Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: 1WW9dnKqsLwR/AU2qKawULqnoB/fIns1bJL2Dlov7c4=
Subject key identifier: 74:BA:EE:2F:80:36:6A:1A:3A:2B:01:7E:0B:AD:6A:A7:9A:BB:13:DE
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 0199FC8F838B18F277283F038D980CAEE27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: fKnXjwQByiDU0WbVqmaNN3BWskvi7cTqG9k3TjApQls=)
2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:83:8b:18:f2:77:28:3f:03:8d:98:0c:ae:e2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=74baee2f80366a1a3a2b017e0bad6aa79abb13de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:b3:a0:17:c7:47:21:05:50:b6:e6:de:0f:
d3:55:a9:69:a2:ee:cf:8a:20:66:94:cd:73:d1:90:
88:00:b4:c0:40:bc:f2:72:4f:ea:48:c8:35:9f:87:
7e:ef:67:17:45:6f:44:85:47:4b:2a:d6:aa:fc:34:
3a:b0:cb:28:51:44:8a:a9:15:05:92:b4:ee:ac:34:
52:a7:37:ce:d3:5f:12:1c:5e:19:b2:66:0f:4b:43:
a5:12:49:04:47:fb:4c:60:ee:36:b9:5c:4c:82:cf:
24:18:a4:44:b8:d9:d9:17:ce:3d:cc:98:4e:6c:85:
6a:7b:aa:6e:e4:ec:65:3a:b9:4d:8c:d1:2b:98:b1:
58:96:64:22:95:21:e4:86:51:fa:38:53:0e:94:35:
40:a9:32:e1:17:14:3f:25:46:15:e0:09:1e:0f:c4:
35:6c:d0:95:dc:82:91:02:2c:90:e0:38:b0:5c:b3:
60:53:2d:d1:12:15:60:e5:c5:a9:0f:85:da:8c:35:
b9:8c:37:31:9f:52:b1:59:c8:67:49:7f:80:45:4e:
4f:07:76:7b:70:8e:84:5e:01:d0:7c:96:6d:cf:72:
45:a0:c3:d6:59:41:6a:2f:01:ee:be:19:af:8d:a8:
5d:8f:06:a4:8e:d4:5a:b3:6d:89:c0:99:1d:33:aa:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:EE:2F:80:36:6A:1A:3A:2B:01:7E:0B:AD:6A:A7:9A:BB:13:DE
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ec:fe:10:ec:e1:38:41:aa:dd:c1:45:b0:6b:ca:50:3b:00:
27:58:f2:0d:4d:17:50:43:1d:5e:d5:c2:c3:de:b1:12:f7:10:
7b:38:cd:0c:18:62:89:eb:1e:12:5a:0f:4f:69:8d:19:70:64:
66:fc:06:5a:67:16:f6:42:92:b0:cd:7d:d0:b2:35:ad:50:73:
72:30:7c:2d:01:cd:46:63:d8:a6:1f:42:ec:12:4f:13:ed:31:
b4:e9:28:65:a7:79:2a:2d:5c:13:fe:f8:f3:d5:1f:d7:aa:a8:
75:a3:c4:4d:e5:79:ed:3b:ee:10:8c:a0:19:4c:6f:0a:c1:f5:
c7:27:f4:e2:6a:6d:2b:19:7d:c3:14:e9:c8:c4:ad:e4:0c:54:
1d:4e:d6:8b:f7:35:aa:92:38:73:93:ed:4c:79:25:16:84:03:
d6:6b:f0:11:a5:61:20:08:1b:bf:0b:c5:3b:39:40:d9:52:20:
74:b0:3f:70:94:1b:dd:b3:f4:2c:fb:b0:75:4d:e8:1c:db:24:
7c:6f:64:99:e2:92:e5:1c:57:33:8c:e4:c7:2e:f5:54:3e:60:
8c:b7:bb:81:95:23:b2:2c:90:59:9e:71:33:55:ef:68:d9:0a:
15:69:f6:0f:9f:09:0a:69:ce:6a:fd:80:d9:82:b4:64:72:8e:
04:2f:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:20 2025 by rpki-client