Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File: Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier: FYvrli4SBU6hshxinXUekqG5pIfw0V/zP9HZr4kLfTE=
Subject key identifier: 8E:79:89:35:62:80:29:D4:97:FD:48:64:AB:5C:34:C6:2A:B0:89:AC
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer: /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial: 0199FCC6A1E9C6098C99B6CF809FE82DBE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 14:01:39 +0000
Manifest this update: Sun 19 Oct 2025 14:01:39 +0000
Manifest next update: Mon 20 Oct 2025 14:01:39 +0000
Files and hashes: 1: 1-Jd_qc8apOR4p6laQN0XEPGV69E.roa (hash: GOoNb/QIaZMGL6bF2qxv1TbNPoQ9D5q5E8h1u/bWgGs=)
2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: YSaumB6J7PyaMZX+c0z+E1znfLxvJOFeE+hNjZpZezo=)
3: mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa (hash: li78OcXCZpUgKLA0YsVNzvnIFn5UmiFLcC5dihhrvhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a1:e9:c6:09:8c:99:b6:cf:80:9f:e8:2d:be:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Validity
Not Before: Oct 19 14:01:39 2025 GMT
Not After : Oct 20 14:01:39 2025 GMT
Subject: CN=8e798935628029d497fd4864ab5c34c62ab089ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:d6:1a:7e:e5:dc:ac:08:ed:e3:fe:48:10:
79:33:64:06:07:58:8f:0a:62:53:97:60:5d:35:3a:
da:46:63:e1:5f:c3:50:e4:8c:2d:e3:0f:dc:0a:fc:
55:80:87:22:78:e1:70:19:2e:ba:3c:b6:48:a3:8d:
83:8f:92:2a:85:df:23:9a:a5:28:e9:58:50:b8:80:
1e:bc:f5:b0:52:d1:ab:36:ad:19:1b:46:2e:40:dd:
60:41:c0:db:22:ac:56:c0:38:eb:91:d3:c3:06:76:
c4:7e:7f:f8:8c:e0:2d:c4:10:aa:3a:12:92:e4:6f:
79:5d:11:c3:bd:ac:26:71:59:1d:2c:40:02:6c:a6:
3b:68:1e:b3:2c:0e:11:34:48:95:d2:19:53:b6:f3:
e1:8a:79:30:e4:6c:bc:66:5e:c5:7f:39:ba:22:96:
52:dc:67:e5:23:15:a3:f9:f6:7b:ab:be:d3:96:1f:
4d:62:c5:64:8c:2e:c9:3d:a0:30:2e:88:33:14:b8:
53:14:db:f1:37:71:4d:97:f4:a4:13:7c:4a:aa:56:
00:4d:2c:59:89:4e:9b:57:de:f8:43:d9:1c:1d:5c:
fa:7a:61:5f:cb:d4:00:22:52:0e:9e:3c:71:77:9a:
80:75:99:64:cc:62:a9:90:25:85:b4:26:1d:9d:53:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:79:89:35:62:80:29:D4:97:FD:48:64:AB:5C:34:C6:2A:B0:89:AC
X509v3 Authority Key Identifier:
keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:94:74:92:66:62:c3:90:86:0b:9c:09:6d:b6:b0:f5:b0:95:
cb:4c:a7:e6:68:09:87:fe:30:05:e0:fb:24:4b:10:c8:16:55:
d7:f4:78:3b:05:46:8a:fc:1a:48:c5:d0:1c:6f:e7:77:65:93:
9c:fa:ac:b5:62:43:a0:79:3f:f0:7d:2c:ea:63:b2:1b:8f:9f:
00:94:6d:81:aa:d7:13:ff:79:8d:68:58:93:13:67:9b:af:68:
f8:be:a3:b8:35:0a:d1:18:2f:86:51:59:cd:df:e2:fc:2c:cf:
e0:4f:1b:db:a8:82:98:e6:c6:7a:b3:d0:a1:2a:9a:26:3a:1e:
f8:8d:05:24:14:f0:8f:98:de:14:63:69:1d:30:50:c9:43:27:
60:70:57:e9:5c:52:6f:7e:94:16:2f:fb:95:17:c4:de:84:71:
1e:a8:6e:a2:6e:0a:41:c7:5f:59:69:97:90:a8:44:d4:1f:54:
55:30:07:fd:1d:b6:df:4d:13:70:d0:70:87:9b:60:a8:bf:fc:
74:9c:75:7b:3e:7d:e7:a6:01:98:fb:cc:6c:99:8c:01:83:21:
59:14:18:cc:e7:93:5c:06:57:80:63:91:68:07:27:a4:d7:ab:
4f:19:ea:bb:59:45:94:7f:8b:8c:e9:e8:2f:4c:cc:c9:18:ee:
f7:16:9f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:05 2025 by rpki-client