Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier: uoH+1gxmv7apj1T+4zHOQlM/7oIL9GmOuybJEdfCXJo=
Subject key identifier: D3:92:FF:6A:87:3B:8A:86:8E:FA:79:A6:10:0F:A2:25:B1:BC:1E:03
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial: 0199FF59A4AA1BB2EE1A453C8536AC818A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number: 065B
Signing time: Mon 20 Oct 2025 02:01:28 +0000
Manifest this update: Mon 20 Oct 2025 02:01:28 +0000
Manifest next update: Tue 21 Oct 2025 02:01:28 +0000
Files and hashes: 1: 8eJjkZcpuWjV5v8rUew7uwzMNnU.roa (hash: yUs06Rtd51ccCs/vsal2jQR2RBqNnF02H0mDpxwGrFE=)
2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: 05YvQL4nnCxcbR6MT650LuhMmesjJQWWAXHDW+dHQU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a4:aa:1b:b2:ee:1a:45:3c:85:36:ac:81:8a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
Validity
Not Before: Oct 20 02:01:28 2025 GMT
Not After : Oct 21 02:01:28 2025 GMT
Subject: CN=d392ff6a873b8a868efa79a6100fa225b1bc1e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:36:26:fa:09:81:6b:54:68:48:28:60:ac:
b0:69:86:ec:53:cc:93:cb:ad:ea:45:24:ec:86:b6:
30:17:92:f9:11:bf:34:c8:af:b3:f1:9c:9f:b8:da:
e6:f8:dc:68:3e:10:16:b7:32:ce:42:d8:64:3e:b0:
2b:01:a1:94:c5:98:17:4d:8d:34:6e:e3:8f:d5:35:
8c:18:2b:d5:92:03:1a:20:bd:17:0e:d0:6f:61:5e:
89:83:8c:ec:8b:7d:12:a1:a8:d7:f7:1a:fa:c3:7a:
4b:1a:00:d4:5b:3b:0f:18:ad:50:ae:1e:e9:0a:41:
c3:57:d3:ac:59:5e:34:d8:db:f1:d1:d0:a8:08:61:
97:47:cf:67:5a:5b:b2:c0:5c:e0:f1:27:ff:7b:f4:
b4:10:b9:bd:31:87:6f:20:10:f5:91:f1:0f:26:73:
cb:32:ee:8e:f1:6e:78:a5:3c:1e:d4:de:e4:9c:bf:
ce:ec:40:19:6c:5e:54:56:4c:97:1b:f3:0c:15:c2:
2a:91:1a:b5:80:2a:3e:fb:75:ec:78:3f:25:5c:14:
84:4e:84:ae:f9:ea:9d:e3:b9:ab:a9:69:60:09:56:
87:2e:df:09:ab:06:fd:ac:a4:58:f7:ae:73:4c:87:
c8:38:fa:cf:f6:e8:5a:5a:46:f6:16:bb:0e:52:4b:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:92:FF:6A:87:3B:8A:86:8E:FA:79:A6:10:0F:A2:25:B1:BC:1E:03
X509v3 Authority Key Identifier:
keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:96:88:e4:a0:c8:c5:0f:ef:ff:77:3a:5a:b2:9b:39:ce:08:
4b:f0:f0:33:a8:4d:8a:06:82:64:63:a9:50:52:85:90:82:be:
66:47:00:59:25:05:4d:38:07:5e:1c:63:a2:f7:13:87:79:63:
af:f1:20:4c:da:67:7d:45:98:80:58:e8:a1:1c:a1:4a:8a:05:
b5:ae:67:91:c3:9b:5f:5c:c7:78:fe:06:60:39:19:f2:37:10:
ea:6a:88:ae:e1:cb:81:9b:3b:ff:01:84:aa:da:c9:6b:69:0b:
76:c3:4d:f2:b2:4d:a6:58:e3:98:bf:e8:34:45:8c:f1:be:20:
d1:59:c0:89:41:8b:b2:0e:e6:3e:99:9c:9d:b2:60:e7:aa:6a:
d0:1d:5e:42:42:ac:0a:44:c4:c3:02:79:dd:ba:f6:ca:9f:73:
2d:63:10:08:6d:77:ca:c3:7e:87:c9:5c:b0:87:20:bc:55:a1:
12:52:60:37:8f:db:bf:73:b6:d7:63:3c:33:9e:9a:27:13:2e:
aa:6a:cd:68:4e:04:b6:73:9d:d3:3a:f2:0a:29:db:3d:d2:d0:
db:fe:dc:15:fb:c1:0e:28:39:eb:3a:72:ed:88:45:f5:6b:1c:
f5:a3:82:bd:96:f1:1b:41:10:69:ca:3d:e5:53:ca:49:ed:70:
7d:ad:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:50:45 2025 by rpki-client