
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier: CjIdbrZPhBJElPzOOaLe9/5gCPLwmsmK5zcQR10S1BY=
Subject key identifier: 8D:A3:55:66:CC:37:A2:CF:43:6D:48:09:5D:D6:CF:29:EE:0C:97:6F
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 0199FC8F379F5DA116836C2C229615529F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: GvO3Ilc/K9Doigz+7mAHeKVBt7BTDD8dXt+oFv7cMw8=)
2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:37:9f:5d:a1:16:83:6c:2c:22:96:15:52:9f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=8da35566cc37a2cf436d48095dd6cf29ee0c976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:0d:8c:f1:59:78:1e:19:d5:75:9d:63:e8:
b1:e1:1f:ef:b5:70:67:23:4b:57:66:a7:a5:ca:c6:
83:2b:f0:d1:f6:6f:da:dc:0e:3a:8f:96:8b:40:38:
13:fc:47:c5:9c:8e:97:01:8e:c1:7c:bc:5d:fd:df:
cf:6a:d1:9a:61:8a:e0:be:a4:0e:5a:6d:25:94:49:
6d:b6:a5:21:38:ea:1d:ee:16:70:3c:45:f7:3c:a9:
f2:90:78:4c:cd:38:2c:e6:ac:8f:70:fc:0f:ec:da:
38:e0:73:1f:89:b8:00:19:17:77:a7:f3:00:e4:95:
8d:34:e3:4d:76:87:7c:a1:db:e7:60:50:70:75:a8:
00:72:b0:d2:b5:80:17:e6:d4:01:32:18:a5:bb:4a:
0c:67:41:87:2c:9e:82:28:df:06:0e:a3:d7:87:ae:
86:0d:58:62:4c:ad:a8:f0:1d:14:8d:4b:a0:fd:b5:
94:29:cd:4a:7c:84:63:e6:ca:5e:70:99:7c:56:79:
1a:51:07:74:6b:d3:91:f6:f8:da:96:43:9e:fd:97:
0a:6f:1d:97:11:ab:10:a2:5f:bc:d0:fb:3b:42:36:
80:7a:89:e2:01:50:95:f4:7d:d6:0c:de:b0:d0:3d:
87:2a:76:17:3d:93:10:ff:b2:5d:72:5a:f5:89:9f:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A3:55:66:CC:37:A2:CF:43:6D:48:09:5D:D6:CF:29:EE:0C:97:6F
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:18:0a:78:0e:d8:67:37:1b:d3:5d:92:b4:e0:08:eb:79:
0b:08:f9:26:84:4f:01:0c:d3:8b:55:c5:e1:79:97:53:e8:3d:
fa:3d:b4:2d:7a:8c:3b:a7:00:b3:5e:09:84:45:5e:95:f3:f3:
e3:ed:4a:b5:4a:86:49:e5:74:31:12:a6:46:88:82:de:ec:8b:
a7:4f:d0:70:64:c2:19:6d:c8:93:9d:44:fb:8f:51:4f:f2:70:
8c:7a:8b:26:ec:8e:f1:19:27:2b:55:e8:8f:8b:1d:03:70:69:
15:99:43:00:05:9e:d6:20:7e:16:cf:ed:74:eb:83:be:c2:46:
78:7b:8b:8b:0c:bb:fa:5b:73:56:7a:3a:56:12:51:35:b4:c8:
18:df:91:4b:44:95:dd:0f:ba:05:9f:6a:66:a9:c5:e9:c1:8f:
0e:e5:91:01:b8:6c:67:a4:88:17:fd:95:fc:6e:4b:bf:12:e9:
ef:c0:77:a4:b5:2d:06:fe:54:7a:ef:3b:50:e3:6e:7b:d5:13:
6a:30:1f:59:23:0e:a7:cc:a5:21:e0:8f:1d:25:46:10:b8:dc:
6b:a0:de:bf:bd:91:33:79:7e:53:c6:f5:42:e7:ab:ef:66:cb:
9b:cf:c4:69:c3:be:f5:0a:d6:43:ef:c3:24:c4:2f:c8:1c:4d:
52:14:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:49 2025 by rpki-client