Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: cs03Hw54Jx6gyfl1HdNgkLRg8OMHb0SNxIZFKUyqZtA=
Subject key identifier: 28:CA:8E:85:BB:B7:63:B6:FA:00:1F:F0:B4:F5:92:20:12:1D:FA:F1
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 019A25F8404D0C7C67CDC6801581C1922D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 14:00:17 +0000
Manifest this update: Mon 27 Oct 2025 14:00:17 +0000
Manifest next update: Tue 28 Oct 2025 14:00:17 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: F7OdVNnj4IOIN4PrTsA84by95dAWlOwmrD43Gx31BLY=)
2: wPSm9MaczVOfJa8MmydVyNm05v8.roa (hash: EUTCJOzuqY4YxOtOde7m5gFxrTBwquCzBL62eKVTyyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:40:4d:0c:7c:67:cd:c6:80:15:81:c1:92:2d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Oct 27 14:00:17 2025 GMT
Not After : Oct 28 14:00:17 2025 GMT
Subject: CN=28ca8e85bbb763b6fa001ff0b4f59220121dfaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:8d:c1:40:57:89:95:80:f2:2b:fb:b5:e5:
94:7a:13:69:85:a2:ba:fc:2b:5c:d9:21:9b:0c:47:
a4:61:5a:79:c0:e4:de:3d:10:05:df:32:c8:55:e7:
78:8b:8b:79:1c:ff:11:87:b6:10:38:52:39:6e:ac:
27:ae:a3:07:39:97:1f:90:81:d6:0d:ca:bb:bc:ee:
41:0d:6c:2d:ef:0c:69:59:b0:46:66:67:84:f4:f2:
5f:1c:55:39:8a:c1:67:e0:bf:40:1c:d2:83:7e:db:
7c:c2:0a:96:b5:4d:7a:0a:b8:0e:21:50:7d:8c:17:
72:e8:60:59:a8:aa:88:6d:81:5d:43:95:e9:d5:af:
5d:24:0e:59:5f:ae:14:cb:09:e8:e6:17:2e:4b:10:
2b:ca:a5:58:18:84:3f:3c:63:f9:6c:36:f6:8d:8f:
4e:ac:e1:34:df:45:1d:eb:81:1b:d9:f6:59:53:fc:
e4:43:0c:83:45:5d:c2:de:c4:76:d4:b8:27:15:5c:
ef:70:63:6f:74:ca:2b:53:64:df:d2:59:1f:01:a3:
97:31:61:c4:34:6d:85:78:1e:31:e5:be:42:31:62:
d4:b0:d7:81:c9:6d:02:73:85:91:d8:71:36:d3:15:
53:f5:16:b3:92:6f:b3:49:e1:04:6b:f1:c8:4d:ba:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:8E:85:BB:B7:63:B6:FA:00:1F:F0:B4:F5:92:20:12:1D:FA:F1
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6c:dd:25:46:af:2b:91:5e:e3:8f:9a:44:31:3d:4c:e1:87:
d5:fb:68:6d:8e:0e:82:4e:10:b3:9d:12:3c:7b:50:cf:f9:ae:
2a:97:ff:80:b9:d9:78:4c:57:56:34:97:a2:2a:96:d4:96:b6:
d5:7e:d3:d0:04:a1:fa:24:e4:02:6d:b4:39:af:b6:34:41:60:
bd:61:0a:fe:db:3e:b9:5e:51:01:bb:52:d6:98:4a:11:4c:4a:
d7:55:a4:06:d3:00:6e:2f:6a:bc:49:a7:91:c9:11:21:cf:0c:
ed:1e:a6:f5:b2:55:70:ee:83:09:b7:b7:c5:bb:7f:58:2c:12:
25:15:60:02:5b:21:da:a4:6b:bf:2b:4e:35:5c:f3:b4:24:1d:
01:70:82:f6:1f:c0:03:0b:06:b6:84:e2:e9:9d:1b:0c:36:a2:
78:12:63:ec:6e:d5:fa:20:38:d7:88:38:ab:44:1e:fc:78:45:
39:71:2d:8b:cf:42:87:4c:56:02:53:1d:a2:d4:17:97:a6:c9:
e8:8e:0e:18:43:77:f9:0e:2b:3e:1d:95:73:8a:27:63:7f:3a:
87:0a:53:65:bd:2e:b7:4a:bc:a0:33:d3:78:3e:1a:ca:9a:0b:
db:ab:d1:d6:56:05:af:b6:0a:00:6b:37:ef:5a:23:6c:ff:11:
a5:62:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:19:02 2025 by rpki-client