Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: gaMbepjgLEGmER5gGzUoNGEGhb9IS6+GJGRctqC3QjQ=
Subject key identifier: 35:68:C7:09:3E:C8:AB:B1:39:6B:DD:D9:F0:B1:AC:80:D7:4D:0B:6D
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 0199FC58A78CDCFB271A13A885520AF3B714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: 0355
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: IYQc4ANRY2hI65rlny/FpwMuzasdQ4XlDRDUxSXHUTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a7:8c:dc:fb:27:1a:13:a8:85:52:0a:f3:b7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=3568c7093ec8abb1396bddd9f0b1ac80d74d0b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:f7:04:d2:3d:a8:73:09:43:e1:66:94:73:
03:a2:10:00:46:f0:49:64:76:ac:a0:0e:2a:86:8f:
50:65:9a:a5:ea:3b:6e:c8:db:c3:29:57:e0:95:e8:
d8:42:73:71:93:26:c7:6c:da:f4:a9:b9:b8:bf:14:
a1:d6:c8:74:0b:e0:6d:2d:6e:90:9e:dd:a0:8c:99:
ac:8e:c7:8d:fc:08:4d:29:60:82:32:33:af:15:f0:
ec:bf:fc:cf:d4:89:63:dc:8c:2e:1a:7f:5f:9a:e7:
d4:36:5e:a5:12:f0:49:87:a4:5a:7b:97:a1:1b:b4:
da:8d:07:66:83:69:48:22:2d:fb:80:fe:f3:9d:6c:
f0:e6:8c:0c:bb:29:b8:87:68:b4:ee:ce:28:53:ec:
ef:4c:f5:1c:04:0c:c4:10:81:e2:69:69:cd:99:a8:
f4:4e:4b:0a:5f:65:c9:3e:3e:0e:17:bd:71:8c:02:
57:5f:da:f3:79:6c:50:0c:72:8b:e1:db:ba:95:e6:
e5:b7:c9:d1:35:b4:63:8e:b2:18:30:de:7c:dd:b1:
1e:32:ff:f2:da:4e:fd:3f:1d:9d:b4:4e:f2:d6:26:
3e:95:d3:fb:57:e3:ea:f9:e7:48:db:94:b4:3e:22:
e7:0f:18:b5:85:2b:bb:80:7d:17:eb:f7:a5:38:97:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:68:C7:09:3E:C8:AB:B1:39:6B:DD:D9:F0:B1:AC:80:D7:4D:0B:6D
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f1:f9:96:60:25:a1:74:fa:7a:bc:1b:4c:82:9c:79:6c:6f:
0e:a5:d4:e6:08:a1:da:23:69:6c:2e:0a:4e:7a:24:d1:18:18:
f6:ef:5d:25:54:1f:21:58:61:fa:4c:95:4e:6c:21:7f:27:a2:
5e:f7:ae:5d:7f:c1:c5:58:00:ca:f8:0c:24:8d:51:98:16:df:
eb:b4:d4:06:1b:93:ae:5b:32:13:a2:75:d6:81:aa:68:79:2f:
74:0d:e8:44:37:ef:3d:bb:5a:51:55:77:f0:c8:ae:c8:b8:26:
6c:b6:78:37:0d:f2:18:23:0d:75:96:35:8e:fc:a2:91:26:54:
11:ae:b9:6e:f5:61:09:5d:5a:e3:83:a7:56:ca:5c:4e:4f:d3:
d3:95:d1:43:a6:f6:16:4d:6a:e5:69:61:45:0d:9a:c8:62:61:
ac:73:c6:82:52:34:fe:35:3d:4a:a4:cf:dd:3c:2c:0a:ec:5f:
86:be:70:59:0e:97:fb:f7:2b:ad:7d:f9:a1:44:2c:41:18:61:
c1:71:ee:a2:99:da:eb:9e:b8:83:60:f4:f0:23:29:f0:5d:22:
0d:c9:fa:56:b5:fe:98:f2:12:ca:af:e4:b9:21:40:85:8a:95:
1a:23:84:c7:00:f4:f8:ab:33:e2:79:4d:3c:4d:c9:89:fc:36:
b9:73:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:34 2025 by rpki-client