Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
File: Mke--VN94WS_urpRZr4CrPftgto.mft (raw, json)
Hash identifier: pMPqUA143weDNl9iF6buqwsUM4CSOzvJid6g4zLGuts=
Subject key identifier: BD:EF:15:D9:89:21:B7:D8:3A:EB:4E:5E:72:FC:89:4D:54:AA:B0:AD
Authority key identifier: 32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
Certificate issuer: /CN=3247bef9537de164bfbaba5166be02acf7ed82da
Certificate serial: 019A725CA12851F13713F79FBDB648546ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: Mke--VN94WS_urpRZr4CrPftgto.crl (hash: DRkgEF+c8bhuo3Ot3NvzZkWQZD/38bsTJqYkSrXp9g4=)
2: R8dDOPWAWF4Nf2RYr-ub9zM-8cI.roa (hash: Vcu+MbNMM/yJaD82Silul6HdyQc+gF8UimqpbdwDqq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a1:28:51:f1:37:13:f7:9f:bd:b6:48:54:6e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3247bef9537de164bfbaba5166be02acf7ed82da
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=bdef15d98921b7d83aeb4e5e72fc894d54aab0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:4b:77:d1:10:61:64:ef:bf:b1:0c:93:47:
5c:9e:b2:3d:b4:2c:77:d7:45:e7:36:66:c3:17:8e:
29:ea:4b:df:7c:14:57:38:c3:96:5f:7a:97:23:a0:
f5:2f:6d:d3:20:8a:e5:64:ec:fb:e9:c5:69:dd:c9:
5d:05:0c:eb:db:26:1d:33:28:d1:76:60:e8:49:ba:
fc:d9:72:ee:18:6d:b5:96:80:8b:c7:bd:a0:82:59:
48:4d:13:cf:e4:25:dd:8e:ee:3a:c9:e4:12:45:60:
d8:61:18:45:8e:71:25:eb:b2:e5:cb:cd:2f:21:40:
41:c0:21:30:bd:bb:6a:a8:f7:12:b6:b4:b3:a4:c6:
10:a7:ef:69:6a:2b:4c:7e:26:c7:ee:86:23:d3:dc:
f7:41:75:25:11:6b:d1:95:41:47:96:a3:f5:e3:48:
0b:70:e9:8a:a8:16:6e:79:62:a5:f8:63:ec:7c:3b:
d8:5e:ef:bb:66:19:f8:c3:9e:70:31:45:aa:2a:e9:
d0:bb:58:5e:8b:d9:4f:66:ff:b5:88:6d:87:06:95:
bd:38:46:c0:95:6f:2f:9e:e7:9b:98:2b:6b:0d:1a:
ba:4f:91:4c:f5:89:89:90:c5:c1:89:bc:f8:f7:11:
b1:a6:1e:40:39:16:b7:2f:7a:53:37:3f:e9:4e:ea:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EF:15:D9:89:21:B7:D8:3A:EB:4E:5E:72:FC:89:4D:54:AA:B0:AD
X509v3 Authority Key Identifier:
keyid:32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:c2:56:ac:14:10:33:9e:50:75:33:ef:b0:7b:e8:6b:e0:ab:
75:dd:ff:64:9b:c5:89:c5:fe:60:6b:3b:04:24:e8:06:3a:e8:
f9:54:e5:11:45:14:a6:60:c4:d2:06:9d:ac:bf:8a:44:05:db:
8e:25:37:7e:3b:0c:e8:3d:83:82:b4:dc:f5:fa:1b:54:c5:9a:
ba:57:b9:f3:9f:09:0d:9d:b3:20:ce:dc:58:80:2b:09:c1:df:
17:b7:68:68:76:8f:3a:75:60:f8:d8:8b:7f:51:8a:60:7c:34:
12:1c:45:83:bd:5f:ac:fe:c8:82:d4:d3:28:fd:4c:73:ad:51:
c9:d2:e1:38:5d:1b:aa:8c:af:e8:b5:0c:a1:90:f7:b1:59:5b:
3e:1f:97:8d:a1:7e:9b:32:7e:15:54:b4:6f:d2:9f:12:8a:f1:
80:97:78:93:6d:5d:0d:5d:61:60:92:d9:6e:4d:8b:62:59:b7:
b4:c9:01:3d:6a:e8:09:f4:47:f4:5a:3b:35:57:bb:1c:4f:84:
89:ce:f9:3c:87:d3:b7:58:e6:0a:be:ad:1b:33:5d:a8:4d:a9:
c4:52:a8:55:83:7c:c4:17:85:bf:7e:04:e5:5b:7b:52:cb:f1:
ca:f3:89:85:12:04:01:13:2a:c6:b1:68:21:0c:1d:9b:81:e7:
ec:ba:ca:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:21 2025 by rpki-client