
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier: gc5rCD91B7wuyng3EMk6+ZUPT34W54vPxlkC4HEKJxQ=
Subject key identifier: E4:DB:E4:C0:AF:EF:09:C5:EE:9A:59:A6:52:5C:75:1E:7C:70:A6:AD
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 0199FEEBCD9791A432E55889437EE590721D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 00:01:30 +0000
Manifest this update: Mon 20 Oct 2025 00:01:30 +0000
Manifest next update: Tue 21 Oct 2025 00:01:30 +0000
Files and hashes: 1: BW3A__rx2CbIUTDEiMn83o5J6Rc.roa (hash: +W0IBSEcBlBjIDnc0zQLUrT47ugJKv3Fw0kJeub5rgs=)
2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: kkg/8yt1n/d8AtY1Zx9q54I/K/jA8C/pw9NIC0WDuyU=)
3: ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa (hash: j1YLYo9zhTMcstPOsjWFmkSiW90BAcTxpdKCd+nR3wg=)
4: kzlKteCWTjnwW6-aHGmzKaU89Tk.roa (hash: dZAgMsY9EZwDfLHL+nyzOll7nSrz5A+eCW3/ALWgVNM=)
5: zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa (hash: F1hV7z0LQUY2X5RuZU9RZBKCovp02y2W3daH45B8zgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:cd:97:91:a4:32:e5:58:89:43:7e:e5:90:72:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Oct 20 00:01:30 2025 GMT
Not After : Oct 21 00:01:30 2025 GMT
Subject: CN=e4dbe4c0afef09c5ee9a59a6525c751e7c70a6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:d0:d6:53:ab:bf:14:c0:93:4b:fa:58:22:
40:f5:b3:a6:64:95:3b:50:af:03:36:99:cf:6b:7e:
07:b7:97:88:3d:ff:b4:8b:f9:7a:8c:f2:13:0a:96:
0e:3a:a8:b8:55:96:52:08:dd:99:ea:05:cf:92:2f:
7a:a1:20:f9:e7:bb:75:9b:04:e4:35:f4:d4:88:2f:
60:89:4b:e3:95:0f:02:da:2d:8f:d2:a2:d8:42:a2:
be:7e:3c:3a:0c:55:43:43:1b:0b:a9:6c:13:a5:7e:
4b:1a:df:cd:d7:ef:34:0f:8b:26:bd:14:9b:1b:34:
4f:e3:ba:1e:93:cf:0f:39:79:ac:12:85:34:ff:09:
bd:87:a9:df:65:69:b1:6f:ca:06:99:d3:03:44:a1:
bf:a6:cc:70:36:4b:56:0e:9b:b9:c1:95:ef:05:ea:
23:c4:62:bf:ce:a3:52:04:54:cf:67:45:8d:b0:37:
81:05:6d:9b:bb:f7:53:cf:ae:88:02:1f:05:89:2c:
62:6e:ca:ee:40:ff:28:c8:20:94:f2:87:b2:3c:67:
c3:11:54:af:6b:b1:02:0c:8f:29:39:42:2b:f0:71:
7d:09:48:ea:76:85:e0:59:f3:2e:41:22:ab:f3:24:
1a:0e:f9:d2:af:17:dd:d5:be:4c:fd:a1:7d:79:dc:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DB:E4:C0:AF:EF:09:C5:EE:9A:59:A6:52:5C:75:1E:7C:70:A6:AD
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:14:d8:17:02:a4:c3:be:a8:07:43:8d:1f:40:4e:61:58:72:
62:4e:44:28:7b:86:10:56:40:6b:5c:72:38:bf:ee:d4:fe:d4:
2f:ab:f6:d4:3b:e2:a2:9c:70:d1:d7:60:a0:76:6d:24:ec:34:
d2:13:79:a9:7d:47:be:a3:54:91:95:69:9d:6a:11:f6:17:69:
fb:97:c2:c0:98:1f:dc:36:ad:ae:80:3e:44:54:32:28:c9:95:
00:94:b7:a1:4c:5f:c4:48:de:7d:92:a4:b6:a9:ea:7f:cc:17:
f7:75:e0:db:2b:76:80:b4:84:99:82:a1:7e:bb:be:3d:3b:d2:
17:63:ae:56:d6:b1:a1:04:25:0a:40:7a:86:e4:e7:3c:3e:11:
e0:d1:ea:e0:1e:9a:d4:f7:8a:a2:f8:75:d9:19:8d:72:a7:53:
1c:5a:66:27:53:3a:99:30:7a:40:b2:58:63:e8:ea:4f:5f:e7:
f6:3c:c2:ca:5e:21:9c:79:42:bb:b4:6e:fb:75:fe:ee:5c:ac:
0c:64:10:74:46:8b:64:20:63:02:0e:30:ab:9c:5b:10:fe:31:
66:f6:45:04:d9:1e:55:d4:ee:30:e9:d1:ea:bc:0b:5e:b1:ac:
ce:78:78:ea:96:7f:90:3d:3d:86:e3:31:77:27:1a:49:66:4d:
aa:03:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:18 2025 by rpki-client