Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: seQuiSLRaBXSkMSNc+oWtXF7xVtwtY7Q+FbzaUVG4bM=
Subject key identifier: 65:1A:EA:7D:FB:9D:4D:13:B3:40:CF:96:63:41:D1:7A:BC:74:2D:D2
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 0199FDD922651DA162E9D45D8C9DC4C8CF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 128F
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: ZGrcpUqsEOsf7o6fu8OWpNq4gNY.roa (hash: wpQNPwvek3Rp2M6cV1DD/Iu66bw6RcokC6IaW3yHq/w=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: V/aZyXR5cwli9QMN1ormP/Cgbh7zj33eUtIKul5nPa4=)
3: gdtLNhs1JQCPzai-VNs9JYZHoWI.roa (hash: ZjSEtnU3HKrgHwmUc/jOdFVfQULcq2id5Yk1K05ZWWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:22:65:1d:a1:62:e9:d4:5d:8c:9d:c4:c8:cf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=651aea7dfb9d4d13b340cf966341d17abc742dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:05:28:34:8e:94:c9:04:db:23:13:87:55:
34:7e:ab:0f:3b:2b:08:6a:73:9c:e2:31:54:06:95:
83:52:15:19:1a:d1:4a:99:5e:82:7c:f4:8e:7a:5b:
93:08:57:8d:43:06:51:fb:b6:14:e6:33:87:9c:51:
8c:3a:84:82:c2:ec:95:3e:40:ac:cf:5a:c9:6a:81:
51:3e:99:22:e6:0c:09:3c:ce:91:21:d9:71:de:c0:
29:f0:95:6f:70:1b:03:97:50:c0:2e:dd:8a:7a:08:
46:0e:96:ff:66:27:78:a5:96:7c:93:1e:94:ec:9f:
2a:87:11:f8:80:2b:73:f5:9b:98:d2:5b:dc:2b:69:
85:21:7a:be:7b:e6:39:d6:46:1c:07:80:0f:36:39:
b0:eb:57:b3:8a:59:22:24:58:61:9a:59:27:65:b3:
b7:fc:e6:14:95:88:b8:2f:28:a1:48:f6:c9:59:36:
5f:d2:f7:e0:18:7b:56:2d:14:20:42:f6:53:79:68:
aa:c6:06:8a:1e:af:c0:d3:77:f2:d0:3e:64:a5:ff:
19:4b:37:ac:6c:23:8c:19:f4:6a:6d:67:c5:d5:19:
b1:92:8a:bf:4a:79:69:b3:50:56:9f:d1:de:2d:68:
7f:fa:d0:bc:45:b6:6a:e6:45:2f:32:a3:f4:7c:9a:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1A:EA:7D:FB:9D:4D:13:B3:40:CF:96:63:41:D1:7A:BC:74:2D:D2
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1b:8b:fc:b6:e7:53:94:14:08:a8:4b:11:de:fe:96:bf:c1:
8b:89:ac:2f:63:5e:07:dd:e4:a6:0e:0a:e2:a5:ab:28:61:d7:
29:fe:7e:8b:fd:6f:98:fa:fa:9f:33:56:7c:11:de:de:1c:6e:
fd:b5:9a:41:64:c3:43:95:ed:63:29:f2:0d:6f:2d:f0:58:2b:
70:86:42:6b:1d:fc:ea:58:e4:38:de:f8:39:57:99:d3:f2:da:
87:1a:7c:ba:b6:2d:b3:15:af:53:4e:70:0a:a9:ea:b4:98:cc:
f8:04:27:77:86:d3:ea:29:e6:22:63:d7:22:1f:6b:91:d7:00:
7f:d9:8f:c1:ab:01:7c:46:33:4d:63:68:3a:ad:e9:d9:6a:eb:
4b:2c:f5:10:16:4f:28:2d:98:5a:67:12:73:bc:7a:50:f2:0d:
fc:c6:98:d8:bd:d6:d2:4b:44:e6:24:e8:fa:b6:f6:02:b4:91:
a1:d4:ed:f2:6d:e4:e7:a8:95:73:29:ea:d0:14:90:d8:7d:70:
8e:fe:e5:8a:a1:68:1b:9b:79:ca:f3:c0:bb:b2:9d:70:ae:8b:
86:df:45:4d:04:bb:2a:9d:76:25:eb:db:88:69:f0:9d:0e:c3:
4a:68:4b:7f:0d:47:45:35:e8:95:f2:76:0a:b1:6c:c4:32:51:
39:2c:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:21 2025 by rpki-client