Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier: Qlq81waPBa+hcmdCbpOb4yF5dTCgbp9Kln+9h6FQ3dk=
Subject key identifier: 20:40:4D:52:8B:81:1B:19:58:90:4A:26:B5:C2:26:34:4F:B6:5A:BA
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial: 019A014806761897624F622A6787E95D382F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number: 065C
Signing time: Mon 20 Oct 2025 11:01:28 +0000
Manifest this update: Mon 20 Oct 2025 11:01:28 +0000
Manifest next update: Tue 21 Oct 2025 11:01:28 +0000
Files and hashes: 1: 8eJjkZcpuWjV5v8rUew7uwzMNnU.roa (hash: yUs06Rtd51ccCs/vsal2jQR2RBqNnF02H0mDpxwGrFE=)
2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: QHHxZu1tjidc5oMT/ZCe35d/krGUhV2XfBH3sWwu7A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:06:76:18:97:62:4f:62:2a:67:87:e9:5d:38:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
Validity
Not Before: Oct 20 11:01:28 2025 GMT
Not After : Oct 21 11:01:28 2025 GMT
Subject: CN=20404d528b811b1958904a26b5c226344fb65aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:29:bc:ef:ea:6a:7f:31:f2:90:4a:f8:25:
35:60:fe:46:84:bc:81:a9:dc:38:36:bb:7d:ee:22:
ea:f1:d0:55:58:53:a6:ba:27:f7:48:27:3f:d6:a6:
92:50:51:84:cd:9e:81:e2:47:7a:9c:40:0c:4b:16:
5b:de:b6:cc:55:d7:81:ed:01:09:60:1b:f9:85:95:
55:47:8b:a3:db:0d:b7:c6:aa:05:a1:cd:0b:45:dc:
5b:e6:9b:30:05:6a:29:c9:5b:a0:90:9a:fb:8a:07:
08:13:d2:ec:fe:b0:9f:fd:59:7d:3a:92:74:76:de:
05:cb:12:66:ed:79:8e:03:c0:2c:3a:6d:f5:a6:e2:
9b:11:67:f2:94:f0:19:ed:a1:44:32:25:3d:02:dd:
2b:1f:af:18:83:ce:af:98:7d:fd:80:99:8e:2b:ad:
34:dd:4e:2c:8a:4e:3c:44:3d:37:76:00:27:5f:78:
d1:19:7d:b5:04:e4:20:9a:91:7d:01:f3:86:cc:61:
06:5d:c2:f4:c8:f1:93:12:26:20:46:84:f4:d2:ba:
16:68:0a:db:76:89:a7:96:7e:1f:b9:58:57:d5:13:
22:92:f6:f9:e0:f7:89:a7:e4:e3:68:31:2f:e7:a6:
18:10:c2:b3:d7:a2:8e:4f:cd:9f:42:23:95:01:89:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:40:4D:52:8B:81:1B:19:58:90:4A:26:B5:C2:26:34:4F:B6:5A:BA
X509v3 Authority Key Identifier:
keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0f:0b:77:45:c9:5c:e7:fb:09:f3:3c:24:55:0e:d6:a3:d8:
47:25:92:72:3a:ee:5b:ce:e6:fd:89:49:a7:f2:fb:60:75:96:
c5:fe:dd:9b:d0:be:1e:65:55:6b:13:04:ac:cc:70:39:f1:a8:
46:92:66:4c:96:7f:e3:b4:32:31:29:f3:31:9e:1a:f4:ab:5b:
32:64:ef:83:1d:93:21:e0:a5:19:f7:60:84:e5:3f:d2:28:b2:
3f:d1:66:90:8c:de:f3:95:9e:96:ce:a5:c5:c4:d3:4e:b1:5e:
73:b3:a8:2f:0f:ba:3a:da:92:bc:1c:44:a8:67:b1:17:36:90:
57:88:2a:24:85:27:88:cd:7c:18:ff:a1:7c:28:88:a0:01:e3:
d8:99:0b:20:46:91:54:e7:90:5c:80:ea:ff:1a:70:51:88:89:
65:5b:28:1f:22:61:04:f3:84:d0:fd:e0:cc:71:37:82:b8:42:
19:b5:ed:37:54:49:6d:f4:a8:c9:bf:3b:d7:b0:a7:65:84:2e:
40:78:3a:11:39:76:34:01:85:d5:4c:9c:90:4c:91:33:69:96:
b6:d1:22:c5:46:a6:25:06:6e:fa:56:3c:dd:cd:76:34:43:30:
e2:1d:6a:e4:b7:2d:ce:27:80:70:a5:87:0e:46:87:7c:b3:7e:
36:38:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:09 2025 by rpki-client