Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: V8Q8Tceyd2HpXhiJ7GGl7b8SlK1Lw2/f2eBmyHekgXw=
Subject key identifier: 75:00:8A:81:82:41:26:04:6E:45:90:DD:7F:3D:39:B8:47:5C:5D:49
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019A239BF4D6CEF29BC02991B25C04CAB53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 03:00:14 +0000
Manifest this update: Mon 27 Oct 2025 03:00:14 +0000
Manifest next update: Tue 28 Oct 2025 03:00:14 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: IMt1eQhSxqpUjAEnIBGN6HawnSU7UPG9IjeajZ3An2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9b:f4:d6:ce:f2:9b:c0:29:91:b2:5c:04:ca:b5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Oct 27 03:00:14 2025 GMT
Not After : Oct 28 03:00:14 2025 GMT
Subject: CN=75008a81824126046e4590dd7f3d39b8475c5d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:4d:47:95:af:23:eb:6f:ab:56:49:b0:24:
5b:9f:05:a9:57:54:cf:90:f2:85:52:60:e8:b6:84:
84:2b:3c:4d:b3:12:31:b3:3d:7c:9f:bd:d6:87:68:
bc:a5:ea:2f:f7:e6:65:32:97:23:e1:29:bd:c9:e5:
8f:b4:e2:b1:1c:6b:b7:c3:23:11:f7:51:33:00:98:
74:0c:de:27:e1:4c:af:27:0e:19:2d:58:86:fa:f2:
fb:68:86:ae:34:17:03:7b:68:91:a7:5b:4d:33:b7:
84:20:83:b2:84:80:a7:b5:70:dd:62:d9:75:b2:70:
a2:ad:2b:fc:c5:55:26:e7:2f:b4:7b:fd:82:54:2f:
fa:76:d3:54:f4:49:eb:74:ea:5d:81:82:4a:b4:be:
83:73:e7:27:e1:16:7d:92:64:de:1c:8c:90:e4:63:
ce:d9:01:88:59:96:0b:77:e6:f7:e6:1c:6b:12:8f:
ca:80:f7:3e:a6:ff:2e:27:c3:82:29:de:2e:27:b4:
e2:8e:79:e2:be:48:f7:f3:58:f6:99:6a:13:27:45:
50:5a:89:ba:dc:25:54:ba:3b:8e:e7:d1:8b:19:15:
03:62:b4:84:3c:80:95:e0:98:d6:29:0d:b6:85:2a:
12:e2:76:56:02:ce:d9:1d:1e:be:42:2a:bb:b9:a4:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:8A:81:82:41:26:04:6E:45:90:DD:7F:3D:39:B8:47:5C:5D:49
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:40:82:cb:fa:0b:16:17:a0:ef:17:f4:46:e0:66:f8:2b:a4:
22:70:89:77:28:25:14:40:45:5c:ad:f7:f5:76:38:af:66:8c:
d4:61:03:2a:93:c3:70:de:b5:00:6c:16:69:f8:57:f3:fb:ce:
b8:ae:17:ac:08:37:8f:bb:75:f0:98:63:0f:a1:a0:4a:38:99:
42:33:bd:c9:a4:77:58:89:fb:da:e7:07:d0:47:34:30:42:52:
77:e6:9f:6e:e8:da:6c:47:1f:10:0c:57:7a:b2:d0:db:4f:8c:
f6:e1:3d:78:fb:cf:94:56:c1:46:b0:53:2b:12:88:13:c3:6d:
30:a2:7f:0d:86:e6:b3:db:ac:2a:92:fd:8f:23:81:29:bc:14:
e6:84:ce:60:f3:ea:3a:3f:07:a9:85:dd:44:2b:aa:30:dc:2f:
cb:ed:12:c3:f9:70:6b:b5:68:36:c1:20:85:38:a6:57:64:31:
ca:ae:c5:de:23:5d:f7:de:35:4f:6f:88:70:be:26:20:8b:cd:
64:2a:14:39:be:ce:4c:3b:33:22:4b:10:58:fb:ea:7c:bd:fd:
91:df:f6:39:3a:5f:24:47:2a:81:0c:19:d0:1a:97:69:d5:da:
7d:92:d2:13:e5:ea:05:18:27:b3:91:18:af:d7:58:08:fe:7f:
9b:37:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:13 2025 by rpki-client