Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
File: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json)
Hash identifier: UFltewLkzBN+Rx32TXOnusorwPcuUDB6/wZ/z2NkPrw=
Subject key identifier: 70:E5:6B:F4:11:3D:F6:E6:52:D2:4D:57:61:16:3F:B3:F9:92:11:ED
Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
Certificate issuer: /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Certificate serial: 0199FD34836283E46B08EB9FA92889382278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: B55olrHbBjn+RRHO0cJRqYrRkMk5lRZ4TIHROLOE0ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:83:62:83:e4:6b:08:eb:9f:a9:28:89:38:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=70e56bf4113df6e652d24d5761163fb3f99211ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:d1:de:91:b4:00:97:82:02:5b:55:ee:1f:
a9:c9:8f:a4:bb:82:15:95:55:22:89:2d:85:72:6a:
bc:00:13:2c:bb:04:e3:5a:6e:c3:c4:4b:74:2c:e0:
27:44:e1:ff:f2:77:28:39:d6:8f:45:f0:76:2f:ca:
6c:a6:c6:4e:06:44:5b:6d:40:e7:71:6d:ae:63:23:
18:87:90:65:b1:93:9d:6b:c9:b3:44:1b:a4:51:a1:
06:01:19:99:36:60:c3:2d:e7:36:b4:1e:f3:2a:80:
bc:a8:02:48:16:48:db:e5:ae:d0:82:5e:ab:85:cd:
b8:7f:9c:c9:38:83:04:0b:38:74:b2:73:09:4c:ae:
ba:b6:c1:07:50:d3:83:c1:e8:fe:c8:15:fe:26:72:
b2:be:58:a3:87:e3:a4:56:50:74:17:7e:ee:c4:54:
a0:d3:e2:39:6b:af:48:3d:60:02:27:68:3c:77:02:
11:1f:f8:fc:c3:45:ef:79:c0:d3:93:b9:94:03:c2:
8d:9f:85:e6:a2:2d:81:06:a5:aa:10:66:36:e2:74:
06:5f:ab:e3:16:b8:77:c4:43:32:23:d1:37:54:5c:
ee:c3:70:1b:5e:f5:6a:b6:da:9c:2e:06:b4:a1:70:
5c:b1:9c:02:9c:d3:38:b6:b6:5d:a1:2e:76:67:11:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E5:6B:F4:11:3D:F6:E6:52:D2:4D:57:61:16:3F:B3:F9:92:11:ED
X509v3 Authority Key Identifier:
keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:02:c7:05:08:4f:17:b3:28:e7:e7:23:84:27:b0:70:a2:97:
d5:c4:29:25:d1:f2:f2:7e:0e:91:ec:76:58:d8:cc:71:30:82:
be:eb:36:7a:8e:3a:39:76:da:29:99:45:8b:72:bc:5d:9f:c3:
12:9f:d8:1a:82:a3:85:19:3a:9e:12:a8:a5:35:14:79:67:a6:
b2:8f:ca:5f:87:80:77:2e:81:54:8d:0e:7c:87:55:58:74:ea:
e0:fa:3d:8d:74:d2:ce:6a:6e:d8:88:07:81:86:db:cd:37:5b:
5b:79:c4:f6:e5:c9:aa:1f:4b:c9:34:8c:f3:83:e0:a1:ec:33:
81:4c:0b:89:b3:76:c7:63:9e:1d:6b:ec:b3:b7:7f:73:81:bc:
e5:36:21:7d:72:7f:b3:f9:1a:c7:74:ad:f4:c5:77:75:4c:8b:
f6:72:dd:6a:b4:85:9d:47:c5:de:d7:4b:d5:d5:de:bf:d9:d8:
f2:5f:73:21:0e:8d:69:a1:14:78:a6:ee:81:b5:26:ff:e0:08:
f9:f8:95:a1:af:31:8a:fd:8e:70:e0:40:03:ad:20:f5:db:36:
51:5e:12:1c:1f:8a:52:32:17:28:e5:de:de:74:dd:df:4b:c7:
14:ad:2d:17:62:e8:db:e9:42:7c:be:33:9d:e4:17:2b:00:b5:
66:19:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:41 2025 by rpki-client