Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: TGIPsxSxlbsOMBVQRZnWFGHe18fj9ehVnKo01Da2ibM=
Subject key identifier: 36:21:11:59:67:A0:6A:3A:1A:92:33:2D:28:55:73:8E:EE:27:46:AF
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 019A21AD98CE9B0E5698A7368D5E3277BCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 1688
Signing time: Sun 26 Oct 2025 18:00:16 +0000
Manifest this update: Sun 26 Oct 2025 18:00:16 +0000
Manifest next update: Mon 27 Oct 2025 18:00:16 +0000
Files and hashes: 1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: VwWOk6+6f26YHK3qHC+RQPKBnIv/TKitLLxxEl4opYA=)
3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:98:ce:9b:0e:56:98:a7:36:8d:5e:32:77:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Oct 26 18:00:16 2025 GMT
Not After : Oct 27 18:00:16 2025 GMT
Subject: CN=3621115967a06a3a1a92332d2855738eee2746af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:80:43:fd:c1:61:d6:a2:83:c2:63:aa:0c:
e3:3d:64:72:91:b4:26:94:68:b5:0a:2c:ab:f3:fc:
f6:7d:9d:09:64:eb:5e:3a:60:f7:ac:39:fa:74:c1:
d0:07:42:dd:e0:0b:cf:55:28:a2:5a:0b:61:21:fd:
18:1f:01:8f:47:76:af:fb:b4:cd:32:5d:33:2b:0d:
91:be:fa:e0:f5:23:49:b9:78:be:80:a8:14:28:18:
3e:d8:09:e4:81:97:81:8b:c9:e7:5c:3e:b1:2e:9c:
62:42:de:66:c4:d3:ea:ea:a9:50:0a:e2:01:99:b4:
60:76:33:c8:fd:c2:f0:fb:19:92:69:eb:23:08:2f:
05:93:41:86:9a:5b:e0:7d:f7:61:20:23:13:a6:db:
cc:8b:f7:7b:38:f6:65:e8:97:23:05:ba:e9:78:74:
19:c0:2d:0e:85:2d:f6:c1:ff:ae:4f:7a:fd:83:f2:
c5:d9:e5:d9:5f:04:84:da:a1:70:d9:ae:45:a6:0a:
79:62:e6:e7:b5:8a:d5:a8:78:fb:ae:75:9b:59:74:
f7:39:37:85:8a:10:a4:26:a8:6a:13:e2:61:ab:51:
73:88:33:ef:4b:9e:14:28:38:40:07:4f:61:35:ae:
8e:3b:88:a0:27:d7:3a:ed:9c:0c:ef:ac:2d:76:b4:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:21:11:59:67:A0:6A:3A:1A:92:33:2D:28:55:73:8E:EE:27:46:AF
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ab:89:c2:61:b7:ea:c9:19:6d:31:2b:6e:1c:12:f7:9d:42:
1d:56:41:80:e9:cc:96:b0:78:9d:98:ff:00:5e:6c:5b:6c:44:
35:0a:5b:68:fe:ba:88:71:5b:24:4f:25:d2:2f:3c:a5:db:95:
f5:a9:d8:c7:74:32:04:e9:7d:eb:29:55:e7:54:f6:e0:aa:e6:
99:ba:18:ac:51:1d:20:03:b8:a2:4a:a5:b0:16:cf:e8:6b:bb:
45:74:ba:8f:f7:45:37:f7:ae:40:df:4d:0c:6e:ed:55:12:f0:
66:03:f1:19:34:b4:92:fa:c3:37:f9:e7:0b:67:58:38:9f:d1:
44:4e:ae:18:74:6c:86:ee:97:33:1e:1d:1d:f5:5c:fe:4a:a3:
46:df:58:c7:48:82:ab:86:86:16:fd:f8:82:ea:36:2b:ff:0b:
ec:aa:3e:ab:e6:7d:73:7d:48:57:6b:6f:ce:96:88:d6:63:a0:
6e:15:70:92:72:12:83:a9:a2:bf:0e:c8:ee:16:9c:ed:8e:bd:
3b:36:b5:11:12:51:8e:d4:8f:20:62:ad:f1:d5:b1:54:96:5e:
f7:9b:5f:65:24:04:71:a3:02:c1:2f:9b:8b:a7:65:a0:c0:6d:
3b:4c:c8:03:76:2c:db:1a:7a:8c:a1:d7:d0:11:5d:07:25:34:
b7:42:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:33:55 2025 by rpki-client