Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: UK+VYh4EjMpZTrjK6K3FC3fsyoCas0ATQa/uisgpTF4=
Subject key identifier: FC:D1:26:41:AE:7D:44:D6:B5:D2:D7:38:D0:F1:61:AF:C5:01:CC:7B
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 0199FD340F912CC7CABC90B7FD25267C46F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 141A
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: mPT36A59xiECq8gquPbths15mN9QqvrtjVTl6z8GrMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0f:91:2c:c7:ca:bc:90:b7:fd:25:26:7c:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=fcd12641ae7d44d6b5d2d738d0f161afc501cc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:d4:38:7c:af:fa:a8:84:a3:da:9f:e1:80:
77:ce:2f:ec:2c:06:bc:6f:5d:21:b0:88:3c:38:fe:
21:bf:70:86:bd:a4:0d:8b:de:ff:90:50:fa:70:b2:
36:d7:38:42:22:a1:41:37:c1:4c:83:bf:91:58:8b:
35:3e:35:00:10:35:c1:7a:db:7e:cd:dc:c7:7a:e5:
34:47:2a:7d:4f:e4:14:3d:87:7e:83:5f:d7:7c:f0:
d6:4f:19:cb:73:9f:46:11:d5:e3:1b:08:83:ea:7d:
d8:44:39:da:30:48:a3:b8:f6:9c:9d:b7:31:64:00:
ae:42:67:db:a0:dc:84:26:69:9b:d3:18:f6:b1:f0:
e5:9a:3e:f2:56:70:6a:2c:3b:21:02:55:7f:d0:2e:
54:9a:47:6c:1f:fa:3d:d8:70:ca:3b:92:c5:03:4f:
d0:eb:46:5e:16:20:d4:ff:78:15:b8:d2:f1:be:83:
4a:fb:9a:92:45:2c:9a:dc:3c:07:d3:67:9a:62:21:
a0:b1:c1:2a:67:85:0f:39:ec:a9:ae:a5:d4:5d:f5:
9c:90:19:2a:5d:0a:79:e8:5a:16:47:0d:5f:e5:5d:
2c:b6:9c:09:5b:e4:cf:6f:56:cd:44:a1:61:eb:e8:
77:68:b4:e7:20:04:32:bc:00:5e:d1:a0:fd:93:a5:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D1:26:41:AE:7D:44:D6:B5:D2:D7:38:D0:F1:61:AF:C5:01:CC:7B
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b8:c0:b5:28:fe:4a:39:c8:db:5e:52:9f:dc:a7:8a:08:0e:
5d:0d:cb:52:0b:57:0a:4e:c3:b5:0d:73:e3:be:4c:d8:7e:df:
e0:9a:4b:08:6c:7a:20:b0:db:5c:ae:8b:6e:74:d8:0e:8c:49:
d6:d3:28:0b:b8:89:84:a6:e8:4b:0a:9e:80:ae:ca:45:56:72:
17:7c:0c:bc:f6:8d:af:ac:2e:bc:ed:d4:47:38:91:71:46:0d:
64:d5:94:07:b8:91:91:67:bb:cc:d3:62:3d:a1:2f:b8:ca:0e:
2d:5a:4d:2a:54:16:e0:23:22:44:94:df:23:ea:70:0a:d1:25:
8c:09:ba:17:a9:d4:43:73:6a:86:9e:f5:86:4a:92:fb:a1:36:
de:21:26:04:04:b0:66:9b:63:0c:86:a7:18:47:43:d3:b9:f9:
65:b9:eb:da:44:8e:1a:0c:6d:e3:67:92:4a:01:79:58:4d:41:
0d:41:ac:8c:8d:9b:fa:1c:82:7b:6f:94:51:7b:24:e1:a2:9a:
3a:55:3f:fc:0f:18:0e:8a:9b:fc:e7:43:bf:1a:d7:fd:ff:da:
d5:cd:7a:3d:98:e5:1c:02:b6:35:5f:57:8c:b7:f0:3e:09:ff:
d8:6d:44:2c:f9:07:16:74:f6:7b:1c:c7:c3:16:75:2d:c1:69:
d4:9e:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:02 2025 by rpki-client