Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: Fyu3ltxld8e50agofTWFG4j+Lus84xyv42usyJy1KV0=
Subject key identifier: 7C:08:81:7C:2C:5D:1C:19:C9:59:07:B8:91:AA:48:A7:82:FE:6B:1C
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 0199FCFD3295D1F350F659480577BEA5E0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: 5R9brQdtv00zcTkhPNPxIq2OTXDWwmNq2OYwknvY2Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:32:95:d1:f3:50:f6:59:48:05:77:be:a5:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=7c08817c2c5d1c19c95907b891aa48a782fe6b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:13:e4:7d:d8:e1:b9:b9:16:f5:46:0c:a8:
80:0a:84:3e:07:ee:b4:3c:4c:9e:7a:08:89:2b:62:
6d:86:b9:e6:24:75:1f:97:7f:16:0e:65:ff:22:27:
a2:1a:96:02:5a:d9:6a:45:fd:14:31:84:45:76:76:
41:c6:6e:56:21:ad:e7:5d:0b:a6:3a:b2:b2:d0:c4:
be:39:ff:eb:1e:a5:8c:52:88:e4:31:82:85:28:b3:
dc:72:ac:36:12:90:7a:34:3e:a7:81:14:78:eb:f0:
7b:0f:c3:cf:e5:5d:5a:58:f0:93:3a:51:70:47:00:
b5:e5:cc:08:9e:f5:8b:5c:b2:f9:95:c1:79:c4:00:
00:65:1e:f3:0f:f7:9a:68:18:1e:61:18:f6:12:35:
26:5f:f5:b7:e0:23:a0:4e:72:90:1a:d0:22:78:e9:
d5:22:3d:95:e5:6e:87:76:5e:a8:b3:d8:62:7b:ab:
4b:f4:aa:98:38:22:a8:c6:84:ec:fa:28:79:f2:fb:
f6:f1:c2:81:7a:51:73:03:7b:08:c4:d1:81:2b:4c:
66:7f:29:73:f9:19:6a:4b:1c:c6:2c:15:67:a1:b1:
2a:f1:6b:96:a5:8d:bd:30:1e:1e:61:5f:b9:f7:4f:
2a:37:7c:fc:7b:90:6b:72:0c:8a:7e:ad:c8:f2:e1:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:08:81:7C:2C:5D:1C:19:C9:59:07:B8:91:AA:48:A7:82:FE:6B:1C
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1e:86:6a:0c:f0:f2:c6:52:43:46:3f:63:48:9b:3d:76:0e:
98:02:1e:ed:ac:0f:34:8d:94:e6:4d:2d:78:2a:a2:0d:85:ca:
d9:c0:77:1e:f4:5c:ca:15:b7:16:01:a4:f5:76:33:42:86:21:
90:48:a4:93:41:4e:86:2f:c4:0b:aa:16:ba:ae:48:37:33:1e:
b7:90:14:b0:3e:dc:d8:b0:12:8e:7a:72:1c:09:0e:f1:fc:99:
a2:2f:61:13:d6:35:0f:6c:c7:f6:5c:93:4a:d7:82:30:11:8a:
46:be:bb:53:92:92:75:5e:4e:27:3d:c6:9a:ec:70:02:e4:6a:
d6:01:38:3b:52:c9:2f:54:03:7b:41:b3:21:ab:8e:ce:1e:ef:
af:d4:b9:b0:6a:21:67:a1:c6:d6:83:69:71:59:f0:9c:82:6b:
bc:ff:6d:9f:7b:ba:bb:c0:2a:92:2e:09:f2:84:df:ac:50:1c:
de:4e:07:53:ad:13:c0:1d:a4:1d:12:6f:4b:06:fd:d6:d9:ec:
0c:2c:9c:89:19:be:e6:a0:68:c4:0f:46:a7:0b:6c:e7:97:da:
c9:ad:cb:c5:91:6c:33:0d:7c:cc:70:73:fe:b1:f8:f8:1b:2b:
7b:6e:5f:6a:5f:d7:1d:36:09:81:99:15:2f:af:75:29:c7:54:
6f:b2:43:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/TKV0fNQ9llIBXe+peDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzU0YzcxZDYyY2IyMzk0OGQ5MTE5ZWRhNzcyZmRlMzhl
NjdiNjcwHhcNMjUxMDE5MTUwMTE1WhcNMjUxMDIwMTUwMTE1WjAzMTEwLwYDVQQD
Eyg3YzA4ODE3YzJjNWQxYzE5Yzk1OTA3Yjg5MWFhNDhhNzgyZmU2YjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX8T5H3Y4bm5FvVGDKiACoQ+B+60
PEyeegiJK2JthrnmJHUfl38WDmX/IieiGpYCWtlqRf0UMYRFdnZBxm5WIa3nXQum
OrKy0MS+Of/rHqWMUojkMYKFKLPccqw2EpB6ND6ngRR46/B7D8PP5V1aWPCTOlFw
RwC15cwInvWLXLL5lcF5xAAAZR7zD/eaaBgeYRj2EjUmX/W34COgTnKQGtAieOnV
Ij2V5W6Hdl6os9hie6tL9KqYOCKoxoTs+ih58vv28cKBelFzA3sIxNGBK0xmfylz
+RlqSxzGLBVnobEq8WuWpY29MB4eYV+5908qN3z8e5BrcgyKfq3I8uEsBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwIgXwsXRwZyVkHuJGqSKeC/mscMB8GA1UdIwQY
MBaAFJp1THHWLLI5SNkRntp3L9445ntnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2It
ZDI1YTlkZjE1OTI1LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2ItZDI1YTlkZjE1OTI1
LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALh6Gagzw
8sZSQ0Y/Y0ibPXYOmAIe7awPNI2U5k0teCqiDYXK2cB3HvRcyhW3FgGk9XYzQoYh
kEikk0FOhi/EC6oWuq5INzMet5AUsD7c2LASjnpyHAkO8fyZoi9hE9Y1D2zH9lyT
SteCMBGKRr67U5KSdV5OJz3GmuxwAuRq1gE4O1LJL1QDe0GzIauOzh7vr9S5sGoh
Z6HG1oNpcVnwnIJrvP9tn3u6u8Aqki4J8oTfrFAc3k4HU60TwB2kHRJvSwb91tns
DCyciRm+5qBoxA9Gpwts55faya3LxZFsMw18zHBz/rH4+Bsre25fal/XHTYJgZkV
L691KcdUb7JDEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:18 2025 by rpki-client