Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: 9waeBZzzyC7cvAvqmKobST8IGp8/BFWygsmQcnjBevg=
Subject key identifier: 01:21:4F:76:78:E9:D5:3F:68:D3:62:2F:E5:D7:94:F0:4B:AC:A1:81
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 019A0A4A15ED36A701CA572190D2F397C0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0CFE
Signing time: Wed 22 Oct 2025 05:00:18 +0000
Manifest this update: Wed 22 Oct 2025 05:00:18 +0000
Manifest next update: Thu 23 Oct 2025 05:00:18 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: Gl2jNQYXeS4WMcxnxYUx+8KE5q06vdmEcKIY/t1CnJ4=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:15:ed:36:a7:01:ca:57:21:90:d2:f3:97:c0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Oct 22 05:00:18 2025 GMT
Not After : Oct 23 05:00:18 2025 GMT
Subject: CN=01214f7678e9d53f68d3622fe5d794f04baca181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:bb:df:2f:2d:23:8d:f4:83:c1:35:5d:3c:
9d:26:f3:aa:27:2b:3c:ae:61:d3:42:ef:30:d0:39:
c6:4a:6d:a7:91:99:83:ef:5a:07:12:db:6c:d9:16:
d3:8a:86:55:65:ce:1e:ee:35:75:9f:4f:b6:df:f7:
c2:e0:87:69:0a:c1:8d:a3:f1:c0:5b:40:4a:ee:fc:
0e:26:f8:7c:65:8d:d2:b0:85:8f:bd:79:ff:fb:50:
d6:4e:82:bd:5e:0b:11:a0:88:9e:e2:6e:41:55:dc:
3a:74:d2:48:c3:2c:ea:15:41:14:62:1a:c8:2b:52:
db:f7:97:93:2f:78:e6:d0:3a:c8:c1:7b:f1:7c:6a:
08:78:f1:55:e0:de:0e:09:9e:6f:4c:5d:df:69:ec:
df:09:38:76:d8:20:15:e8:ca:2a:11:dc:5a:fd:92:
6f:10:43:80:17:59:73:aa:bc:ce:7f:3c:6f:93:1a:
64:b4:55:22:00:72:1f:20:96:cc:2b:6a:98:32:fa:
01:29:4c:4c:01:6d:e2:fa:50:cb:7a:97:8b:55:20:
9c:de:66:11:d3:b2:4f:ef:3a:4c:52:ae:17:55:3d:
1a:40:9e:99:ed:1e:6d:0b:1a:59:ea:f8:88:33:6f:
28:32:7f:aa:6a:d5:88:0a:75:18:dd:9c:15:fe:4e:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:21:4F:76:78:E9:D5:3F:68:D3:62:2F:E5:D7:94:F0:4B:AC:A1:81
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5a:e4:9d:46:4a:8b:3e:72:89:eb:e2:7c:42:fe:56:fd:a9:
ea:eb:64:ed:6e:5d:ed:a8:2a:4f:3d:ef:66:01:4f:73:f7:50:
33:0b:ab:c4:25:23:8e:b5:58:2f:f5:48:03:9d:30:b4:b8:d9:
b6:2f:83:cf:06:3b:38:b4:06:2a:de:4c:47:2a:ef:01:8d:09:
8b:85:d2:a7:f7:df:6e:f5:09:b4:a5:0e:36:06:09:67:fa:25:
00:68:43:32:83:9f:1f:92:80:5b:d9:03:18:a2:f3:4a:e0:3d:
29:1a:82:64:2e:91:b4:49:5d:f9:90:2a:8d:d1:39:e7:3e:f9:
86:7b:4e:fc:af:dd:91:a2:52:9d:a5:40:33:75:69:9b:46:bc:
2f:8f:6c:74:86:66:6b:36:96:7c:81:f9:88:a8:fc:49:81:83:
bb:21:99:3d:24:08:d2:60:ac:ab:a0:17:2a:31:06:53:cf:de:
f6:ed:21:b7:52:07:21:67:10:a4:a6:c9:a4:fd:0f:a7:3c:18:
fc:44:53:0a:c0:dd:a2:54:5d:44:71:ad:ec:d7:7a:52:64:78:
9f:0a:bc:3e:d0:c7:68:3c:f4:2f:1a:9f:9c:f9:02:82:c4:ae:
de:51:b6:af:05:9c:68:12:89:5c:c5:d3:3b:8c:8d:16:a9:7c:
d7:47:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:09:26 2025 by rpki-client