Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: LkzVM21bwTqbTRmUELsd86Qju581QrY6C30Wf3tRpD4=
Subject key identifier: 2E:FE:26:9D:0B:FD:20:A1:B0:09:77:6F:B4:A4:45:52:B7:5C:47:F3
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 0199FC217E825E09BBA3D141BE7BA3A65547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (hash: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=)
2: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: JnjWNBuwuuD5Lg6nBK5hQmAOVXfSlgFt5pq0yHo3Z8U=)
3: sfQ3GEtYzhBBWxqpfOQ0GcKpsbY.roa (hash: wrk4xF0OxGaC9MkY6FPvwbKzU+JxYtuzUOz5b0tcuxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7e:82:5e:09:bb:a3:d1:41:be:7b:a3:a6:55:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=2efe269d0bfd20a1b009776fb4a44552b75c47f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:20:00:e6:5b:d2:36:fa:09:dd:c2:5f:03:
fa:ae:53:09:a7:56:5d:55:e6:6c:c2:47:76:2a:93:
9e:5d:6e:37:27:f8:65:94:b2:84:3f:8a:c4:a5:07:
6e:3a:c8:03:c4:7f:2c:45:95:5f:2e:36:20:b2:a4:
25:2c:7f:41:f1:63:75:3d:08:ad:1d:ed:6b:d0:ed:
7a:f3:b5:6a:05:55:a1:bb:2c:69:bb:29:bd:d5:03:
af:09:8c:85:ce:db:6c:08:11:4c:a0:5c:7d:0b:54:
0e:79:89:01:26:67:36:58:2a:fc:2c:2c:a5:11:da:
67:0c:e0:14:e1:82:aa:62:aa:5b:6e:8d:fd:be:a1:
43:a4:55:b2:a1:b8:01:c6:ed:46:46:25:7b:c7:3e:
28:07:f3:83:c4:e6:96:83:d2:d0:0b:a1:62:78:83:
e0:8c:27:4f:4b:85:26:2f:8d:af:70:a1:69:b3:6c:
9b:e9:fa:c6:4c:75:6a:17:a5:8e:1d:98:49:8d:8c:
9d:36:60:e8:61:fb:38:eb:78:69:f9:45:64:47:8a:
b2:f5:7a:a2:72:bf:cd:40:a9:d4:ce:ba:fc:1a:5d:
1a:dd:14:cc:8f:78:fe:d1:9c:53:e6:f0:59:38:63:
21:14:42:20:b8:0c:91:99:56:13:de:09:f7:72:6e:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FE:26:9D:0B:FD:20:A1:B0:09:77:6F:B4:A4:45:52:B7:5C:47:F3
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:4a:a8:3a:20:4d:7f:a3:29:5f:fc:04:96:48:0b:f0:80:
7b:b5:04:7d:be:a3:4c:16:f2:0d:55:8b:12:9f:7e:53:22:55:
ee:ff:65:ec:05:95:96:f2:c0:fa:4b:d6:96:cc:b3:c2:63:2e:
28:44:c6:5d:fe:d4:f7:19:1b:f8:8e:c3:7a:ce:0e:8c:08:a5:
01:6e:84:55:f3:40:76:75:d0:82:5c:ea:e2:19:07:69:d5:57:
90:23:0b:3b:93:0f:33:41:21:04:51:ff:74:ef:0e:c3:e6:fd:
8f:83:5f:f1:53:79:6c:f4:0d:66:86:d9:f2:c7:f1:56:5b:e0:
3b:2e:08:03:ae:a2:ee:b7:9c:16:43:4a:a1:db:95:37:c9:18:
b5:03:77:a1:50:4f:74:9e:fa:f3:52:62:07:50:47:aa:be:1a:
cf:de:5e:c9:61:68:82:14:4f:73:ae:24:8c:75:0d:86:8d:49:
75:23:ee:fb:ed:3d:fd:33:39:31:e0:49:63:14:68:f5:2d:95:
ea:5f:6c:cc:4c:e9:7d:6c:4a:5d:a4:09:27:56:48:fd:61:02:
cd:e3:ba:6a:9a:f6:ab:23:39:fc:f6:15:f5:9f:af:dc:9d:7d:
4a:7f:16:a6:e1:bb:80:7f:2b:c1:71:4d:2b:2c:0c:60:e8:1d:
f0:f0:bb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:01 2025 by rpki-client