Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File: mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier: r3GOqVLAqkivro0K5VDvswo0jF1mD+MxbWzsO1JC8tE=
Subject key identifier: 4B:EC:96:FB:40:0C:F8:81:61:31:D3:F9:07:E0:23:EA:9C:AF:A3:9D
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 019A0035466CBF137BBF7F2740E9A7FFEC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number: 0C71
Signing time: Mon 20 Oct 2025 06:01:22 +0000
Manifest this update: Mon 20 Oct 2025 06:01:22 +0000
Manifest next update: Tue 21 Oct 2025 06:01:22 +0000
Files and hashes: 1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=)
2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=)
3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=)
4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: q9PUFQgN/Lnr+VNPtypr92zTp3ICJ205a6qicjxHS9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:46:6c:bf:13:7b:bf:7f:27:40:e9:a7:ff:ec:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Oct 20 06:01:22 2025 GMT
Not After : Oct 21 06:01:22 2025 GMT
Subject: CN=4bec96fb400cf8816131d3f907e023ea9cafa39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:f4:c3:95:96:51:e2:a5:4e:ff:5f:26:7e:
3d:ed:60:57:00:ef:b8:e4:1a:14:78:57:26:ec:63:
d8:c9:ab:ad:b7:bf:00:e3:fa:88:58:92:69:75:84:
77:e7:67:76:07:9c:cb:7f:22:d8:c1:62:5d:90:5c:
1a:51:c9:6d:f3:b4:31:2e:21:84:e6:21:9b:f5:56:
b0:f8:c4:dd:a6:76:70:89:29:33:d2:df:2a:a4:f3:
65:41:6c:10:f2:07:c4:bb:9a:b3:b5:77:df:3f:33:
05:a8:3a:f2:07:e0:30:a7:fa:b2:1e:7d:4d:d4:96:
87:36:7f:c4:86:63:df:c6:a0:d8:8b:c4:00:26:8a:
12:c9:bb:41:33:3d:b0:f2:ec:3d:21:57:8f:77:96:
f7:9e:1f:53:25:32:3c:5e:c8:36:dc:90:8a:1e:54:
33:ed:02:7e:5f:bd:b7:54:6c:2a:75:0b:d2:84:10:
36:d4:7b:e4:f0:f1:9a:77:f5:54:ac:d9:16:7e:b3:
90:03:26:71:33:ec:56:5b:bf:9c:48:89:fd:3c:d5:
d9:f6:40:e7:87:d9:94:b4:19:63:34:2a:df:4c:0b:
94:4a:44:6b:58:97:1f:52:0c:95:1c:cd:1d:c4:a5:
b3:73:04:a4:42:54:65:ec:12:96:df:69:14:05:b0:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:96:FB:40:0C:F8:81:61:31:D3:F9:07:E0:23:EA:9C:AF:A3:9D
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:22:1b:fc:a1:3d:bd:09:92:1a:b1:d6:2a:22:22:91:18:8b:
19:c2:8e:1f:5d:e0:99:97:50:f2:f0:74:81:b4:1f:c6:ef:c7:
63:1f:2f:f6:90:ff:84:b5:cc:33:3e:d9:cc:56:cd:90:2d:83:
9b:9e:da:15:52:1e:41:b7:c6:82:60:05:ca:ed:86:95:64:60:
53:e6:aa:d3:27:05:73:31:2d:2d:bd:4b:0e:07:96:49:26:95:
ac:07:83:ec:cf:2e:17:49:8b:ee:52:c2:71:12:03:ec:31:ff:
dc:ed:60:6f:9a:14:d2:86:c1:89:26:25:4b:74:3a:d1:d2:e9:
f4:01:d1:f0:da:39:7e:44:ee:4b:d9:8c:04:f2:e4:d4:21:88:
bf:e3:08:ec:a7:01:5a:82:30:4a:f3:2c:86:29:3f:54:af:f2:
af:9b:04:cf:93:a9:78:bb:3a:4a:28:d6:ad:db:e4:5f:fd:21:
cf:93:93:05:de:01:df:a0:60:97:d5:b9:61:14:35:74:99:fc:
de:73:e1:84:ab:d7:3d:db:de:8a:54:13:3f:90:18:2b:73:e9:
07:0c:b6:b7:24:0d:b9:70:a9:2a:b4:d5:0d:77:34:8e:a1:ce:
eb:2e:54:ba:6d:87:06:da:5e:96:a7:e3:14:c8:aa:8f:0a:43:
43:7f:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:13 2025 by rpki-client