Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: vcTnycD5Gs/WhukzQ599/UrBgKaOfjWnPXIFiqstAlM=
Subject key identifier: 6A:FC:13:7D:E4:16:96:28:05:91:6E:8E:81:00:D8:88:4B:3F:1E:39
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 0199FC584835CDE9BBCFA05FD877D2A6AA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: Wdkw3hOzsY2NLVCyToFGkKvcRaxzTIyRdE8i7EZyv9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:48:35:cd:e9:bb:cf:a0:5f:d8:77:d2:a6:aa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=6afc137de416962805916e8e8100d8884b3f1e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:c8:38:2f:5e:92:4b:81:41:9c:69:9e:2e:
49:11:82:99:aa:6d:09:b9:59:ad:10:5a:6d:4c:36:
e5:e2:c6:bb:e6:e0:89:4d:16:cd:63:75:cb:e2:bf:
57:c0:d5:fe:23:1b:48:c8:ab:e0:f6:30:12:c3:84:
41:20:7f:55:6d:60:fa:f7:fb:ef:49:8d:7d:58:48:
7e:df:96:c5:7b:db:87:15:68:63:c9:e3:fe:57:06:
f9:b2:c3:7b:6e:5a:7b:ac:ab:50:76:12:b9:b8:48:
17:a7:d6:d5:3b:8c:ee:6d:6b:d6:d9:43:f8:5b:22:
f4:a0:05:1a:e4:09:7b:df:0a:a5:a1:e1:72:98:7b:
8a:0b:a6:aa:8e:28:af:e9:26:e8:9b:62:95:c5:15:
29:6d:84:fe:6c:0a:2c:72:c8:79:23:cd:1c:b7:21:
da:59:54:df:6a:10:ab:09:ab:ff:5d:3f:8c:74:91:
0b:68:01:b1:cb:e6:37:d0:a9:15:4b:cf:40:5a:4d:
da:d4:44:87:f7:df:08:a3:ed:f4:0e:67:23:55:54:
8d:2f:8c:7b:e7:e4:8f:21:f2:b6:ab:58:9e:c2:6f:
07:5c:3f:7e:c8:12:8d:d3:35:fe:ec:67:07:ba:e2:
9b:8d:8a:8e:ca:f2:bb:57:19:79:af:45:61:b8:8c:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FC:13:7D:E4:16:96:28:05:91:6E:8E:81:00:D8:88:4B:3F:1E:39
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1d:49:83:a3:2d:4b:ad:94:f3:83:c7:e5:47:fe:63:13:41:
3c:56:ff:0d:19:cb:83:3e:d0:0e:34:f7:fc:de:e1:13:fd:d3:
0a:cb:db:de:68:47:ec:ee:65:f9:95:d8:3f:5b:db:0a:de:ca:
b8:01:55:8e:36:6c:e6:c9:f4:db:c7:64:7f:1f:73:d5:d2:d9:
73:09:f7:4f:be:45:49:e4:9a:5d:3f:ca:07:3b:42:15:eb:1d:
00:0d:b3:96:9f:50:f6:0c:06:f4:28:1f:98:60:a2:1c:54:39:
7d:a5:42:34:99:66:6a:82:4d:f4:d1:72:5e:7f:2b:b8:dc:f9:
66:65:b1:c1:c6:cb:92:00:99:9e:d1:02:81:00:a5:7a:07:48:
22:83:b5:cf:8f:62:5b:4d:a8:b8:d2:3a:2a:d6:20:62:a9:52:
b2:51:e1:48:9d:31:82:c8:05:48:81:0c:06:68:cb:ba:fa:4f:
a6:f1:68:82:67:9d:18:7c:e0:50:23:e9:60:a7:6f:f1:10:85:
00:ce:78:df:e4:7b:d6:be:17:9b:a3:bc:b1:8a:35:49:3d:30:
47:27:97:db:8e:a7:97:6a:a4:13:64:bc:cf:51:de:04:18:1e:
f5:30:7f:75:97:db:86:44:2e:19:4d:5d:08:3c:6b:e0:f2:cc:
2e:4c:82:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEg1zem7z6Bf2HfSpqoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4
MDEwZmEwHhcNMjUxMDE5MTIwMTA4WhcNMjUxMDIwMTIwMTA4WjAzMTEwLwYDVQQD
Eyg2YWZjMTM3ZGU0MTY5NjI4MDU5MTZlOGU4MTAwZDg4ODRiM2YxZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/HIOC9ekkuBQZxpni5JEYKZqm0J
uVmtEFptTDbl4sa75uCJTRbNY3XL4r9XwNX+IxtIyKvg9jASw4RBIH9VbWD69/vv
SY19WEh+35bFe9uHFWhjyeP+Vwb5ssN7blp7rKtQdhK5uEgXp9bVO4zubWvW2UP4
WyL0oAUa5Al73wqloeFymHuKC6aqjiiv6Sbom2KVxRUpbYT+bAoscsh5I80ctyHa
WVTfahCrCav/XT+MdJELaAGxy+Y30KkVS89AWk3a1ESH998Io+30DmcjVVSNL4x7
5+SPIfK2q1iewm8HXD9+yBKN0zX+7GcHuuKbjYqOyvK7Vxl5r0VhuIxTbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr8E33kFpYoBZFujoEA2IhLPx45MB8GA1UdIwQY
MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt
ZTEwYTYwNTk2YzI2LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2
LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB1Jg6Mt
S62U84PH5Uf+YxNBPFb/DRnLgz7QDjT3/N7hE/3TCsvb3mhH7O5l+ZXYP1vbCt7K
uAFVjjZs5sn028dkfx9z1dLZcwn3T75FSeSaXT/KBztCFesdAA2zlp9Q9gwG9Cgf
mGCiHFQ5faVCNJlmaoJN9NFyXn8ruNz5ZmWxwcbLkgCZntECgQClegdIIoO1z49i
W02ouNI6KtYgYqlSslHhSJ0xgsgFSIEMBmjLuvpPpvFogmedGHzgUCPpYKdv8RCF
AM543+R71r4Xm6O8sYo1ST0wRyeX246nl2qkE2S8z1HeBBge9TB/dZfbhkQuGU1d
CDxr4PLMLkyCGA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:28 2025 by rpki-client