Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: ObDjcceJFg9c1c969ZtiKDZEsxb6wZ6VkESZ8tVPe+w=
Subject key identifier: E6:D5:4A:46:20:1D:2D:A8:AF:E7:69:01:C3:81:B1:51:7D:CA:68:C4
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 019A02228F7EB2A8AF17E7B65F281D745CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: 0358
Signing time: Mon 20 Oct 2025 15:00:10 +0000
Manifest this update: Mon 20 Oct 2025 15:00:10 +0000
Manifest next update: Tue 21 Oct 2025 15:00:10 +0000
Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: bjH7TtiQHnyy+ehiZSn3Gmpr+45UOGNiQTxuy8LvcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:8f:7e:b2:a8:af:17:e7:b6:5f:28:1d:74:5c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Oct 20 15:00:10 2025 GMT
Not After : Oct 21 15:00:10 2025 GMT
Subject: CN=e6d54a46201d2da8afe76901c381b1517dca68c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:0c:07:f4:ba:03:52:1c:f1:f4:fe:65:10:
ea:74:38:96:84:a4:dc:63:01:01:2f:47:f7:4d:97:
8d:64:22:ab:87:36:f4:ce:0f:11:a4:f3:9a:5c:80:
70:ae:73:9c:ed:a5:1e:36:db:90:65:46:1c:0c:17:
4d:29:7e:73:58:55:c5:d5:41:d6:4b:3e:d7:97:5d:
e2:93:93:03:43:ed:f6:dd:73:4b:6f:cc:81:63:f3:
16:3a:31:06:c9:0f:2a:2e:e5:58:c0:07:87:ec:a5:
67:40:1d:1a:bd:f6:51:81:0f:83:97:ac:01:cf:d4:
d0:a3:80:76:63:48:81:f4:22:b2:c5:1a:a6:56:5c:
90:c0:2f:52:58:21:37:9f:91:cf:c8:cb:9e:fe:57:
4b:d5:ce:e0:55:ba:eb:8a:c9:23:fe:04:b6:4c:38:
a5:f7:53:a5:da:e8:c3:49:c3:93:61:59:d2:7c:50:
a6:06:ab:4f:60:9c:77:a4:88:fe:00:17:72:b4:48:
8c:a6:f7:d8:3f:f3:03:bf:bd:d7:c0:d4:92:15:fb:
2c:1a:d9:03:89:a2:24:0d:7a:dc:68:c6:0d:a1:44:
33:d3:ec:5a:e7:83:a9:6e:71:9b:34:d9:2f:4c:3f:
c5:a0:ba:0c:74:fe:c2:4e:f7:74:e7:93:63:b3:c3:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D5:4A:46:20:1D:2D:A8:AF:E7:69:01:C3:81:B1:51:7D:CA:68:C4
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1b:b6:e0:c9:0a:b3:f0:0e:bb:1c:b7:fb:2c:96:92:91:5f:
a6:c9:bf:8b:6d:79:db:99:08:cc:f9:11:f8:e1:a6:e2:81:ca:
28:ca:6d:c5:83:f9:48:9a:93:fa:dc:6d:cb:4c:32:29:bc:53:
f8:42:ce:d5:a5:3d:c1:07:c3:a4:cb:df:61:90:72:c7:f6:36:
b7:b8:22:20:68:0d:a9:55:ff:bd:d9:45:86:02:38:f7:5d:a8:
a3:e7:e3:ee:e8:e9:be:b5:29:86:d3:3b:d8:a9:7e:4e:88:2c:
f6:61:ae:f5:37:96:82:a7:90:1d:b9:f5:cf:b4:46:00:b8:09:
f0:c8:9b:af:55:06:30:d6:94:cc:0c:c0:ae:f0:ce:59:97:f3:
46:13:74:f0:e7:d9:fd:6e:5e:0e:fa:fe:f4:0f:91:fc:05:f4:
20:2b:01:38:6f:ae:69:55:87:6a:d6:f4:5f:d7:74:f6:bb:5d:
08:ee:a2:cd:b0:11:5a:96:33:0f:7f:de:64:fc:40:f3:ab:59:
b9:63:2f:9e:bc:98:78:bc:83:bd:15:95:de:33:f4:55:9b:03:
9f:e4:da:b8:80:35:fd:f6:df:de:bf:e2:ba:23:eb:6a:53:da:
98:73:41:e8:57:19:5b:9d:a5:4d:42:0b:b7:28:dc:a4:cb:c3:
87:fc:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:29:53 2025 by rpki-client