Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: 1zcKspS+IYbh8QOZehi1efl68QswBKc5nZsKJzTBPYM=
Subject key identifier: FE:7E:C4:BE:C9:8E:B0:E8:1E:C1:7A:2A:9C:F7:F4:DB:40:2D:5B:F2
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 019A71B7AB7A2CB7A57988E243A4B18B4EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 141C
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: oO8D4iWBJMHeRCBM1bk4oPERvp8QwcmO3vz2UuLM5CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ab:7a:2c:b7:a5:79:88:e2:43:a4:b1:8b:4e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=fe7ec4bec98eb0e81ec17a2a9cf7f4db402d5bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:b9:9a:b8:18:e0:d2:b4:0e:e2:c4:ff:9a:
6d:61:ac:50:25:84:05:c5:df:0b:73:0d:6b:22:b9:
62:7f:3f:f3:30:cb:ec:e0:d1:49:94:62:75:47:18:
da:1e:aa:74:cf:cb:d0:c1:77:04:5a:47:2b:68:a3:
c0:dc:84:c3:e4:33:1a:08:a3:4c:84:32:05:82:a4:
db:ec:4e:a8:f2:cd:aa:26:95:0c:44:11:99:63:31:
79:26:b3:0d:2e:88:25:dd:ff:c5:49:91:8e:a6:d8:
6d:ba:e8:0d:9f:f6:60:ae:da:1c:e9:de:8f:0a:ef:
8b:61:67:b7:dc:3a:fc:92:3e:19:ff:19:31:ea:7c:
bf:3b:48:80:72:49:3f:4f:56:00:47:b5:12:2d:18:
48:34:02:03:4f:05:d9:cc:50:ed:8b:91:56:f4:05:
3a:74:d7:0a:fb:13:36:70:ec:30:8d:60:69:26:57:
44:c5:15:4b:4c:b7:61:9e:80:3e:cd:a6:2e:14:e3:
67:61:89:24:ce:2f:dd:48:d7:dc:2c:1c:e1:93:e2:
2a:cc:d7:27:ed:38:9f:ef:88:14:82:bd:9c:5a:e0:
74:f3:62:d6:67:5e:87:f1:37:c3:d0:9f:ba:0a:f5:
9f:95:f5:1f:e1:01:6b:2d:e8:e6:2d:f9:c9:c7:5e:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7E:C4:BE:C9:8E:B0:E8:1E:C1:7A:2A:9C:F7:F4:DB:40:2D:5B:F2
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:66:35:c6:3d:5d:8d:70:b8:cb:8a:f4:16:01:76:5d:ca:af:
16:86:46:19:f4:9d:26:b9:aa:9b:36:a6:9e:3a:04:65:93:c2:
5a:49:ac:39:06:54:05:ad:fc:ce:ae:f4:02:fa:8f:67:d9:dd:
b4:b6:56:08:31:eb:c5:cd:be:2f:a0:f5:52:2f:7e:a8:fe:12:
01:0f:40:80:f5:d7:08:db:2f:76:ab:27:56:9a:71:e6:a3:45:
75:83:75:04:11:37:2e:0f:79:cc:1d:c0:81:0a:1f:d4:72:da:
ef:08:6f:23:02:2d:06:d8:77:52:73:fc:02:88:bf:d2:71:5e:
d7:70:23:24:11:51:8d:80:4d:2e:c9:2a:29:33:c0:bb:ac:b4:
cb:90:ed:1f:11:0a:ce:1e:3d:83:3b:ff:10:12:e2:23:54:24:
cb:5c:b7:b2:6c:6a:e2:54:c9:f8:24:ec:e5:27:c1:30:d7:38:
8c:0b:00:c7:5e:c2:66:4a:d1:36:7f:94:1f:3a:02:3a:34:50:
e8:91:9d:a3:d2:83:53:3f:25:4b:aa:a1:67:98:19:aa:b5:25:
04:e0:65:9e:3e:96:ec:f7:3f:bd:0c:06:96:e9:cb:96:80:54:
5f:f0:9f:82:1d:1b:63:7b:28:64:28:6a:4b:ad:54:bc:16:4d:
2a:e9:d2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:04 2025 by rpki-client