64:30:88:82:16:85:
cb:de:00:9c:92:05:a5:0f:64:90:46:51:80:a5:cc:
16:ba:4d:68:2e:6c:4e:4b:ed:ce:30:af:7e:b7:f7:
a4:ad:83:85:a6:55:de:02:27:2c:1e:49:60:c6:f1:
20:d6:b3:ec:c5:83:73:07:4c:3c:89:35:e5:67:fe:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:B6:2A:AB:0A:21:F9:DE:48:A2:D4:2A:A9:A8:40:4D:61:51:0A
X509v3 Authority Key Identifier:
keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8d:e6:d4:26:c3:c2:28:c1:85:41:95:40:3e:49:4a:34:6a:
a5:5b:eb:7d:63:c3:b2:76:95:88:a1:b9:fb:0d:11:b9:29:65:
d6:e4:d2:b9:1d:dc:c2:d5:49:77:d2:d7:a7:76:35:92:10:0b:
48:5a:d5:5b:98:00:94:ff:4d:a6:75:4e:49:ee:a8:4b:91:aa:
6c:dd:ad:4e:e4:6d:31:15:f1:93:3e:86:ec:b7:39:e2:2c:16:
d6:bc:11:79:58:06:7c:79:bc:76:4f:32:e4:8b:41:2d:c5:dd:
2b:ba:a3:15:30:6f:ba:5b:e2:45:da:3d:08:0e:89:ca:99:ef:
6d:8a:a4:8b:84:1f:a6:19:94:92:f0:2c:3c:1a:0f:f5:bb:a6:
ac:ea:04:18:3c:c8:ab:1d:7b:19:79:bc:0c:96:1e:57:e5:ee:
6a:1a:36:37:aa:13:eb:e8:cb:de:c3:fb:39:e1:55:53:02:ed:
cc:2e:a6:51:56:0e:61:2f:1a:41:cb:ae:3d:f0:ee:35:65:60:
93:7a:85:da:d3:52:0b:d5:23:82:a3:7d:16:ba:e0:23:18:ff:
45:c3:ba:95:06:a0:a2:96:04:4e:33:c4:73:6e:98:7b:6a:3f:
60:63:b2:a2:7b:f7:a8:20:58:9d:d8:32:b7:e6:7a:99:21:c9:
32:07:82:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:04:38 2025 by rpki-client