Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: GCIzhGyOIA1oWjVUwm6d9EIUJ8MqdzhikE2hVgEwdb8=
Subject key identifier: D8:9D:7D:55:22:40:09:BB:92:F3:AF:A5:2A:D0:3A:D9:08:4E:E3:FC
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 0199FC58B42188875E0D32A1CAB99D40A77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
2: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: IMDWqzpFx/OFhv+fdiTPW/mYSfJ118XTUL33T3GC4y8=)
3: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
4: mgPiyECi3IMewfduoQECoQO6hW8.roa (hash: FFtqOGC8SNkaXVCBxgLc9ho6RyB8i6aMWoVYlwMrees=)
5: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b4:21:88:87:5e:0d:32:a1:ca:b9:9d:40:a7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=d89d7d55224009bb92f3afa52ad03ad9084ee3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:a9:6b:21:2c:34:74:33:c6:89:9a:15:6a:
24:0d:fb:e2:39:22:f8:7c:4e:5c:54:4d:78:72:80:
15:e0:76:79:eb:db:61:9a:b2:04:c6:61:22:e7:3d:
7d:fe:53:0a:52:13:a0:6f:a1:a8:3b:fe:21:33:f9:
ba:36:84:2f:d8:3c:ee:ec:98:62:f2:0f:14:7b:55:
86:b5:52:3a:e2:10:33:71:1e:fb:e3:ae:1c:50:85:
da:5f:b7:50:e7:3b:ad:07:1c:37:0d:ba:85:86:6b:
b4:88:7a:37:82:92:9e:06:50:ce:7c:10:6a:5f:15:
de:b4:1e:2e:bb:0c:04:63:57:83:e1:aa:74:75:6e:
d0:ee:fd:a2:63:bf:66:d1:5b:36:11:54:43:e1:1a:
17:62:c8:da:61:f2:44:5e:8c:63:0a:eb:71:b8:4f:
db:85:1c:e2:2f:0c:82:e9:94:a1:ad:c4:db:0d:0e:
44:ba:a2:8e:7a:7e:22:40:8e:3b:56:51:a2:e0:ea:
30:2d:b9:ce:26:15:1d:f6:83:d8:15:82:94:34:d1:
6f:01:d1:f1:20:6e:82:d8:66:ad:a2:a8:30:e6:bd:
10:a6:d0:42:c9:ed:15:57:86:d8:56:08:8e:1b:9f:
de:21:9f:97:a0:9c:2a:90:ea:28:d4:29:31:5c:93:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9D:7D:55:22:40:09:BB:92:F3:AF:A5:2A:D0:3A:D9:08:4E:E3:FC
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ad:74:41:ed:e0:ae:d4:12:cb:34:34:fb:55:97:c8:69:b6:
39:2a:60:34:4e:7a:95:d5:26:18:b3:7f:5a:7c:6b:6e:68:4d:
ac:66:40:12:37:7d:1c:4f:60:18:2b:7c:cb:e3:b6:84:2d:3e:
12:da:42:a5:27:97:5b:b7:92:c4:c4:3b:1d:32:5a:6c:86:56:
92:68:cf:e0:b7:9d:00:76:4e:29:d9:32:82:c0:be:65:57:bb:
32:59:75:f0:22:df:32:84:e2:90:01:eb:d3:98:da:58:c2:da:
77:f6:01:1b:b5:d5:a8:9b:ba:b4:a6:37:ad:95:3e:0c:5c:1b:
27:8c:9f:f9:4c:03:26:dc:7c:7b:6c:d7:03:20:c9:da:57:0f:
45:8b:14:9b:4e:0e:36:f9:c7:1a:da:d0:8b:c4:0e:fc:cc:69:
b7:7f:9b:90:52:18:dc:fa:96:26:53:e0:a6:39:25:ae:4a:04:
74:33:02:7a:51:ff:27:a6:f7:b5:a1:82:61:f8:38:45:4a:e6:
41:89:c6:44:5a:ba:15:ec:94:e8:47:e6:b3:d5:d9:98:90:5a:
52:7a:0f:c1:4e:bc:92:0e:9d:73:93:bf:0a:a7:ad:e3:da:47:
3a:0d:94:63:3a:f1:3e:c0:09:ac:ac:60:0f:d1:30:05:05:b5:
57:16:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:57 2025 by rpki-client