
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: pSP62fgEV1jumZqsd1Lz++6ZfMQ9Nq2UPeM26TnV2lk=
Subject key identifier: 64:CC:CD:F3:66:3F:DB:FA:B9:C1:16:7D:28:5B:A5:63:15:6D:07:11
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 0199FB46025AD3A1635DEEC57E2316FA5349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: SCRXcSRLlbwSAXPQ0t2vCqNKAlv7MuloSEJxs7RouHk=)
3: tYbAWeHoGjW4_0OkM4yMqFJOybI.roa (hash: htZo5UqGGeI3toMrh3D8Z6/VXgbSZywSkH3LLl1S9Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:02:5a:d3:a1:63:5d:ee:c5:7e:23:16:fa:53:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=64cccdf3663fdbfab9c1167d285ba563156d0711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:2d:51:ab:d1:4e:0f:82:4d:5e:4a:30:22:
2a:c3:05:47:62:b3:61:ef:fb:74:1f:0a:fb:72:49:
3c:a3:6b:ce:bb:bf:46:13:49:8c:25:2e:55:ed:48:
b9:32:27:0e:63:39:7a:a9:e3:dd:28:a3:e5:e4:da:
56:69:4a:e6:74:41:00:e5:64:ba:45:5c:28:9d:94:
33:66:c9:b2:49:1f:c0:13:35:a9:b2:c6:cd:22:7d:
95:38:1e:78:1f:14:c5:ff:e2:c0:db:29:9d:40:07:
e2:65:a6:e0:36:90:cd:a1:2f:06:c1:9f:09:25:dd:
be:cf:d0:bf:6c:5d:6d:29:1c:d4:a4:c4:ab:e7:b9:
f9:3c:5a:fa:a0:44:76:f9:6e:c8:d0:99:d4:da:98:
f6:7e:43:e2:2c:08:15:ce:d6:7f:95:5e:06:24:2c:
f5:22:58:98:d1:13:e8:ad:3d:17:23:7c:72:17:38:
d0:4f:58:a1:6f:94:fe:c8:e6:60:cd:df:66:40:25:
35:47:ce:87:ad:67:6c:1a:9a:a2:1e:f0:40:70:e4:
e9:fe:32:50:f5:79:63:c5:95:2a:15:18:89:41:17:
d9:a9:27:ce:e3:1f:a8:76:33:a7:a1:ad:20:3c:20:
e8:6d:d0:ca:fe:24:cf:43:08:83:f2:4d:cb:12:f0:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:CD:F3:66:3F:DB:FA:B9:C1:16:7D:28:5B:A5:63:15:6D:07:11
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:83:ba:e9:f3:81:15:62:93:bf:9f:ca:4e:ac:82:2e:4c:61:
9d:35:b3:6b:60:dc:58:ca:b7:d9:ae:c4:dc:23:26:4a:4b:df:
88:c0:05:cb:c4:cb:e2:8b:8a:cd:b5:52:91:bb:24:f2:ec:98:
db:8a:af:0a:47:4f:12:97:40:67:e9:0e:b5:69:5b:51:6f:9e:
60:ee:ac:b1:98:fc:47:c1:55:20:a9:c9:50:97:22:44:41:f4:
a7:c3:b5:ce:16:2b:fa:1e:18:6c:9c:a7:6e:89:d0:62:7e:64:
76:9a:d1:44:c7:17:f1:48:80:d2:aa:0b:86:f7:df:20:4e:a3:
68:86:bd:80:4f:48:66:2f:10:62:f2:22:86:fb:3a:43:ee:d8:
87:ce:93:9b:33:cf:ed:f4:95:1c:8d:9e:11:bd:e5:fc:90:aa:
4f:0c:09:1d:38:36:6d:59:d4:41:aa:29:16:0d:18:8d:66:2d:
68:11:c7:85:f2:34:37:a3:37:52:ec:be:26:e2:f5:4d:74:de:
37:5c:4b:2a:f8:7c:ba:14:a4:59:62:bd:54:a7:52:51:2f:56:
71:eb:57:bc:f8:07:6a:80:cd:1d:f8:0b:b7:9b:88:11:72:3f:
e4:a3:48:e3:22:76:5f:2c:cf:aa:24:10:70:3d:55:1b:f3:58:
5d:bd:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:35 2025 by rpki-client