Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
File: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json)
Hash identifier: vylpYW30UiDFFA2Jk+qxXVjorthjY6DJ2b8xzRaDNuA=
Subject key identifier: 59:B4:44:93:A6:C4:F9:69:F5:70:96:7A:73:C6:2F:60:76:5D:99:15
Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
Certificate issuer: /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Certificate serial: 019A23D2B6687176B5A99F44409F683FE3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 04:00:03 +0000
Manifest this update: Mon 27 Oct 2025 04:00:03 +0000
Manifest next update: Tue 28 Oct 2025 04:00:03 +0000
Files and hashes: 1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: v5EnxPm4TzAU959r+7o0RNH7KLXXGCqW54Swbx/rj+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:b6:68:71:76:b5:a9:9f:44:40:9f:68:3f:e3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Validity
Not Before: Oct 27 04:00:03 2025 GMT
Not After : Oct 28 04:00:03 2025 GMT
Subject: CN=59b44493a6c4f969f570967a73c62f60765d9915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:6c:8a:a8:01:60:7e:ef:f1:f9:5b:ea:37:
e0:28:ae:ac:26:f7:b9:13:8c:70:79:52:5b:ed:44:
7f:52:0b:81:43:ce:94:ba:20:42:00:bf:06:cd:99:
ae:0d:c7:cd:42:3a:f8:f6:87:5e:54:c8:13:e8:7a:
22:1e:5f:aa:cd:91:43:50:ed:3f:00:a5:18:a6:27:
c6:f0:57:99:c7:e6:5a:65:02:52:3b:95:e9:f6:37:
3e:aa:89:8e:2d:70:cd:8b:03:90:db:05:f9:6d:d1:
3b:48:a2:29:b9:38:31:d6:66:4f:3f:8e:e9:75:9b:
f2:72:fa:81:3e:a2:fe:18:3c:2d:31:ea:10:f2:61:
43:c8:c7:a4:44:a6:79:39:9f:36:56:1d:59:d8:a1:
e3:73:14:4e:9e:86:1f:c9:09:3d:7e:f6:f0:04:dc:
e9:2e:5b:4e:21:20:51:d5:71:94:2b:69:1a:a6:13:
bf:7e:eb:5e:60:77:9b:ad:91:f5:e2:0e:03:bc:76:
f6:ce:9a:e7:24:9a:66:1a:24:e9:d2:c9:fe:0e:2c:
0a:c3:b0:d3:dd:8a:f9:dd:bb:eb:26:9d:37:12:8a:
95:77:75:c8:21:a5:09:27:6a:68:f0:27:29:60:ac:
1a:e9:02:de:4f:a7:91:a8:cf:57:8a:d9:ff:c8:67:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:44:93:A6:C4:F9:69:F5:70:96:7A:73:C6:2F:60:76:5D:99:15
X509v3 Authority Key Identifier:
keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:a1:91:5c:4a:69:f0:af:9e:af:41:d5:8e:ac:a8:8b:58:
3a:02:40:19:03:a1:3b:9e:44:bb:01:a7:c4:5f:f4:19:70:48:
bf:0f:6e:a3:90:34:22:81:ce:7f:92:a3:c0:5d:2e:b7:cc:d3:
2b:62:91:b5:a3:54:7c:17:77:79:f0:a8:8d:38:e8:87:11:d7:
0f:db:6d:22:ab:d7:f2:9e:66:b3:af:c2:ad:d4:f2:c4:97:12:
72:0f:20:a2:24:88:c6:c8:de:df:20:93:aa:b3:2a:26:d7:37:
62:59:2c:53:d1:25:1d:48:fd:bf:b8:71:75:e4:51:4e:2d:27:
fb:96:b6:3e:13:c3:14:64:76:66:df:2e:4b:96:d5:f0:54:95:
58:43:b7:60:3d:85:87:42:b8:5c:a8:02:df:1b:46:b5:5d:c3:
0c:0b:ae:16:03:56:59:e1:d0:c4:da:5a:65:0e:31:c5:36:5f:
cd:a2:6c:c7:24:f3:f2:34:93:1c:ed:eb:3c:8a:8e:0f:3c:8e:
f8:81:7c:53:a1:18:d0:be:2c:a2:46:6b:0d:b4:39:94:80:67:
d9:06:1e:57:87:7d:2b:be:a6:81:10:87:a9:7f:26:51:91:f5:
83:97:05:84:6a:72:ff:71:d8:ae:6a:2d:29:3f:79:72:90:0a:
03:83:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:33 2025 by rpki-client