
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File: MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier: dwEepICbpvrW6nGUzZG4F3inw1ThyYY3hKNfZ9HuLJY=
Subject key identifier: BC:3E:7E:45:0D:81:18:1D:65:17:5B:C6:C1:A4:59:F9:04:58:30:B4
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer: /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial: 019A26675BC82A976C5B9943FAD612A56D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number: 5F
Signing time: Mon 27 Oct 2025 16:01:39 +0000
Manifest this update: Mon 27 Oct 2025 16:01:39 +0000
Manifest next update: Tue 28 Oct 2025 16:01:39 +0000
Files and hashes: 1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: 04QJAk6BOfmmabiqIdEYk2qsx5AFrl8Eib7OlFsSmfA=)
2: QhmGkcRygSZ5ihQLsVW91SIUW9s.roa (hash: YN0HNJUwhKmoGvr9Z1SSlKCl4sVnuUTF191h7YfoZmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:5b:c8:2a:97:6c:5b:99:43:fa:d6:12:a5:6d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Validity
Not Before: Oct 27 16:01:39 2025 GMT
Not After : Oct 28 16:01:39 2025 GMT
Subject: CN=bc3e7e450d81181d65175bc6c1a459f9045830b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:4b:08:70:6e:98:b0:a0:2c:bb:6f:71:83:
bd:9d:7c:81:1a:22:58:45:96:69:14:d9:64:9a:94:
67:2d:4b:23:cd:21:29:ff:47:76:e7:b0:e7:f9:a9:
cc:f2:b4:26:51:28:4f:1d:8e:c3:c3:c0:b9:6a:85:
08:9c:7e:45:0b:7f:2a:a4:3a:9d:2f:3e:e6:aa:c8:
7a:89:9c:4c:28:fb:71:53:39:53:c7:0e:83:ad:b9:
0d:8c:ea:b1:63:10:09:47:38:57:79:80:d6:b7:16:
23:04:90:b5:96:ae:c9:fc:17:36:95:76:8e:3e:b5:
d6:89:3d:1c:1e:fb:d2:a3:98:47:98:3b:bb:4e:9c:
34:09:ab:30:4a:eb:c7:a4:49:ff:4b:c3:1f:ef:95:
27:3f:06:b1:68:60:93:7f:db:ae:50:13:3b:20:f1:
fb:41:7e:5c:df:6b:9e:7e:98:2f:da:66:77:34:fe:
92:88:19:39:24:d9:a5:cd:fc:17:73:b0:4d:37:45:
65:54:8e:7c:ca:1e:69:d1:98:9c:83:48:84:5d:0a:
fa:c8:11:80:7e:0a:1c:0c:59:a1:a3:c1:1e:a3:07:
50:8f:cc:03:96:78:39:30:6c:9b:3f:95:a4:d6:25:
59:99:0a:92:2e:04:44:e7:36:c7:63:79:18:b9:4c:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:7E:45:0D:81:18:1D:65:17:5B:C6:C1:A4:59:F9:04:58:30:B4
X509v3 Authority Key Identifier:
keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:88:fd:e3:23:20:87:55:0b:22:ce:c1:40:33:d0:0f:db:d3:
c3:cc:c0:b0:c9:7d:4e:be:b0:67:a1:7f:c6:64:eb:81:e1:e7:
5f:4d:f2:a0:20:6c:28:22:c0:1d:c7:aa:04:e9:8d:01:2b:74:
e0:72:2a:a6:de:36:02:ea:77:fc:6f:57:66:da:c7:2d:39:d2:
49:41:cf:fc:25:93:f1:2c:7b:d3:3d:30:2c:46:df:f9:8c:7a:
78:01:ea:f2:6b:9c:e6:9b:d1:69:6a:52:44:c3:40:02:a4:70:
bb:e3:f9:21:3f:64:60:6c:f0:18:ad:5b:53:20:a2:88:ad:03:
97:4a:90:96:c6:f5:52:b6:e4:b8:62:22:c8:d1:5a:b0:dc:f3:
f1:dc:ea:ac:c4:78:47:cb:c2:d1:55:69:dd:94:a5:0f:d6:de:
ce:62:ac:90:88:b9:b3:89:5f:80:57:93:c6:1d:d2:bc:41:73:
09:71:8d:7b:5b:4d:91:7c:78:f0:0e:e2:c9:90:07:d4:15:31:
fb:e3:62:71:91:ea:c3:08:6f:f1:8e:68:da:80:e2:de:59:38:
52:a2:02:0f:a8:f8:0b:f9:b6:69:37:a8:2d:1a:6c:15:a8:24:
dd:ed:9f:49:c1:03:c1:88:5b:e3:f6:6d:52:1e:bf:ef:bf:b9:
43:2c:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:24:54 2025 by rpki-client