Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json)
Hash identifier: 5mvACjGHV1Usgn5g33khat2imTOAASx9J/SLBvnE0bo=
Subject key identifier: 33:85:0D:7D:1F:CA:93:51:44:C2:76:51:6E:F7:3E:03:C5:FD:2A:A9
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial: 019A71B8346874ED03A92AB34AC10E326DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
Manifest number: 0C77
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (hash: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=)
2: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: 1oS0pdUFi8Ls2LMm2r4hvD5xbeps0A4F1PA0du9QnzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:34:68:74:ed:03:a9:2a:b3:4a:c1:0e:32:6d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=33850d7d1fca935144c276516ef73e03c5fd2aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:f4:f8:88:59:35:a6:90:ee:ad:b0:95:cd:
5f:5b:ad:79:02:01:61:9a:76:a1:fb:60:62:2c:00:
83:dd:fa:bf:b3:4b:ad:7a:45:9c:c0:8c:4c:08:ca:
be:f2:d3:93:ca:9e:43:5e:57:ab:94:76:3a:4d:fd:
04:ec:01:6a:35:65:32:e8:7a:aa:22:38:d0:93:55:
11:92:5a:08:bc:75:18:2e:a2:84:7d:37:ae:0f:16:
08:7b:14:67:ae:c9:7b:4a:2a:cb:f5:6e:83:d8:1c:
fb:3a:90:5c:4c:99:af:bc:85:46:a0:e2:e3:24:14:
b0:99:8f:a1:70:8c:52:55:74:3f:a7:55:f4:e5:7a:
be:d8:9a:a8:8d:52:ac:32:ff:83:90:06:4b:d9:a0:
49:db:f2:14:b0:0a:45:83:62:89:33:5f:47:b2:f1:
79:34:76:a9:c8:e6:17:7f:fc:25:3a:bd:00:b3:a3:
ba:25:c8:80:09:cf:86:f5:3a:e0:67:0a:a3:4b:fe:
a9:8b:6e:bc:e3:22:aa:95:ef:b3:2f:9c:de:4d:c6:
a8:e8:f8:e7:f4:48:62:fe:e9:56:7d:50:27:42:a9:
ff:d6:be:8d:8f:85:a5:40:9a:73:0d:aa:48:ba:cb:
c4:96:2a:51:50:fa:16:74:d7:ba:21:87:51:89:cb:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:85:0D:7D:1F:CA:93:51:44:C2:76:51:6E:F7:3E:03:C5:FD:2A:A9
X509v3 Authority Key Identifier:
keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:01:a7:96:c3:dc:84:f5:33:82:0a:28:cf:55:a9:c0:f1:1c:
ba:53:d0:35:1c:41:d2:39:3e:51:e2:be:8e:b7:cb:a7:ad:42:
b7:49:c1:78:61:b4:39:2b:26:32:3a:51:d2:34:47:b8:6f:d0:
b7:ab:fd:bb:d7:92:0d:7f:d6:a8:54:05:5f:3c:8a:99:28:f5:
1e:9c:a3:04:ec:b6:fb:99:2f:b9:4b:dc:1f:24:20:7b:f0:9a:
95:54:a0:d3:da:d5:f1:fd:d4:33:81:92:75:34:1b:af:45:c4:
7d:26:c6:41:71:9e:bf:0b:37:50:ce:25:f9:32:01:06:19:c1:
6e:d5:34:5a:93:8b:cc:e7:35:82:1d:9a:3c:ed:e4:23:4c:07:
eb:a9:f6:bd:f1:84:09:d8:87:d7:27:02:b9:13:a2:15:09:4c:
24:14:0f:43:20:e4:e0:3a:83:a8:6a:2d:28:0e:62:2d:d7:2d:
2e:d4:cb:5c:85:e7:7e:3e:86:09:38:b1:15:1e:3c:9e:70:a7:
2b:ed:fc:aa:b1:a3:d8:f4:f0:f0:74:f0:90:76:4c:e4:7c:7d:
b2:54:8c:9d:18:32:d6:2d:df:1d:9d:8f:9b:e6:cf:d8:5a:a6:
a7:12:07:f3:43:9b:c9:5a:6f:9a:8d:8d:1f:a2:c6:a3:72:20:
48:2a:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:02 2025 by rpki-client