
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File: mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier: 8j3zDRWkqjkbg3o2KWB11f2cNMrci/qHtUiBHvHGbks=
Subject key identifier: 05:9B:5B:7D:D5:3D:AF:01:87:AC:AB:D6:C1:81:2C:BB:A2:10:CE:3F
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 019A0B5DCE82C0798CD2A411BC72E259EFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number: 170B
Signing time: Wed 22 Oct 2025 10:01:28 +0000
Manifest this update: Wed 22 Oct 2025 10:01:28 +0000
Manifest next update: Thu 23 Oct 2025 10:01:28 +0000
Files and hashes: 1: GQRzcbGzWvSj3FBVjoQIeOqNNGk.roa (hash: 9iREodFCIhImvgis0W2BigBjZMAhENAEnDzq98vhkcw=)
2: H0P6Uhc2PQuAj9mI5JuLmXDsE-E.roa (hash: lFsz70YXVH8oaNr7AK6yGfw7Y8IvCmN3m4Wget06GNk=)
3: Rwa55-aiWzleQi1HsBZSagHTLqo.roa (hash: 0rSyRYL0K47FYUV+DhbsOlxazMDwyVqW5IEzSPcxljc=)
4: ZDeqr4bzVJZzwb_UfOlQJbn9JTw.roa (hash: 3Blt9qc0qNOTbyRJx5iL7tY6336Yd2GQWHTIQYOz0WA=)
5: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: NMogM/7ZiH4yeMOocTUj4eLQQ5RXNkZFu+UtKfG56v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:ce:82:c0:79:8c:d2:a4:11:bc:72:e2:59:ef:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Oct 22 10:01:28 2025 GMT
Not After : Oct 23 10:01:28 2025 GMT
Subject: CN=059b5b7dd53daf0187acabd6c1812cbba210ce3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:2e:1b:06:82:3a:ad:88:28:23:ed:5b:d7:81:
26:5c:c4:92:06:85:74:78:8c:e1:18:8b:90:5b:08:
51:d5:28:1d:1e:83:55:43:30:c2:66:79:15:be:89:
e9:c8:6c:64:cf:70:4f:3b:26:49:17:3c:9f:68:b1:
08:48:35:68:33:b4:fa:5e:32:13:39:4a:97:b0:4c:
e1:7a:25:86:39:d3:73:82:9f:56:3e:d5:bb:e8:91:
dd:89:30:d3:3b:97:fe:82:8c:bb:5c:80:29:01:71:
26:ad:eb:54:26:11:f1:88:51:cf:a0:bf:0b:f6:71:
34:2f:b6:98:eb:a0:b6:fd:11:0f:26:b4:fb:da:77:
24:f5:0c:17:31:b7:6e:ba:47:33:43:54:57:2e:01:
30:b7:12:1f:6c:bb:49:f2:bd:de:ee:14:80:1b:cb:
e7:c6:7f:58:6d:de:a9:b2:35:75:72:25:2f:5a:1c:
4d:56:62:4d:8b:62:d4:7e:e2:34:19:64:81:e1:09:
b9:d4:9d:d5:a1:e4:f0:14:f4:a1:59:83:79:2d:f6:
d5:f2:65:92:b6:42:5b:7e:68:95:29:93:0d:9e:62:
ea:5f:f5:19:69:51:60:66:87:bb:df:d2:5d:86:c0:
fd:0e:28:b5:aa:2e:04:c8:1f:1b:8a:41:de:bb:4c:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:5B:7D:D5:3D:AF:01:87:AC:AB:D6:C1:81:2C:BB:A2:10:CE:3F
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1f:3e:f5:45:5d:d4:41:7f:e1:de:5c:12:eb:2c:dd:f7:c6:
d7:3a:7e:1c:70:17:b9:75:0b:d2:2c:cc:22:05:83:34:8c:bd:
55:81:21:fa:c5:6f:9c:f2:2e:21:1b:11:91:6c:07:60:d5:93:
9b:c8:2a:49:18:bf:14:a6:a2:92:b4:f5:f5:66:5b:e8:98:76:
00:a3:96:3e:e0:78:c4:b0:08:4b:83:da:37:e3:04:ac:a4:12:
eb:1c:0a:93:68:1a:c5:7b:76:a6:48:85:b3:a6:6d:08:70:f4:
cb:7f:9c:ed:29:34:85:fd:ac:7d:13:94:f9:8c:1a:f4:38:05:
b5:c7:88:c9:95:02:3b:7b:5f:e0:6c:48:ff:75:8d:cf:5e:3d:
98:22:f3:55:6f:d8:ce:65:c1:97:7a:05:94:8f:0f:fc:12:55:
ee:0e:95:c9:83:6b:53:64:9e:35:e0:34:e5:46:06:ac:c5:2d:
bb:fc:aa:1b:2e:5c:00:75:ac:e4:e9:b0:d1:85:03:8c:83:a4:
5b:37:95:05:84:3f:65:7f:af:c8:b0:f7:df:6a:90:30:b7:59:
51:a2:72:ed:bd:86:75:2e:0f:fc:d2:67:cf:f1:0a:60:3f:ab:
2b:ad:67:49:42:46:02:d5:16:ea:2c:bd:c1:61:05:e0:6a:22:
3e:14:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:08:58 2025 by rpki-client