Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
File: 01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json)
Hash identifier: k+Kl6sP1zSsuK3F5Vo2eUlBA7MjM6RD3eXQ4mpk5hmE=
Subject key identifier: 1F:E5:FB:8F:CE:87:88:C6:6D:65:33:49:8C:0F:B4:F2:47:45:F5:F0
Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
Certificate issuer: /CN=d3530c144f592cfa891babf195a817900cd6d916
Certificate serial: 0199FFC8CF00B265D92893A8A32F71CDFBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
Manifest number: 0199
Signing time: Mon 20 Oct 2025 04:02:54 +0000
Manifest this update: Mon 20 Oct 2025 04:02:54 +0000
Manifest next update: Tue 21 Oct 2025 04:02:54 +0000
Files and hashes: 1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: gJPAs1fk3jwqECwOjY3q0V4PGBJKsRiGEnhJDr9g2fg=)
2: r_GfDo9ZWQ7myQ0iViJXzfWcph4.roa (hash: x8B6QTHVzWahPni+0i08daL7qF7EoN+d+/45THjKk0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:cf:00:b2:65:d9:28:93:a8:a3:2f:71:cd:fb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916
Validity
Not Before: Oct 20 04:02:54 2025 GMT
Not After : Oct 21 04:02:54 2025 GMT
Subject: CN=1fe5fb8fce8788c66d6533498c0fb4f24745f5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:b4:42:5d:b8:47:68:dc:45:38:16:da:7b:
6e:fa:d1:62:0c:05:41:8a:a1:be:90:14:c6:0b:42:
81:94:ba:fe:ef:eb:0e:ae:32:d3:68:b2:f3:95:a9:
b2:8b:34:22:19:23:e0:0a:6b:fe:7c:3b:8b:29:5a:
39:cb:49:3d:16:10:37:a3:f7:bf:22:35:1b:84:30:
a9:d6:3b:de:e8:82:b3:f8:3e:1a:94:2a:6d:41:cd:
9e:b7:b5:e2:e3:50:3f:5c:97:c3:00:e6:4d:b4:89:
5f:28:8e:11:ba:d7:c2:60:96:01:85:e7:2c:dd:d1:
e5:11:58:a8:7f:0b:fc:96:b2:2d:3b:17:dc:8f:d8:
ef:52:93:0c:6b:ed:7c:3e:22:2a:65:51:e0:db:b4:
3b:40:d3:38:0b:09:f0:2e:73:49:1a:18:67:59:91:
59:6c:94:d6:4b:ad:6d:39:c6:b7:38:af:57:e7:c7:
12:8c:9d:a9:97:cc:4f:b4:a1:65:64:92:bf:c9:02:
74:e6:1d:b6:3f:4f:c8:b9:83:b9:63:6e:62:9c:7a:
8b:80:de:00:88:43:17:6d:1f:03:9e:12:4d:e2:cc:
26:8c:bb:4d:d2:9f:a4:49:f8:46:3c:bc:d4:77:07:
9e:01:d0:82:6e:fe:ed:cb:0e:a0:b3:c8:1e:73:d6:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E5:FB:8F:CE:87:88:C6:6D:65:33:49:8C:0F:B4:F2:47:45:F5:F0
X509v3 Authority Key Identifier:
keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a4:86:eb:d1:97:f4:7d:71:b2:be:b4:ec:81:d3:db:27:7b:
00:42:b4:8a:b8:2a:21:a5:44:07:ea:11:a7:45:ea:aa:15:76:
42:f9:b3:c5:b0:04:a2:4e:ba:fd:92:e3:82:62:d4:75:70:99:
74:26:be:5d:b5:f0:4d:5d:e9:9b:32:23:a1:87:59:78:73:6f:
4a:b0:e7:bc:2e:84:fd:33:14:7a:6a:b6:e7:57:73:77:81:51:
fc:db:23:17:7b:5c:07:97:92:8e:00:39:ec:2e:31:52:11:19:
99:ea:45:a9:1d:be:b4:49:2c:28:fe:d0:da:f7:48:24:6f:ef:
d9:03:97:2f:bd:ba:9d:20:f1:2f:e9:9c:7f:f6:12:ca:ae:2b:
14:1b:d6:46:73:ef:7b:d3:4c:fb:d8:74:2b:10:7b:dc:57:72:
7e:1b:95:6a:14:b2:db:18:cb:e8:17:4e:86:39:8e:8e:81:47:
a9:48:ff:6d:31:21:59:1e:d9:49:ad:b3:2f:5a:fb:45:dc:58:
d9:42:22:93:31:80:4c:52:f0:cf:c1:57:43:e8:b3:39:68:71:
82:68:10:05:9a:4a:c2:c8:f9:ca:e5:bb:6f:1d:61:cf:ed:87:
fe:9f:a8:d1:35:86:26:2c:4c:95:4a:33:2a:33:08:74:5d:66:
6d:91:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:34:05 2025 by rpki-client