Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: IC34SSEfXRfOnNRLBT5TDnuhzO0+OKwI6+rmTTde9GE=
Subject key identifier: 30:AC:2E:3B:21:BF:49:A6:29:2C:09:D1:26:A2:AD:73:E0:01:D9:2E
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 0199FC21B29E9B35FC039119D4F900E04BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: 18RhDBYZVLzWPEMGv6tLdnu0vgapn15Jgyo8nXYpr0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b2:9e:9b:35:fc:03:91:19:d4:f9:00:e0:4b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=30ac2e3b21bf49a6292c09d126a2ad73e001d92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:f5:d0:3d:d9:f6:9e:c3:9a:a8:9b:d9:54:
47:88:ce:81:93:93:f0:18:b9:6a:f7:7c:a8:4f:19:
73:f7:a6:17:ad:66:3b:b7:94:cb:c3:04:4a:5e:0a:
0e:7f:ee:9a:cd:8f:53:03:ab:80:ae:3b:11:21:92:
3c:8d:87:a4:a9:32:79:f0:cd:f9:fa:70:a2:f1:91:
2a:68:39:9f:6d:c7:25:c1:5e:e3:58:33:a0:1a:4b:
d4:e1:f9:03:5a:d1:c9:4e:0e:5d:98:33:f9:95:5f:
ee:3d:36:f3:94:ee:8f:9d:64:ce:98:ab:38:18:5a:
27:fe:ba:7a:39:df:f4:d3:01:5c:7a:97:da:6f:f2:
14:ac:22:79:b6:c9:72:09:ca:c9:4b:cb:d6:6d:32:
6e:77:3a:c0:9e:8e:db:8b:be:b7:00:08:fc:74:e5:
7c:87:54:2d:46:df:3d:cd:f2:a2:da:a3:cd:36:6a:
26:40:4b:46:a0:e2:d8:21:4f:a7:6a:1b:cd:df:3b:
3c:8d:46:1f:39:a5:a4:2c:1a:3f:92:f0:65:c6:f7:
fa:94:60:10:2b:6a:ed:f3:c1:f6:c2:a2:87:4a:6b:
44:30:78:c4:92:7c:8f:25:71:8f:a8:40:f3:c5:1b:
de:8e:a6:5f:06:a7:47:9a:83:63:d8:78:5f:a1:f3:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AC:2E:3B:21:BF:49:A6:29:2C:09:D1:26:A2:AD:73:E0:01:D9:2E
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b3:b1:e6:98:07:d8:62:1a:87:b2:b5:ab:4b:0b:39:ad:8c:
11:5a:25:76:7f:70:2b:8c:e1:f4:63:09:35:27:91:39:b2:0a:
31:86:9a:be:47:9b:d4:36:61:02:c6:db:4f:82:49:76:29:67:
35:81:e4:25:b0:96:d1:6f:69:3e:b5:26:81:b6:6e:8d:d2:00:
9d:b7:7c:fa:c5:1d:46:79:a7:5f:d2:d8:3b:2f:a9:00:e3:e0:
92:42:2c:54:9f:71:cf:b1:ed:77:69:31:86:ea:18:ba:32:7b:
dc:c9:db:7e:3b:f2:a8:fa:64:82:4a:06:7c:16:41:9a:08:c7:
27:86:c4:37:ad:64:1a:8b:ba:4b:7f:62:a3:40:4d:20:95:e4:
bf:43:84:68:3b:57:d7:6e:9d:11:e4:f7:62:da:84:8a:8a:ec:
0c:c9:cd:5a:b1:fb:6c:c4:7f:63:d4:8a:58:e9:f7:39:23:eb:
12:ed:d3:0f:16:d9:30:d2:ac:0e:7a:66:c5:9f:e9:d5:70:45:
2d:b5:6b:ba:c8:c8:c8:cc:4b:aa:ee:c2:83:da:8f:b7:43:09:
66:4a:7b:55:84:f1:98:02:84:d3:47:f2:c5:99:75:89:96:6a:
0b:e1:02:39:e6:7d:3b:62:22:a6:87:82:35:3c:02:85:af:9e:
cb:c2:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:19 2025 by rpki-client