Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File: Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier: jReqXH34GUpLAQRl218Leyuj9Rm13JWHbfoKhO62Umk=
Subject key identifier: B6:FB:65:CB:68:3E:DB:00:8C:1D:A0:7E:FE:21:4F:D8:57:A7:35:B7
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer: /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial: 019A2855E376DAE84FE8F3EE986DA02435B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number: 168C
Signing time: Tue 28 Oct 2025 01:01:48 +0000
Manifest this update: Tue 28 Oct 2025 01:01:48 +0000
Manifest next update: Wed 29 Oct 2025 01:01:48 +0000
Files and hashes: 1: IqkEA-rqe3obsi9U0tATjcGiORw.roa (hash: pdv/Uop5nT0xWWcfbMOXH1ucooA/J/I4hHoF5p2oy/A=)
2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: coomtlruVA/YAhQ6r8TlhY6dLRbAUUyo9aVDMTOD9Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:e3:76:da:e8:4f:e8:f3:ee:98:6d:a0:24:35:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Validity
Not Before: Oct 28 01:01:48 2025 GMT
Not After : Oct 29 01:01:48 2025 GMT
Subject: CN=b6fb65cb683edb008c1da07efe214fd857a735b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:4b:08:af:f9:ec:5c:5d:eb:6f:49:ee:88:
e9:1a:76:a4:2e:16:0f:42:20:f1:b8:2e:b8:54:11:
51:ed:7c:c5:27:e0:1e:30:44:6c:05:ee:97:2f:e9:
b7:69:6c:73:bf:de:3a:7f:a0:20:00:76:8b:a0:ce:
32:e4:dd:29:77:4d:66:27:3e:46:04:1c:7d:54:77:
1c:58:0f:e8:b1:a6:06:46:f3:0a:f9:c1:32:04:59:
63:24:96:d1:bb:9f:a1:b1:e3:bf:52:3e:41:b3:de:
cb:4a:ee:8d:67:22:88:db:2d:7b:2c:8d:42:bf:9b:
e0:82:f8:4c:80:65:c2:fd:5e:c4:61:c3:2d:8b:72:
9d:71:f8:51:15:89:29:52:e8:54:00:1b:2c:dc:89:
0c:13:72:ba:4c:2e:99:46:df:b1:15:83:33:41:19:
ed:81:aa:24:87:cc:8d:13:48:01:ba:89:d6:bf:2a:
82:45:e7:d0:21:81:98:a0:c1:aa:9a:a0:88:93:30:
81:c9:7c:44:92:1e:cd:70:57:ac:18:97:7c:47:a8:
ea:f1:f7:3c:4b:9d:89:d0:4b:17:c4:68:a0:32:d9:
c1:da:78:e5:aa:5c:57:94:49:e1:4e:6b:69:8f:09:
3c:48:84:06:38:47:ba:5f:d7:39:58:bc:bd:a3:32:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:65:CB:68:3E:DB:00:8C:1D:A0:7E:FE:21:4F:D8:57:A7:35:B7
X509v3 Authority Key Identifier:
keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e4:8b:fc:15:64:09:a9:23:2a:02:e8:fb:d8:b3:3b:d1:7d:
8c:b9:ca:07:91:c8:9d:51:36:45:b6:12:e8:9f:ab:b3:e9:69:
b9:76:b2:57:26:ce:29:1c:46:3d:61:b8:bc:e2:91:cd:ef:70:
8d:68:a7:cb:ba:8c:a5:6e:20:4c:f0:99:94:14:94:e9:a7:fb:
9a:4d:f3:26:67:a2:aa:d9:a5:4f:cd:58:df:a3:91:31:40:f1:
bf:63:38:2d:97:9c:a4:b2:2d:e1:4e:a2:a3:04:cc:47:0c:a2:
53:8b:c5:88:15:a2:a1:10:21:7e:f4:9c:0d:ad:ca:78:99:bb:
55:14:39:38:3b:5b:5b:49:6b:66:b4:11:e3:ab:43:f5:ca:52:
a0:de:da:b6:07:2d:96:7f:e9:09:ec:70:02:cf:2c:ef:34:d3:
5a:8a:81:6e:5f:58:f6:e7:3b:9a:ca:40:1b:d4:d5:e5:d8:7b:
dc:e3:4a:28:f7:08:0b:44:f2:d8:ff:c3:5a:25:56:bf:16:1a:
f9:f5:11:0d:98:5d:ae:e2:66:0f:35:42:8b:8b:9e:57:a9:6b:
df:c2:f2:60:d2:fa:56:8a:0a:15:aa:88:20:5d:99:9b:ed:4a:
5d:76:a1:cf:09:b5:9a:e7:48:c9:9e:6f:d4:55:9b:ea:37:a2:
22:c1:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 09:22:03 2025 by rpki-client