Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: qP9iKQeYSX8hUtXQQdTj1luqvKBgpMjF5FwXMd//OLM=
Subject key identifier: 00:24:12:2B:06:DB:42:C8:D8:04:C5:50:26:14:4D:67:5C:CD:7A:A9
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 0199FBEB0D1C96907AB062470AD20EF948B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0D64
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: bGh0gZQWoVKD478/YBHM+dNZlpN0gSyG7kY/VhAIZiE=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0d:1c:96:90:7a:b0:62:47:0a:d2:0e:f9:48:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=0024122b06db42c8d804c55026144d675ccd7aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:fd:50:2a:d6:21:92:16:c3:22:74:a2:a6:
2f:c4:50:92:03:1c:7f:88:18:97:de:c6:6d:7e:4a:
11:5f:2a:60:00:3d:4e:75:5d:bc:ef:45:4f:f7:a6:
00:e6:2c:08:12:1b:30:e5:c8:3e:6f:32:78:86:38:
a7:d6:ed:b1:7e:b6:c1:d8:e0:10:f9:d6:d8:08:61:
32:3d:a6:7e:9c:0a:30:c4:3e:b4:15:92:b4:7e:59:
fe:45:e9:14:1f:ab:18:a8:73:7e:8b:fa:a0:0c:8e:
f6:91:e2:a7:f8:d9:c8:b7:56:1b:74:a9:3d:04:c7:
46:2f:3b:29:78:e8:2b:91:02:f5:45:fb:f6:9a:54:
f8:8f:55:be:fe:28:80:66:57:e7:f0:d2:85:90:3d:
88:aa:d0:fa:60:67:2d:b8:3d:59:6d:39:f0:1d:b0:
61:f9:7a:18:ca:b0:ab:c8:0a:bf:9a:a6:cf:d7:f0:
76:d5:d6:ea:fa:c9:cd:c3:ed:62:23:04:57:ad:f1:
98:6a:5b:77:26:28:99:95:16:75:11:cc:66:cb:50:
f7:4d:78:70:b2:e4:dc:c3:c2:7f:b4:ed:92:f0:3b:
ea:bd:81:50:b5:93:9c:42:6f:9e:b4:9c:b4:fd:d7:
9c:6a:4a:9c:14:6d:25:47:93:10:2a:02:26:b6:37:
f1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:12:2B:06:DB:42:C8:D8:04:C5:50:26:14:4D:67:5C:CD:7A:A9
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cf:80:c5:79:13:35:ad:3e:37:a6:ef:7f:80:95:60:57:86:
b4:98:f9:f6:a8:d3:1d:7f:4f:70:08:ca:72:0a:59:66:f0:25:
a9:c4:e4:98:9b:21:ec:4e:27:f1:81:2b:6f:fd:30:5b:c6:c7:
25:68:cb:b8:43:44:b8:0c:5b:5b:ea:ee:0d:d8:f8:e6:90:1b:
61:ee:60:5e:66:80:1e:5e:3a:6c:f1:2e:4e:fb:e6:cb:ff:73:
19:4f:9b:23:e4:ba:d9:b4:cc:21:d4:ac:c7:88:16:fb:f1:f2:
7b:db:fb:82:3e:3e:c9:32:24:b2:d7:ce:f3:74:2d:f0:83:18:
8e:7c:c7:43:9c:5a:a7:71:90:80:c4:7b:a3:70:3b:28:fd:84:
7f:85:38:3b:3c:cc:f2:61:38:7f:77:3c:a2:7b:35:3d:eb:73:
76:aa:02:bc:73:57:ad:24:d2:ce:56:02:41:66:e7:78:2f:7f:
2d:78:0b:ba:bb:0a:e9:90:54:84:08:f1:b5:9b:91:17:a2:c7:
09:9e:c2:40:87:bd:fb:9b:45:36:e0:76:3c:ed:88:96:f4:e4:
96:f7:89:ed:fb:69:5f:5b:58:d6:63:44:fc:a9:c6:f5:a2:f6:
76:a7:c8:eb:40:b8:2b:90:ef:ca:95:14:15:c2:29:2b:ad:fc:
4c:5f:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:44 2025 by rpki-client