Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: 7X/IPPQZW3kG/An5zJYcF83wUKaKOz4N7mjA7M9J/1I=
Subject key identifier: C6:8E:AB:47:8D:95:84:59:CC:6B:7D:62:C9:D9:83:ED:58:17:2F:03
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 0199FD6B42DCBA76C3B47C276F976B2963E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:28 +0000
Manifest this update: Sun 19 Oct 2025 17:01:28 +0000
Manifest next update: Mon 20 Oct 2025 17:01:28 +0000
Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: H1zSiNgp7d5XtqK71kRM7KvklDcuWtouESJ+TbTvPv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:42:dc:ba:76:c3:b4:7c:27:6f:97:6b:29:63:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Oct 19 17:01:28 2025 GMT
Not After : Oct 20 17:01:28 2025 GMT
Subject: CN=c68eab478d958459cc6b7d62c9d983ed58172f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:91:e8:26:f9:b7:36:65:b9:a3:b0:4b:4e:
03:ec:d3:01:c5:64:66:5d:b3:75:eb:c7:b1:71:e2:
e9:66:25:1b:9b:ba:b0:1e:d6:bf:6f:ad:bd:2b:84:
d8:d8:9e:24:68:44:e6:fb:62:70:2f:53:b3:8c:40:
30:11:83:b0:38:9f:53:8b:5a:82:46:41:15:e7:bd:
1b:2e:95:05:64:98:0c:85:8b:f8:09:56:57:a0:22:
08:27:d4:91:9e:65:33:76:ce:4b:12:1e:89:d0:69:
c8:64:e1:a1:33:41:f6:2e:d7:64:97:c0:a9:92:3b:
e4:95:4d:fd:7f:37:d0:29:19:31:94:ad:99:01:1a:
ce:55:a8:0e:a1:27:0f:2e:91:43:0a:a3:55:c7:22:
cf:ae:22:33:ff:21:5a:0a:b7:72:ff:a0:c9:72:c0:
1f:00:08:3c:4d:42:82:e2:4b:0b:69:35:ef:77:37:
e1:81:1d:bd:63:4e:91:22:38:60:35:7f:e3:b2:29:
6d:aa:84:ad:fa:04:dd:9a:53:d9:62:8e:9d:8e:fc:
e9:89:05:40:da:bc:a2:ea:66:59:22:f1:e7:5b:6c:
e2:73:7d:06:1b:79:f5:f1:fa:15:8c:ae:84:3d:5a:
eb:25:2f:65:48:d1:de:17:5e:53:46:43:be:a1:b0:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:AB:47:8D:95:84:59:CC:6B:7D:62:C9:D9:83:ED:58:17:2F:03
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:00:9c:d6:7d:d8:f0:67:92:2c:a9:c2:f9:e5:9b:78:c4:b2:
bd:bb:8c:16:93:3b:80:bb:ea:26:a4:8b:af:9d:8c:3d:a7:c7:
e5:98:4e:3b:42:75:aa:35:a4:c7:b0:d9:23:1a:56:53:c6:12:
73:38:66:ef:18:5f:70:d8:84:0d:6b:3d:f6:e2:9c:74:48:ba:
cd:47:8a:04:8c:d6:0e:74:ce:5b:a9:60:33:46:e3:cf:39:9c:
fe:65:16:98:4c:58:0e:13:86:98:53:51:b9:c4:69:bb:67:5a:
56:54:5f:c9:34:16:52:63:29:0e:33:1f:57:b3:56:ea:c8:64:
ef:eb:21:b9:06:5f:e4:fa:eb:55:57:b2:2d:cd:41:27:b2:a5:
7f:0a:cd:01:ec:fa:74:89:62:2d:d2:b5:64:bc:38:91:c2:0d:
40:2f:5b:05:a0:48:d6:a4:9e:01:08:6f:30:89:6b:04:aa:d5:
3f:f0:33:06:f4:db:a4:cf:13:32:d5:7f:ff:38:19:32:8e:07:
07:98:7e:ab:51:b0:a9:76:ae:50:b1:a3:57:eb:53:7d:48:d3:
c1:47:b1:2b:83:2a:3a:03:73:2b:b2:7b:12:b2:7b:a9:a1:1c:
6a:6c:09:4b:ae:a9:29:1d:c1:ee:4f:76:06:52:fc:87:8e:d6:
1d:73:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:48 2025 by rpki-client