Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
File: MhbvzNFel4pwQKXUt5xBf7lmvyg.mft (raw, json)
Hash identifier: 52ychsCKL0IDgeFRI7H1ZqGDo2qYQRwWa8vCtqjSi0I=
Subject key identifier: 98:C1:06:0F:B1:1B:15:58:DA:07:B6:F2:C6:38:32:A6:7F:B8:6B:B5
Authority key identifier: 32:16:EF:CC:D1:5E:97:8A:70:40:A5:D4:B7:9C:41:7F:B9:66:BF:28
Certificate issuer: /CN=3216efccd15e978a7040a5d4b79c417fb966bf28
Certificate serial: 0199FE101CBE52E3C99D1D0F6BA6772E3820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
Manifest number: 014F
Signing time: Sun 19 Oct 2025 20:01:32 +0000
Manifest this update: Sun 19 Oct 2025 20:01:32 +0000
Manifest next update: Mon 20 Oct 2025 20:01:32 +0000
Files and hashes: 1: G_QAj13053ZQmqPjvoFu7lprfls.roa (hash: v8AAmxC8K2fmbWdzfzNZzKaQdWure2gG3MF9k3IbA6o=)
2: MhbvzNFel4pwQKXUt5xBf7lmvyg.crl (hash: DY8tQ9Pqna8/ddzKJymMqTQor5vHstuo/xdfnNLwM7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:1c:be:52:e3:c9:9d:1d:0f:6b:a6:77:2e:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3216efccd15e978a7040a5d4b79c417fb966bf28
Validity
Not Before: Oct 19 20:01:32 2025 GMT
Not After : Oct 20 20:01:32 2025 GMT
Subject: CN=98c1060fb11b1558da07b6f2c63832a67fb86bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:6d:e2:e3:5b:18:d8:db:e1:9b:6a:04:d5:
25:20:4d:17:f7:4e:4b:7c:0b:97:2b:14:ba:36:13:
c2:2c:e1:d1:ac:26:23:fd:7b:1e:bf:4b:89:2e:6e:
87:54:83:a8:2d:16:fc:20:37:c2:1c:7d:96:53:f8:
52:65:5c:be:d0:3e:af:c1:f9:96:49:c4:d8:ab:68:
07:97:64:cb:10:d2:e4:1f:d4:b7:87:bd:27:1f:67:
59:ae:36:a4:97:62:bd:5b:9e:9b:e9:1f:3f:23:a8:
f8:59:f6:77:83:1f:97:a5:4c:b0:91:14:50:5a:ca:
fc:56:e7:ac:80:fa:7a:5e:d9:6c:7d:a8:8b:0c:71:
49:be:44:15:b9:ab:c2:db:d8:07:91:c1:14:70:1a:
80:58:94:c7:b0:3c:bf:30:d0:43:fe:96:0f:3b:73:
45:55:28:e5:70:0b:ab:ca:8e:25:81:b9:ff:d7:36:
0a:ab:d2:af:68:c4:7c:4b:08:1b:a0:ad:f1:7c:6e:
d0:d0:1a:93:04:78:26:3c:bb:d0:55:c2:7f:98:ee:
ff:0f:d9:e0:f9:07:18:f6:f6:45:8d:80:9d:fa:55:
e4:e9:69:2e:ce:06:a3:21:c5:f8:e3:f7:a8:32:9a:
23:d0:32:40:25:d0:98:0d:5b:8b:99:83:79:2c:8b:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:06:0F:B1:1B:15:58:DA:07:B6:F2:C6:38:32:A6:7F:B8:6B:B5
X509v3 Authority Key Identifier:
keyid:32:16:EF:CC:D1:5E:97:8A:70:40:A5:D4:B7:9C:41:7F:B9:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:84:28:f9:91:41:32:8c:5f:5a:a9:cb:20:01:dc:fe:9b:d6:
75:42:6e:53:49:6a:15:03:d0:4f:e7:83:f6:cc:34:61:e6:73:
da:68:b5:17:89:f2:87:e4:0f:1b:77:ff:5d:e4:e8:ee:42:8d:
c2:5a:95:b1:be:bc:38:1f:d3:1d:b9:e1:54:ae:10:f3:25:ba:
cf:65:4f:12:6c:44:94:be:0c:09:32:e2:4c:23:30:02:d6:79:
fb:67:01:8b:a2:ae:a9:75:22:23:b9:e6:a0:f3:45:f0:48:18:
b0:64:e4:8f:59:c3:9a:a4:96:e4:89:b8:09:4a:b7:06:55:8d:
01:a7:57:7b:fa:fe:32:26:ae:b1:b2:c7:9c:20:6f:8f:f7:90:
cc:95:58:f7:2f:b5:19:22:2c:7a:7b:76:50:48:fa:51:8a:64:
af:10:0f:98:fc:c4:a2:d4:b8:fc:35:c4:fe:cd:b7:39:1e:67:
1b:f3:58:c6:04:86:97:ca:16:0e:ce:89:e9:f2:34:47:be:10:
86:1d:13:58:31:bb:25:66:ee:df:5b:9f:5a:b6:52:e8:39:c2:
33:44:bc:89:54:96:73:7f:0e:87:77:a2:45:99:ba:04:bb:41:
9a:68:b9:6e:1a:b0:1e:00:4b:d3:cd:49:52:d7:b3:9e:31:ec:
cc:de:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:37 2025 by rpki-client