
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: g6kpHnOIG5spggp1nHr/64xcQ3V+if/f7EzlrUAWFYU=
Subject key identifier: 2E:DC:EA:A3:C7:FF:3C:C6:FB:4D:D7:20:BB:4B:0C:F6:CD:60:D0:55
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 0199FBEB342ABA8236C60033AF03054EE134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: PdLxn3F/QZQ3qSkn0lTzfW9Z3R/GtDyKGLNCcEIktgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:34:2a:ba:82:36:c6:00:33:af:03:05:4e:e1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=2edceaa3c7ff3cc6fb4dd720bb4b0cf6cd60d055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:fa:0b:fc:8d:7b:e5:09:94:13:0b:95:04:
cc:7b:eb:32:15:51:84:53:25:f2:74:56:42:b5:4c:
40:e1:d6:76:f1:8a:42:49:bc:c6:9e:a3:63:c7:ac:
c8:4e:30:f5:77:e5:d2:2a:0b:c0:c9:21:b2:f2:af:
4c:ac:ab:d5:8d:f7:85:a6:17:44:2a:5b:52:3c:03:
1c:f0:3a:94:83:7f:5a:e1:93:c3:24:05:2a:04:ee:
65:e7:c9:6b:56:9f:93:15:d7:97:f2:68:a4:ca:3c:
ee:ab:cb:c4:a2:48:61:b6:b2:e6:2e:3b:26:26:4e:
fe:b3:7e:69:ad:38:f7:4d:b1:02:d1:e8:85:e9:55:
ab:21:ec:59:a4:c5:a5:43:64:02:13:86:5c:c5:36:
2e:d5:4d:c0:f3:5f:24:a4:23:7b:6f:39:27:7f:1e:
91:a7:82:91:a0:e4:38:51:58:d3:73:b9:72:a1:cf:
0b:d9:fb:2a:e0:65:df:15:21:47:14:aa:83:62:3b:
9b:52:06:c8:e6:8f:4b:c2:da:6d:b1:4b:a1:cc:b6:
9b:79:46:f1:80:cb:c3:02:c1:37:c4:d3:ea:4d:d5:
19:74:40:61:97:7c:5f:10:eb:80:76:51:e8:d2:55:
b9:63:0e:9b:07:2f:6d:b3:0f:99:09:06:1e:e8:b8:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DC:EA:A3:C7:FF:3C:C6:FB:4D:D7:20:BB:4B:0C:F6:CD:60:D0:55
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c2:4b:92:b0:86:7a:88:66:2c:50:0a:c2:21:61:a5:3e:66:
40:13:ea:93:ba:ef:bd:fe:04:d6:d9:e0:1e:26:14:b1:bc:b9:
e2:f2:3f:34:56:11:03:90:75:4f:4a:3c:68:17:44:c7:a9:ba:
64:23:7f:3f:f4:3e:b1:d0:41:a3:97:27:29:ef:83:92:15:13:
de:fb:03:ec:97:e3:d9:11:6e:98:06:6c:5c:7f:c0:f2:46:95:
31:58:5f:dc:df:58:52:40:d1:f9:42:1c:c4:5d:9e:a6:0e:97:
70:4a:22:0f:07:64:08:71:dc:c9:39:14:87:7b:54:6c:53:f0:
9c:89:4e:88:71:a4:91:28:16:03:6b:5a:ba:6f:b8:b8:fc:5e:
6a:68:1a:9f:5e:20:b3:32:2a:79:97:82:81:e3:20:a9:07:ef:
a3:42:c8:f1:04:fb:ea:5e:58:62:60:64:81:67:88:20:42:9f:
0c:75:1c:af:23:e9:77:ed:2c:02:bd:c8:a5:c4:5a:24:e2:59:
30:3a:f8:5a:a3:59:78:11:cc:1a:db:97:ef:02:73:df:69:3c:
b3:5d:de:44:59:0c:4c:de:5b:56:7d:0a:e5:ee:e5:22:da:7f:
d7:56:9c:c8:83:6b:f2:63:02:bf:af:24:1c:cc:99:13:9d:59:
b7:af:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:28 2025 by rpki-client