Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: UnXUZr9tLEWVwloY4B4EvXl5YNllU9Z8qaDIVv76deg=
Subject key identifier: D8:90:F4:2A:A5:48:19:CE:76:21:81:ED:92:91:BC:0A:44:A8:E6:9A
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 019A1A2B1D580F8A78E9512BE5DFD68D8839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 015A
Signing time: Sat 25 Oct 2025 07:00:24 +0000
Manifest this update: Sat 25 Oct 2025 07:00:24 +0000
Manifest next update: Sun 26 Oct 2025 07:00:24 +0000
Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: MvWlVfrVbZmHaJLK98ES204nvZMadqT48WIzeT4OmdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2b:1d:58:0f:8a:78:e9:51:2b:e5:df:d6:8d:88:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Oct 25 07:00:24 2025 GMT
Not After : Oct 26 07:00:24 2025 GMT
Subject: CN=d890f42aa54819ce762181ed9291bc0a44a8e69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:07:5c:1a:c0:0c:43:18:53:1c:5f:0c:92:
7a:15:7e:98:60:b3:d8:55:64:fe:5f:49:ec:74:31:
94:9b:f9:43:ef:f5:99:64:bc:a1:39:63:eb:a8:37:
3e:78:11:9d:ee:dc:46:99:0a:cd:ca:18:4f:4e:61:
9c:5a:81:e0:95:1c:a9:c5:72:47:17:cd:81:97:52:
23:f7:9d:91:62:0e:67:99:47:ca:f7:98:00:5c:10:
d1:85:6b:2f:ca:ff:31:66:e2:5b:12:04:b3:57:dc:
96:a4:bf:3c:c7:08:ee:7d:35:aa:a2:b3:af:d2:26:
44:6b:87:35:ce:7b:da:6c:86:6e:00:00:9d:1a:21:
02:c5:18:1d:65:c7:fb:7d:05:d9:c4:87:da:3d:2d:
41:ec:9a:39:05:86:ca:6b:e2:6a:81:16:7c:ca:a0:
eb:74:a8:34:61:3b:e7:6d:66:80:e9:9d:90:f2:0b:
af:03:20:59:06:ff:09:7a:1c:35:ca:19:4c:dd:b7:
47:2b:9e:a4:19:d9:0b:0e:0d:af:bf:15:33:34:76:
18:09:b2:f0:81:cb:ae:12:a5:69:71:fa:c5:b3:ab:
1d:8f:69:f9:2e:09:eb:e0:57:fb:9a:b1:fb:5f:e3:
f1:77:fb:66:a6:b3:f0:03:9c:ab:08:0b:c2:9c:77:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:F4:2A:A5:48:19:CE:76:21:81:ED:92:91:BC:0A:44:A8:E6:9A
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:61:30:04:11:14:23:53:1e:55:e4:72:29:d2:56:0f:df:3e:
9d:15:25:04:53:c6:23:a3:e4:b8:d2:0d:ad:73:92:77:bb:de:
b3:d1:06:28:e3:3f:c7:67:a7:78:4e:d5:b6:7e:91:8f:d9:32:
db:59:3c:8c:4a:ec:d5:35:df:70:79:2e:9e:64:5a:c6:34:3f:
0e:7c:2b:4c:d2:95:bf:5a:b0:9f:be:b3:9b:45:4a:69:b7:73:
a1:dc:f6:81:4e:d3:79:b2:6f:44:8c:e2:4f:a7:29:48:dd:9e:
f9:e8:1a:04:13:d7:55:a4:37:c3:6f:c9:e4:50:15:ff:0c:23:
46:43:2e:68:b1:19:d5:90:09:91:9b:fb:d8:0f:d7:d6:6f:f4:
5a:6d:3e:c8:20:7d:52:8d:70:10:a6:22:0f:e1:cc:a3:cf:86:
b0:38:7f:2f:40:cf:d2:6b:7b:1d:9b:ee:f3:20:6b:24:92:b7:
ad:3e:f7:e4:ab:62:b9:d2:44:7e:8c:b6:11:64:d5:93:52:4e:
ab:2a:bb:f7:83:75:dd:23:f1:4f:83:21:f6:6a:c9:a0:2d:ee:
7c:8c:63:3c:e9:f9:d1:39:10:b1:78:8e:3f:48:7f:e3:0c:7d:
8e:79:f2:02:19:36:82:34:5d:bf:13:f2:7a:8e:2b:52:b6:fd:
b3:2a:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:35:14 2025 by rpki-client