Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
File: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft (raw, json)
Hash identifier: E6MYwn4eU2pIe4Od9AkB+JlIw7BUR/EH6RUwDl2unVM=
Subject key identifier: 95:C4:F5:DD:C3:AC:15:D3:46:1A:DA:F9:47:D9:80:DC:05:DF:F5:17
Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
Certificate issuer: /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Certificate serial: 0199FFC8917870011005CD629EAC34164DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
Manifest number: 16EC
Signing time: Mon 20 Oct 2025 04:02:38 +0000
Manifest this update: Mon 20 Oct 2025 04:02:38 +0000
Manifest next update: Tue 21 Oct 2025 04:02:38 +0000
Files and hashes: 1: OpPpxUjjJRbQSkZ5yK3fu3iEhS4.roa (hash: APIMRZhycs7ZGgKvvm0YHWiJuJg7Ia1Dh+8uoSTLKNA=)
2: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl (hash: DEH4bX5Vd5FXbC6xGiHtd1Wz8dVNIP8bSrFryFU4M6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:91:78:70:01:10:05:cd:62:9e:ac:34:16:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Validity
Not Before: Oct 20 04:02:38 2025 GMT
Not After : Oct 21 04:02:38 2025 GMT
Subject: CN=95c4f5ddc3ac15d3461adaf947d980dc05dff517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:47:21:f3:2a:4d:9c:dc:bd:7c:45:e8:1c:
b1:0b:cb:6f:be:78:3b:a6:2b:c8:58:f5:60:d6:c8:
15:e4:44:5a:24:59:5e:08:7d:9a:6f:8e:c4:3a:f2:
03:a4:6a:74:2b:20:e5:37:9d:fc:95:b6:2a:8c:7a:
f9:34:20:94:64:8a:45:d8:9a:6a:aa:66:31:43:ae:
e5:a3:5e:0c:21:17:8b:98:ce:19:84:30:60:09:62:
94:b9:8a:bd:3c:3d:48:e0:3d:2c:3e:27:b1:12:ac:
09:43:c4:2e:8b:7e:05:c6:9b:05:36:ad:c8:e0:f0:
e9:5d:0e:27:2c:c5:cf:a5:f5:96:02:88:34:57:18:
20:88:08:bc:c6:7f:05:23:f3:b1:a3:95:06:7d:d2:
22:e5:cd:33:d4:ca:da:d6:bb:d3:58:5e:4b:8a:aa:
ad:1b:8d:18:ca:02:5b:ed:ad:f6:25:48:19:c5:d7:
4f:78:17:db:7f:ed:2a:78:cb:b5:b1:9e:23:43:12:
44:9d:98:6e:3d:89:29:2c:08:45:9f:b3:e2:de:21:
53:d3:c8:71:0e:9b:a7:b4:2b:d8:fb:17:51:cc:d7:
99:56:5c:27:a5:ee:b2:36:32:69:de:7d:ea:8f:61:
39:1a:15:29:d3:07:fa:84:3a:c9:76:f9:86:d7:b1:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:F5:DD:C3:AC:15:D3:46:1A:DA:F9:47:D9:80:DC:05:DF:F5:17
X509v3 Authority Key Identifier:
keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ee:b1:df:14:3e:ea:86:15:80:7e:ab:a4:35:79:81:11:8f:
29:a3:40:8a:7a:9f:c9:7a:37:a0:f6:df:47:cd:91:34:24:15:
32:ff:88:c8:ea:29:08:ed:ed:72:0d:3f:bc:39:21:f0:06:d3:
c1:b6:ca:b3:55:7d:3f:ce:c0:61:d0:0b:a4:4e:7a:a2:f6:ea:
e4:25:2c:f7:12:84:a4:5e:18:e4:be:89:06:94:55:f7:94:a8:
14:e7:6e:8d:a3:08:4e:5a:4c:ce:03:26:97:81:f0:6b:3a:55:
45:44:c1:d9:f0:77:ca:48:63:eb:7c:a7:c5:d2:14:94:00:ce:
44:02:44:9f:78:2c:a1:e2:6c:df:56:18:1e:25:e5:0f:ec:33:
75:62:3e:33:74:b4:ea:26:55:77:32:98:68:40:8c:5d:cb:58:
4c:af:48:dd:d9:ec:9a:ce:3d:65:30:b5:7b:cb:f3:c3:65:d6:
03:2b:08:50:bb:8e:2e:ac:0a:28:ce:af:02:ce:29:2f:8e:9f:
c9:7b:aa:0d:ef:a7:94:27:19:35:e7:32:50:c0:79:59:e8:02:
3b:aa:bb:ed:d8:cf:7c:06:ed:34:72:ad:45:cd:51:cf:7f:86:
55:d9:5f:2d:e7:46:bd:dd:06:00:7c:35:8e:28:9f:cb:12:9a:
26:95:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:55 2025 by rpki-client