Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
File: mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json)
Hash identifier: 3Eoi7s2IfHJ09DtNhuxDZ8h15bRsCFEHQkFu0j1Tgzw=
Subject key identifier: 94:5A:7F:49:EC:99:28:59:7E:E4:54:86:E8:0E:5F:29:97:7C:B9:58
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial: 019A27AF9041548F6E0E1B78D1F38B479A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 22:00:08 +0000
Manifest this update: Mon 27 Oct 2025 22:00:08 +0000
Manifest next update: Tue 28 Oct 2025 22:00:08 +0000
Files and hashes: 1: DJ9c19i6-KdVhR4wxk4rl1TwOA4.roa (hash: 9EgmYxbySr7FvyMgHaLB4XxWt5JwrgMM/8o6In9Xr3E=)
2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: jgli1WvcXVz/ziDjs5D6216DDrJVFOyqj0ah9Q/qOsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:af:90:41:54:8f:6e:0e:1b:78:d1:f3:8b:47:9a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Validity
Not Before: Oct 27 22:00:08 2025 GMT
Not After : Oct 28 22:00:08 2025 GMT
Subject: CN=945a7f49ec9928597ee45486e80e5f29977cb958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:2a:bc:f1:38:43:04:76:e9:0f:39:03:a9:
07:f8:db:ff:a8:8d:ea:16:ac:42:f8:1a:52:9e:bf:
ec:bc:48:b9:2d:1c:18:06:15:af:5a:89:1b:9a:96:
fe:6c:8c:88:ff:89:51:ea:c9:8a:31:06:d0:3c:fd:
c6:13:e1:6d:97:13:7f:2f:b4:4c:2d:ad:6f:44:47:
c2:70:1d:fa:ef:79:03:fb:a3:4d:7c:ff:b8:00:c1:
b1:ce:81:e3:1d:cc:3b:b9:56:42:12:2c:0b:df:ab:
9b:93:01:20:e5:66:e6:5b:16:86:37:df:f1:61:4a:
b7:c5:5e:17:c1:6c:70:78:a7:c7:b6:63:52:4a:c0:
ca:58:6c:c0:07:4e:84:c0:f9:08:52:76:c7:a1:d0:
04:ed:b2:c3:ea:18:05:90:14:ac:a1:72:a1:15:95:
de:80:ec:94:6e:28:af:65:55:e0:3b:6e:48:67:f0:
68:8f:2f:93:66:7b:28:50:8e:17:37:a8:57:ed:9a:
50:31:f9:56:e9:f4:87:bc:2c:cd:48:7f:b3:16:3c:
f0:1b:db:12:69:11:b3:65:03:96:e1:ad:fe:00:ed:
d8:1f:42:29:b9:7d:f4:74:15:5a:61:82:59:73:9d:
26:88:f5:4b:5d:e5:27:0a:2a:a6:b0:7a:e5:86:27:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:7F:49:EC:99:28:59:7E:E4:54:86:E8:0E:5F:29:97:7C:B9:58
X509v3 Authority Key Identifier:
keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4b:d4:cb:13:b4:6a:37:25:c7:04:13:3a:a0:3d:ad:0c:67:
82:72:1b:6a:20:e0:d4:f4:84:ae:af:ff:ae:a7:1a:fa:ab:b0:
2a:87:77:44:27:73:41:c3:41:d2:7c:9c:41:5a:4a:1b:42:0a:
d4:44:41:c9:e1:d5:da:ef:95:78:f0:38:77:4d:d6:b7:e4:cb:
9c:57:1b:b8:a1:6c:21:52:36:41:4f:66:6c:8a:25:12:f2:e3:
60:4f:d3:e3:fa:d1:fd:5d:05:7b:d8:65:a6:cf:15:e2:64:5b:
de:66:ee:ed:6e:f6:74:09:e9:30:7a:44:4b:6d:47:c2:04:bd:
0b:52:9c:3a:db:44:16:69:61:a9:4f:21:20:9e:c9:c8:2e:fd:
77:23:70:5f:6d:f3:57:78:76:09:66:d7:be:50:d0:71:3c:de:
52:94:d2:fc:69:8e:9a:57:4c:b8:61:dc:49:11:89:a5:f7:05:
85:53:6b:9a:cd:bb:e4:69:0a:93:dc:5a:7a:7a:df:ed:b6:f6:
48:a5:0a:72:ad:bd:a2:38:96:c5:f3:90:3d:22:b7:c4:2c:28:
e2:a0:e4:71:60:14:9d:a1:b8:7f:21:be:74:db:da:cc:31:4b:
ce:ff:a2:20:92:71:06:94:1f:de:ff:43:17:17:c4:61:80:2c:
dc:f7:a3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:35:19 2025 by rpki-client