Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: nwRkERM8BmePbDBSTen+jARryz7oGQIDkvU7oItr5jU=
Subject key identifier: 33:F3:FE:1D:D9:9B:C4:EF:B1:9C:54:46:2E:44:AC:F9:63:BD:06:F3
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 0199FBB366A0211F959AF36C4EA8AFA4CB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 1082
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: sHMbVIqYjkom4k9m+DEBZnJxR1DujryCUMSatowtyZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:66:a0:21:1f:95:9a:f3:6c:4e:a8:af:a4:cb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=33f3fe1dd99bc4efb19c54462e44acf963bd06f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:cc:53:67:af:05:ce:45:1f:7a:50:13:35:
0b:2b:da:e3:04:a1:f0:33:86:7c:e5:93:2d:c1:7f:
15:68:9d:c8:10:c6:c2:bd:9f:f9:58:ed:78:19:3c:
0a:3a:50:ef:0f:63:cb:14:c6:2b:0f:6c:03:b0:13:
27:04:30:21:6c:67:2d:4a:2f:83:35:2f:4a:05:38:
f9:6f:33:77:bd:5d:c7:2f:4c:49:9b:cb:16:9b:ba:
8d:38:3c:10:1a:8f:60:c8:42:8a:e6:5b:53:56:91:
6f:c0:d9:2f:fb:54:a5:74:13:5a:33:19:ee:45:b0:
d6:63:b5:e6:7f:30:f6:f9:77:d9:cb:a8:3d:8b:ab:
4c:46:1e:13:30:2c:f7:6a:e9:84:a7:bd:f2:fe:a2:
65:3e:19:b3:a9:61:f5:84:54:7c:7d:c8:c5:83:a2:
41:97:bc:73:c2:df:8c:f0:50:b9:e5:d2:2b:e6:1f:
ae:02:6c:35:22:17:17:bb:70:f7:df:3b:b0:84:6b:
73:98:5c:90:c4:d3:8d:8e:e3:9c:f3:97:68:8a:fe:
3e:e0:95:8e:88:9e:b3:42:c8:f6:2d:1b:f7:78:32:
47:cb:6a:93:8e:ed:da:19:75:8e:78:80:59:ea:69:
e2:86:6b:63:3a:b3:93:94:5a:e3:6d:2b:c9:04:95:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F3:FE:1D:D9:9B:C4:EF:B1:9C:54:46:2E:44:AC:F9:63:BD:06:F3
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:31:69:81:28:90:17:45:8c:75:43:35:ed:71:be:74:54:6b:
16:3a:0f:37:84:95:c8:e3:5a:69:9b:fc:a5:fc:9e:5f:94:57:
ff:61:d9:0d:57:01:34:74:1d:3e:15:ca:b3:a4:77:b9:87:66:
bc:3d:76:29:53:e2:63:19:ca:eb:a2:d0:20:fc:ee:6c:b8:a6:
25:29:a0:16:dc:00:57:84:47:9e:7d:1d:06:a3:62:3e:cc:5a:
74:1b:f8:17:55:65:04:63:d4:3e:6a:10:9e:5b:cf:92:28:a6:
af:19:5f:fa:81:ed:b6:22:b7:d1:e8:31:cb:a7:da:4d:50:b8:
8b:22:24:60:20:85:d2:7d:91:06:69:58:8c:4d:be:20:e1:47:
8a:b1:62:a5:9f:97:80:66:66:14:9a:26:ac:0e:40:39:1a:da:
98:80:75:8d:d0:60:b7:d7:78:3a:ee:7c:d0:86:20:55:d7:32:
5c:a9:6d:cf:83:e3:3b:ae:e3:61:70:9b:7a:7c:f9:b9:fa:c7:
7e:1b:e8:51:7f:0e:f7:90:3e:6c:2c:9a:43:d2:4f:0e:37:35:
7b:6a:76:62:f7:88:cf:fd:b1:db:99:1b:ad:9b:b7:3c:d0:4f:
29:54:18:d9:f6:41:11:18:58:bb:ac:f3:8b:21:32:13:7a:47:
c7:b5:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:16 2025 by rpki-client