Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: dm/l9LevgFuJI5M7P9uDBmctAUljzLEvs4MlhXPYNQs=
Subject key identifier: D2:33:6D:29:FB:9A:D8:52:2E:3D:C7:72:95:59:E4:09:CA:58:CA:4D
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 0199FCFD4B18EF115E2457374D6F6FF6F5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:22 +0000
Manifest this update: Sun 19 Oct 2025 15:01:22 +0000
Manifest next update: Mon 20 Oct 2025 15:01:22 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: 923wdqfX51wIq+rV3xWhZU6xUueA9SRQDgHV+IWKBCA=)
2: v9geoE7KmWCRnCztGaTkN5bSNF0.roa (hash: yJ1Hvyh5t82gNQ9PRDa/lCyqTlzjssbfVD5EEeI11lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4b:18:ef:11:5e:24:57:37:4d:6f:6f:f6:f5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Oct 19 15:01:22 2025 GMT
Not After : Oct 20 15:01:22 2025 GMT
Subject: CN=d2336d29fb9ad8522e3dc7729559e409ca58ca4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:93:0a:dc:c0:98:1f:9f:f5:34:a6:95:f0:
2f:12:c8:97:b7:d1:72:b7:84:64:57:9e:26:c7:7d:
27:ec:9e:f5:0b:3d:82:b3:c5:93:99:72:bb:c0:38:
85:47:cc:5a:84:47:c4:64:1c:2f:e1:b2:e4:aa:31:
6c:f7:e6:36:ca:73:0f:31:9b:71:cd:7e:bb:96:af:
e5:e2:f3:3a:5b:7c:9b:01:92:58:0e:b9:8d:24:e6:
57:cb:58:1a:5c:c6:16:02:b6:e8:f7:25:ec:7f:98:
e9:0a:db:d9:7d:65:b4:2b:1a:6c:29:db:f7:5d:c1:
84:2c:4b:e5:f2:37:78:07:de:54:8d:88:c0:75:85:
5c:90:fa:c8:48:3e:ee:e9:b0:8d:4a:cb:64:64:86:
18:dd:57:14:e2:06:03:9f:52:d7:ba:7c:30:c6:0b:
dc:3f:80:3e:3b:e3:d2:9c:91:dd:77:8d:1f:c0:87:
74:fd:17:98:12:2c:c0:b4:5a:fc:a1:7d:12:88:06:
25:74:78:23:d3:bd:af:d1:14:2a:e2:08:34:27:d2:
85:61:24:33:1b:da:ff:5e:16:2e:69:da:c7:6f:cd:
14:4e:c8:fc:4d:50:0c:4f:33:0f:af:9a:ef:5f:ac:
0d:8f:bf:cf:42:1c:ea:f1:79:73:d9:98:84:6b:44:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:6D:29:FB:9A:D8:52:2E:3D:C7:72:95:59:E4:09:CA:58:CA:4D
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e0:89:4e:d3:60:80:7d:39:82:48:ab:c8:69:06:6d:dc:53:
0f:df:c2:8e:c7:ef:67:ee:78:b4:3c:8d:c5:45:f5:51:ae:29:
38:ea:25:58:79:56:67:e4:63:89:de:8d:6a:cf:8b:cf:12:0f:
34:4b:66:bb:62:e8:b0:33:61:9d:c1:1f:01:f4:d4:97:d4:33:
11:18:74:ef:9f:07:71:8b:1f:2c:2a:a2:b4:0a:3a:17:5c:d3:
1b:59:36:31:69:4a:60:d0:25:55:f7:f2:d2:84:a9:d8:07:76:
6e:75:6c:f7:03:84:24:0c:9c:c5:92:66:ad:1b:76:e0:ec:94:
05:b6:3b:7e:40:3a:0d:5e:de:c1:11:de:ce:13:3b:65:1a:fa:
bd:e0:6d:81:d3:40:4e:08:fd:38:77:d9:02:6e:ce:5a:43:65:
2a:a6:66:ed:1d:23:3e:19:ea:d5:bf:9d:07:45:05:dd:04:71:
6b:33:34:a9:ca:53:c3:61:03:69:1a:23:9e:48:6e:82:2a:78:
aa:d6:56:51:d0:05:b1:f4:d2:8e:1b:9c:9b:49:a4:86:e4:8a:
9a:79:44:54:b6:9a:03:1c:00:5a:e3:e7:02:e8:74:e3:ab:a4:
df:11:27:9a:c5:89:e7:08:5f:c5:f5:cf:e2:be:a6:36:aa:00:
09:f1:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:19 2025 by rpki-client