Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier: sE6eLYeeyKFItIzUAcSg3vVIwHSDruN8QN0nt6PfFcQ=
Subject key identifier: 77:0B:16:37:3B:78:9E:4C:6B:CD:66:F9:54:E3:8C:D3:2D:C9:7B:23
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0199FFFE546A07223B84F5E4786D456A5FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number: 174F
Signing time: Mon 20 Oct 2025 05:01:21 +0000
Manifest this update: Mon 20 Oct 2025 05:01:21 +0000
Manifest next update: Tue 21 Oct 2025 05:01:21 +0000
Files and hashes: 1: 6cG7apJZWTaCYJhEQ2AxuGdOU6Y.roa (hash: JJCXT/6UNi9mEIWqA8v8nCsjcSMSSRjcc/zrEHMqmj0=)
2: 8SwD2syCQhmofhgov7byX9Itmmw.roa (hash: cUvCnHiFH7D4J+0OEABbyLy6H+sXz0JcuvR63cJNE18=)
3: 99na7wV0wOq68_7vIbCrL9gfxjs.roa (hash: 42LNXKEAxEwEc7Szkj0BiLf8pgpR4M/aL88CA0G+dmY=)
4: 9pMjaJdgappxiU1Tk0UMIRy3SNc.roa (hash: KKwO3btWZ5ddNVsSe6VCRqppaOicRKCDauf9ToA7uzQ=)
5: JHPfdmZ9_Y7nWvY0D-d0lDb96Vg.roa (hash: gf2XByKnGE8jJhVC4HR5cPA59ppt1RRzDD6FJs3YMQ0=)
6: epU58EjYpMtSgrUzd3xlkI9EhKU.roa (hash: d2WOVeDIsDjpX00onNi7gIPb75WWaXv2cOi5GanZkh8=)
7: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: WAkD6KVtITMD/gzbz1aFQbaiuw+5hIK5FdxY3WIzeb8=)
8: yQLwNsOUYQQrROj9xcqdYwuCAzU.roa (hash: kpuAC+lvUKqCtu+inJSLhxKtD/T6Q5sRwgQ2lRbAZSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:54:6a:07:22:3b:84:f5:e4:78:6d:45:6a:5f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Oct 20 05:01:21 2025 GMT
Not After : Oct 21 05:01:21 2025 GMT
Subject: CN=770b16373b789e4c6bcd66f954e38cd32dc97b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:3e:8e:1b:0d:bc:64:c2:69:72:85:ad:47:
17:56:91:d3:f2:5e:7c:d4:a3:60:26:85:cb:3b:4f:
41:19:94:e0:ce:f2:75:75:91:8e:88:57:6e:1e:aa:
72:e3:d2:62:57:e4:e5:2c:8c:d1:e8:82:67:85:93:
b5:03:ee:e8:a4:9e:31:06:5b:de:38:87:44:dd:9e:
10:55:18:7b:8e:dc:dc:87:3c:da:b5:7c:ed:35:7d:
bc:5b:61:4b:fd:c3:6e:94:bb:65:0d:1d:26:42:d5:
51:cf:96:e3:c5:43:31:0e:e5:f4:79:c3:47:96:65:
c4:9a:78:ad:f6:eb:f6:05:15:e9:7f:5d:b6:53:3d:
73:81:17:8d:e8:20:d5:2a:ff:7c:c6:c7:1f:e2:f1:
5b:76:81:73:87:97:fc:99:b2:d6:bf:58:57:ee:2a:
a3:d1:b1:ff:8f:d4:de:f7:40:6c:28:07:1f:af:df:
e8:2e:b8:9f:0a:10:61:fa:00:58:26:73:0f:b1:8f:
3f:74:35:16:52:36:73:01:8e:79:ae:bb:c9:30:76:
55:d3:59:6a:41:de:1c:8c:40:7b:5a:34:69:07:0a:
8b:b6:7a:24:80:09:a8:6a:df:24:86:1d:b7:32:2f:
36:94:33:9a:74:01:08:a2:e4:3e:f6:c6:f5:02:db:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:16:37:3B:78:9E:4C:6B:CD:66:F9:54:E3:8C:D3:2D:C9:7B:23
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:97:d9:e3:c4:33:89:26:b8:05:39:b7:3d:88:71:0b:75:b3:
81:5a:dc:69:65:89:d8:24:7e:be:ac:35:f0:7f:cd:5b:08:3a:
3a:49:2d:d4:7d:d9:dd:64:1a:a1:c5:f7:af:c1:ea:b2:e4:1e:
80:71:c4:6e:c5:93:2e:89:87:ac:b8:2e:a8:00:d1:9b:d3:d6:
01:a7:e8:e0:02:1a:66:ab:61:91:3a:f1:37:48:66:e0:4a:33:
87:e6:61:a1:77:02:c7:cb:b3:0e:fb:83:52:11:94:bd:73:9f:
f7:b9:2b:2e:7f:7e:25:30:84:3e:b5:24:da:e2:4c:6e:3f:b8:
31:31:2f:13:67:a5:23:ec:90:ca:86:8e:38:a0:38:78:ef:9c:
e8:95:2f:e5:f9:8c:9f:f3:10:e7:45:5f:f4:ee:7e:e9:6c:ad:
3f:ae:89:4e:80:ef:ca:fb:5d:64:74:76:75:63:22:47:74:c4:
31:cd:fd:99:5f:dd:f5:b0:29:7c:ef:6b:e1:cf:f3:2a:39:64:
1e:e3:35:7b:08:94:75:c7:57:3a:8d:4e:fa:74:7d:cd:77:05:
ea:d2:af:c9:1f:d3:8e:fb:1a:b5:8b:f6:4d:a8:8b:fd:a6:8a:
3c:0d:a8:b7:e2:c6:fe:4a:08:14:b7:01:c0:58:59:48:d8:88:
25:db:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:44 2025 by rpki-client