Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json)
Hash identifier: pb1ejPeBvmYrHqz+zmLAcG2TI0/Rgoy1IEvf67pgpBU=
Subject key identifier: F4:AE:BF:41:71:D9:0D:AA:96:9B:B7:22:30:72:DC:A4:5F:9B:5A:BD
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial: 0199FBEAF5FD18B8731D515C7B272FDCB30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
Manifest number: 0C3A
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (hash: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=)
2: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: 6LdONFDTF3PwYfn+WgXiToALE8o1ZCOf9agp2wH+YZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f5:fd:18:b8:73:1d:51:5c:7b:27:2f:dc:b3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=f4aebf4171d90daa969bb7223072dca45f9b5abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:0a:4d:b7:3f:1a:73:ff:3c:32:8a:ff:d2:
af:53:18:1a:ea:32:05:d1:1a:13:cd:7b:e9:1c:c4:
f0:db:cc:2c:12:0b:3e:4c:8a:01:35:9d:d4:05:da:
65:aa:9e:1a:7a:57:5a:32:2f:42:e8:69:17:73:c3:
f8:4c:bf:09:03:f2:4f:b3:6f:a4:cf:6a:71:d4:78:
44:b5:f3:1c:7e:1e:13:e1:51:5d:a2:b7:6c:89:00:
cf:ec:70:40:f0:5d:2a:00:02:3f:33:6d:4f:66:91:
fc:a4:90:97:9a:6c:b2:d0:f2:de:38:ec:72:4b:78:
88:52:8d:31:3d:2c:0c:5a:8b:77:7d:86:0b:15:b2:
fb:65:47:54:65:53:85:c9:bf:f8:30:0a:b0:89:79:
15:39:7f:a0:61:7c:3f:95:17:28:64:83:e6:be:8c:
34:eb:61:6e:2f:0f:a9:3c:6b:24:63:d8:49:ac:b9:
c9:02:ea:36:18:03:f3:3e:f2:da:88:47:f2:15:f0:
f0:0f:bf:70:38:62:5a:ee:df:bd:30:7c:c3:95:55:
64:1b:86:a6:0c:35:eb:90:4d:a5:53:7f:b6:ac:cb:
87:d9:c9:a1:2d:ab:09:04:56:ce:d7:47:cf:84:b6:
71:da:1f:91:3e:41:d1:42:ae:f5:a7:a9:cf:31:87:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AE:BF:41:71:D9:0D:AA:96:9B:B7:22:30:72:DC:A4:5F:9B:5A:BD
X509v3 Authority Key Identifier:
keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d6:42:0f:f9:46:43:67:ed:e8:e5:f4:8e:f6:3f:2a:93:02:
6e:83:33:40:a3:09:63:4b:60:9b:0c:b4:9d:28:14:cb:34:7f:
2c:a1:68:29:5e:c8:e6:d5:10:1c:96:fb:c2:5c:87:a4:e8:28:
43:59:ca:98:92:50:e5:34:9c:2f:2b:d6:01:c8:42:67:70:74:
f1:fd:41:3d:2b:d7:b7:68:87:06:4f:d1:a3:85:04:24:e4:d7:
8f:c7:3a:d0:9c:ce:10:da:16:3e:43:e3:36:88:ab:fc:ad:80:
2d:49:1f:ff:ce:5c:6f:b5:61:48:6b:4a:3d:e5:f0:6f:6c:21:
e9:b7:66:38:44:45:49:69:86:df:dd:cb:76:c8:98:7c:c5:42:
80:de:8d:74:19:ee:09:1e:07:81:a6:8b:80:13:60:e1:bd:e6:
4e:85:9c:ac:87:e4:24:62:b2:be:5d:49:4d:ff:84:9c:ea:77:
20:64:78:91:7f:80:69:8a:e1:e5:1a:1d:92:b5:00:f6:ca:11:
d5:c7:f6:ae:5c:08:1b:09:86:47:86:57:41:a4:41:00:2e:6d:
b9:59:1b:59:25:46:8a:d6:55:83:c5:a0:77:a4:12:bf:57:30:
fd:14:c4:01:19:bf:d8:5e:9a:2b:e1:9c:32:36:15:ad:c0:83:
98:62:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:27 2025 by rpki-client