Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: mhFYQB+lTonopQSpkXET4Uvo+429Em7+Yg1vOsFzrUE=
Subject key identifier: 43:95:0D:F4:D0:DC:CA:B4:0E:3E:1A:3D:EA:02:AE:EE:DC:DF:76:78
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 019A255402DDC55CC173A0C650E747FD5382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 13F1
Signing time: Mon 27 Oct 2025 11:00:53 +0000
Manifest this update: Mon 27 Oct 2025 11:00:53 +0000
Manifest next update: Tue 28 Oct 2025 11:00:53 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: Flk/cdkCF0RM6NsbmMKFNqqMyx4DLoeokP3mLmYjJGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:54:02:dd:c5:5c:c1:73:a0:c6:50:e7:47:fd:53:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Oct 27 11:00:53 2025 GMT
Not After : Oct 28 11:00:53 2025 GMT
Subject: CN=43950df4d0dccab40e3e1a3dea02aeeedcdf7678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:fc:2a:a9:48:e6:84:55:a4:29:8d:5b:54:
11:7a:4c:75:e6:53:9b:72:48:45:a7:ad:53:4d:60:
fb:d6:5d:f1:71:ac:e1:56:36:d1:40:de:28:a7:4d:
46:da:c2:bf:88:3d:f2:68:74:32:76:eb:44:19:dd:
94:ef:ef:91:f6:72:1d:70:a0:9a:f5:07:c3:50:c7:
82:73:51:e4:a8:aa:ef:c5:fa:2c:10:ce:30:d1:bb:
6d:7c:46:0c:b2:73:44:46:2e:4f:69:a3:99:b2:9e:
9d:40:26:e5:87:89:12:31:52:df:fa:a6:d6:73:82:
55:bb:0c:3b:e0:1e:80:32:b7:5f:fb:25:b5:66:f2:
1d:8b:89:ab:23:63:c0:14:fc:4e:d3:60:08:2d:b6:
0d:7a:21:84:37:1c:62:e9:88:92:09:ab:c4:62:ce:
07:12:4f:71:e6:b4:a1:0d:8e:74:9b:bf:5d:49:28:
b5:b4:ba:e2:b3:91:a5:65:cf:93:5e:4b:35:c6:d9:
93:d3:84:d4:e6:3e:49:e8:d6:88:a1:4a:cd:1f:d7:
36:26:de:dc:8c:ed:36:3f:2f:3d:e4:5a:37:2b:0b:
1c:2b:b8:0d:cf:69:1d:38:db:69:26:87:b4:48:06:
86:90:ce:54:c3:6d:97:ad:f4:7b:bc:73:2a:32:75:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:95:0D:F4:D0:DC:CA:B4:0E:3E:1A:3D:EA:02:AE:EE:DC:DF:76:78
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a9:29:89:90:01:12:3b:85:92:97:66:a2:56:0b:04:ad:38:
46:41:ae:76:17:27:82:53:32:9a:42:f7:70:29:dc:0d:70:35:
80:99:b0:78:e6:d4:37:b8:2e:0f:95:fa:6e:af:f7:9e:fd:06:
a9:ec:68:cb:0e:94:05:6c:cb:c8:3c:06:84:4a:b6:4b:22:59:
31:5e:40:66:bd:0a:b9:f5:ef:a7:be:64:91:f0:1e:fd:88:28:
c6:ca:34:ef:c7:2a:f7:1b:2a:b1:3a:8f:b7:c7:80:04:a5:4a:
48:3b:06:9c:71:b9:64:6d:23:70:af:e1:bf:5b:53:62:81:00:
06:aa:82:9d:1a:1e:30:50:03:99:f1:73:56:19:63:b6:a2:93:
22:8a:5a:22:c3:61:7b:9d:38:0b:49:31:97:47:71:ae:ea:b9:
a9:11:d2:7c:fb:88:a1:5a:a0:a0:db:ae:a4:3e:84:35:ab:3a:
f7:73:82:20:21:79:2c:3d:21:52:6a:49:2f:1d:5a:05:d0:13:
20:52:cc:5b:43:18:a3:be:50:84:cc:55:0d:5d:bf:c1:2d:08:
bf:03:ea:3d:cb:47:82:21:9f:22:8f:92:93:09:df:d1:f3:c5:
8e:9f:2d:ff:48:bf:5e:88:bd:05:94:56:1f:b4:d7:d7:30:83:
1d:24:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:10 2025 by rpki-client