Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: aKjuqn3kbWYQ9jKfAhZb6JwS5GIj+7ZQvSd8kwnFJT8=
Subject key identifier: 2A:2E:69:4A:D8:E5:5B:6F:D1:27:AA:5D:37:1D:5D:3E:4C:F7:32:33
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019A22C06FC728B354EE4BC2AC2DDD48A0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 16F9
Signing time: Sun 26 Oct 2025 23:00:28 +0000
Manifest this update: Sun 26 Oct 2025 23:00:28 +0000
Manifest next update: Mon 27 Oct 2025 23:00:28 +0000
Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: MNttG+YZj/Gp53rRUpdWQ7cU7+EjSQwvDcqYLmpOa0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:6f:c7:28:b3:54:ee:4b:c2:ac:2d:dd:48:a0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Oct 26 23:00:28 2025 GMT
Not After : Oct 27 23:00:28 2025 GMT
Subject: CN=2a2e694ad8e55b6fd127aa5d371d5d3e4cf73233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:65:72:84:08:d0:33:1d:27:c9:42:30:f6:
da:f7:d0:c1:47:ef:6b:49:ef:e9:ab:b2:d0:a1:7f:
f0:16:8c:6d:ba:29:0d:14:03:5c:5e:a3:31:7b:09:
21:a0:5a:5a:b8:84:da:a5:bc:90:ea:8b:1d:9e:a3:
6e:d7:d5:21:d3:09:f7:28:28:7c:3e:19:14:a8:70:
cb:ea:f7:d8:7b:58:54:6d:8e:9c:33:87:b7:f5:3b:
e2:66:7a:f3:da:37:2f:d5:8c:74:dc:f0:f5:d0:15:
8d:47:8a:ee:36:dc:40:63:0e:ac:40:96:7c:ea:19:
b9:0f:3c:42:86:e4:20:68:80:00:d1:91:03:a2:40:
a3:43:bd:58:49:b1:d5:fb:98:7e:7f:c5:ca:6e:e4:
19:92:f6:65:c9:38:d7:81:91:4d:54:c9:ec:b6:c8:
f8:05:6a:d1:83:1f:02:44:d0:d9:ed:37:03:80:40:
b4:54:6e:21:72:ca:c1:eb:95:c0:21:d8:74:ba:61:
56:70:ef:d8:41:36:61:8e:ab:fa:be:2b:c8:ee:72:
5b:87:fa:18:e6:83:b0:c2:17:78:78:a1:4a:33:6d:
61:c5:5c:f4:b7:87:f9:a4:ce:15:33:2b:49:b2:eb:
a0:7d:46:b7:36:d2:ff:5d:6e:85:d4:f1:b7:a1:06:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2E:69:4A:D8:E5:5B:6F:D1:27:AA:5D:37:1D:5D:3E:4C:F7:32:33
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8e:5f:98:62:84:cf:2c:ce:43:9d:8e:a8:2e:05:c8:a5:e3:
6c:d5:25:f7:26:0c:c1:76:e8:6b:4b:7b:f2:3c:c6:98:92:5e:
2e:3b:2b:dc:02:af:62:b8:3c:7e:aa:b2:c1:e7:bc:f6:25:d2:
f6:fb:f6:c2:b4:38:fb:7b:72:c9:c8:dc:a3:18:9f:d5:5e:14:
79:ab:af:fa:8a:f9:6b:c4:6a:75:51:bc:2e:e9:f4:89:2c:14:
6e:14:0b:38:88:ef:d5:05:b1:04:21:b9:2c:a6:d2:f1:bf:15:
14:64:3d:c9:ef:15:6f:41:59:bc:49:d4:81:96:c9:93:53:15:
82:20:43:e4:9b:9f:a6:cb:ae:9c:0d:b5:4a:fa:14:23:7f:1c:
6e:0e:35:31:8d:95:40:26:05:35:33:c7:76:b1:79:cd:bd:dd:
b3:8c:19:33:88:e8:82:c4:67:df:67:2d:07:88:b8:78:85:0b:
5f:8c:5a:c7:29:cd:ca:dd:86:23:c6:12:35:4a:e5:ef:a6:c4:
86:23:07:33:8f:07:e3:bb:a2:db:2b:88:af:00:bf:bb:cb:ec:
12:dd:b5:17:93:94:82:f5:2b:50:bc:47:0f:e5:ce:d4:52:f8:
ac:57:28:7f:70:c8:5c:85:94:fb:6a:07:dc:ec:66:1d:dd:b4:
74:1e:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:03:57 2025 by rpki-client