Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier: svnvaApce1/CgeMW30j3+0BpzIDlpN/n9JMRrhF3G7g=
Subject key identifier: 23:83:58:9B:15:42:16:10:7B:65:21:EF:04:34:93:32:C8:16:6A:A0
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 0199FE0FDD8C1DA03E7BF30191B7BFCFC4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 20:01:16 +0000
Manifest this update: Sun 19 Oct 2025 20:01:16 +0000
Manifest next update: Mon 20 Oct 2025 20:01:16 +0000
Files and hashes: 1: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (hash: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=)
2: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (hash: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=)
3: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: bdcwAVne79YW11A5OzcUwiNX35cPpEA0O51Y079NoXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:dd:8c:1d:a0:3e:7b:f3:01:91:b7:bf:cf:c4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: Oct 19 20:01:16 2025 GMT
Not After : Oct 20 20:01:16 2025 GMT
Subject: CN=2383589b154216107b6521ef04349332c8166aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:c6:be:cd:1c:a9:b3:c3:da:8d:96:21:77:
2d:ef:24:fb:cf:d8:a0:da:78:5d:05:28:a8:09:07:
62:96:1c:56:17:d4:f2:b7:13:6c:bd:eb:8f:d8:aa:
6a:f2:88:bd:6d:c8:5d:b2:85:69:83:f5:23:f6:f4:
85:a7:ca:99:0e:71:8e:0a:17:bb:47:bf:01:e6:a1:
97:7e:0b:09:ea:66:43:02:59:85:20:64:8a:58:e7:
97:aa:f1:1c:ea:17:d6:9b:d2:98:3b:2e:61:b1:49:
e6:e9:3e:fb:aa:1a:9c:97:65:fa:1e:8f:e4:74:6f:
83:a1:d3:ca:5d:06:5f:de:80:ba:05:91:6e:fc:3e:
44:fe:fd:42:a0:a2:8f:d9:df:d2:b2:af:2c:8a:6f:
1b:2c:7f:a7:9a:31:9c:c9:79:22:ae:cc:65:6f:05:
11:36:a9:22:67:bc:1d:b3:a7:b8:4e:c8:a3:de:47:
44:1f:bb:b2:2d:08:9e:18:ae:22:ac:14:f6:fa:d9:
67:c9:1b:a5:bf:79:a7:13:20:54:44:78:e9:ef:cd:
eb:93:07:85:d5:f7:24:8c:50:47:0f:4e:0d:1e:4a:
89:c3:5d:46:e6:90:63:b5:9a:f7:61:7e:cf:1c:43:
6f:3b:4b:88:37:e3:8a:6c:e9:29:e6:6d:f0:8c:68:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:58:9B:15:42:16:10:7B:65:21:EF:04:34:93:32:C8:16:6A:A0
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d0:c7:e9:5a:57:ba:4e:02:0c:e0:18:c1:42:38:e1:8a:02:
b7:94:46:1a:e5:b5:49:f9:98:e6:23:1e:ac:62:6d:aa:7f:87:
4f:de:f2:6a:59:93:99:4a:a7:94:84:14:45:43:28:fa:21:ed:
66:a0:d0:2f:d8:2e:25:0e:6e:51:ff:71:b3:99:98:15:5b:2a:
f1:7b:77:4e:87:53:42:a1:0f:43:2e:7f:b6:19:2b:59:6b:34:
38:ee:cb:24:3c:cd:a4:72:43:06:a6:30:64:0e:74:14:25:c5:
e8:55:db:b6:95:b7:8a:8c:bc:0b:7c:8a:7f:b8:2d:9f:1e:04:
71:53:68:00:c3:4b:c4:7a:00:a4:41:b2:86:28:75:32:8c:62:
db:e1:16:d4:8b:e6:57:5d:ef:a3:d0:32:ba:2f:d9:58:0d:9a:
df:a9:3f:10:2d:75:da:36:6d:bf:b9:48:e5:b2:d5:d5:5f:40:
a7:1f:fc:56:cc:16:a4:1c:af:77:f1:73:6e:0a:79:a0:ed:53:
7f:b6:76:9a:b2:36:79:73:7c:dc:30:2f:02:1f:eb:27:5d:48:
b8:7d:4f:bb:77:9d:dd:3a:db:ab:a9:06:93:47:22:45:e9:79:
54:64:dd:21:8a:e5:6a:d8:e2:13:2c:9a:8e:b1:00:35:6c:c5:
c1:b5:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:04 2025 by rpki-client