Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: Jbhjb8M6wyEpXJYmoHHIfp2y6trRmKUBY4rriJcnrUI=
Subject key identifier: 98:33:8D:B6:1D:DA:8E:1D:DF:0B:26:01:86:43:E4:EC:B5:4B:D7:A7
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0199FB0F27EE4FFAEED1348ABEAE171616F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 06:01:38 +0000
Manifest this update: Sun 19 Oct 2025 06:01:38 +0000
Manifest next update: Mon 20 Oct 2025 06:01:38 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: PasLfwXc13sAwLQlGdFsiSUC8Kv0vV0dL8TuMYCkHkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:27:ee:4f:fa:ee:d1:34:8a:be:ae:17:16:16:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Oct 19 06:01:38 2025 GMT
Not After : Oct 20 06:01:38 2025 GMT
Subject: CN=98338db61dda8e1ddf0b26018643e4ecb54bd7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:10:5c:9c:42:14:6b:30:2e:2f:07:6e:2f:
ef:41:45:16:6a:1c:14:75:be:74:98:2a:b9:78:28:
52:a0:44:eb:36:13:22:34:14:3d:5a:51:2e:39:b8:
2c:61:fa:ad:08:43:c9:b9:1e:59:14:ba:be:cf:a6:
a7:c1:a6:0e:05:33:91:d5:d2:31:4d:b3:28:83:cb:
fe:e7:d0:d6:9a:4b:34:b9:e0:6f:12:36:6a:df:52:
5b:87:1f:5f:6d:c7:c2:73:42:62:b4:32:cd:6f:7b:
9e:1f:d8:a9:b6:c6:f3:2b:50:88:f1:c1:b7:fc:5b:
85:89:9e:00:66:27:0f:22:ba:be:5c:64:1e:e7:bc:
bc:55:47:a1:f3:25:2d:56:a1:90:9a:c6:b1:fa:10:
cf:98:f5:d6:91:f4:60:81:75:82:10:63:4b:22:b5:
5d:e1:97:c6:26:91:b9:9a:a9:8e:9d:bb:30:14:e8:
9c:03:cf:0e:c5:6f:94:97:37:b8:88:a6:d9:c5:44:
81:b0:cf:5c:8e:a9:4e:9b:56:af:b1:6e:27:a9:8e:
d4:99:6d:11:66:8b:2e:80:62:df:44:78:26:29:5d:
a9:52:d0:3d:b7:a1:6c:91:fd:fc:98:43:fb:92:1b:
65:fe:2e:96:2b:f6:f5:47:8e:92:fb:fb:de:38:47:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:33:8D:B6:1D:DA:8E:1D:DF:0B:26:01:86:43:E4:EC:B5:4B:D7:A7
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fb:95:e2:c8:03:e7:e1:68:9d:cb:0e:33:11:45:29:f1:2b:
25:cf:7f:75:2b:16:2d:80:12:dc:f3:f5:96:56:fd:cc:0a:50:
df:b1:d9:05:9b:0d:a9:8d:da:39:a8:82:4b:71:fd:e7:ff:ac:
a8:86:ca:e8:de:d9:10:f9:74:3f:57:38:54:c8:15:49:08:83:
6a:17:7e:ac:9c:4c:3b:f8:4e:18:f1:1a:c2:fa:44:9c:c6:f4:
3b:93:82:11:b8:77:8b:9f:1d:7e:e1:19:53:10:9d:8a:d1:e6:
63:ac:24:ea:0f:de:2e:f2:2c:0c:48:7a:58:57:fd:e2:92:41:
66:48:f5:af:28:c9:2a:19:05:05:53:3f:35:11:68:a0:65:e1:
6f:09:34:75:ea:82:09:9b:63:65:bf:bf:35:53:61:81:2c:56:
60:81:08:46:7f:8b:5d:d4:b7:51:ea:22:b0:0d:bc:36:1f:09:
41:59:21:89:e0:93:45:fd:9c:f4:2b:39:2f:cc:dd:05:eb:7f:
00:93:16:ea:32:e8:9e:22:a5:7e:e0:79:31:a4:9b:44:be:70:
53:e7:4b:eb:25:c0:10:73:7a:44:d6:6f:3b:99:d0:e7:35:00:
f8:ad:70:ae:2c:41:f0:b7:af:c1:0e:63:e3:cf:32:05:85:ff:
49:1f:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:30 2025 by rpki-client