Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
File: mXwn0VtG2xhLwCswPIa0fEScG1Q.mft (raw, json)
Hash identifier: Yqqry1oMqF+ahxealsct2aIwuqeql6fmTZ5kCUYmUMY=
Subject key identifier: A4:44:A8:9B:DC:CF:8D:AE:59:3D:71:A5:06:DF:24:CE:35:F8:1C:91
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Certificate issuer: /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial: 0199FE474D8F55AD73A82F44C3E1F27C1A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
Manifest number: 0FA8
Signing time: Sun 19 Oct 2025 21:01:49 +0000
Manifest this update: Sun 19 Oct 2025 21:01:49 +0000
Manifest next update: Mon 20 Oct 2025 21:01:49 +0000
Files and hashes: 1: JpZlGPUSnNPcPAQ7HrfbEiiCY90.roa (hash: sj/ySyRWLvZHGTxRHODxTY1XK4NRx1uXT8wwjiiWvG0=)
2: mXwn0VtG2xhLwCswPIa0fEScG1Q.crl (hash: B7CmnSM0xPio166hnTNgGLRInfL9gaKb2U04ZE87j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:4d:8f:55:ad:73:a8:2f:44:c3:e1:f2:7c:1a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Validity
Not Before: Oct 19 21:01:49 2025 GMT
Not After : Oct 20 21:01:49 2025 GMT
Subject: CN=a444a89bdccf8dae593d71a506df24ce35f81c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:15:11:52:66:78:ed:6c:65:1d:ab:5d:5e:
a4:0a:b0:66:1a:21:c5:06:a2:7e:00:dc:aa:5f:bf:
c4:02:9a:83:1e:ba:86:29:bc:64:08:b7:23:9b:d4:
8b:a5:ad:4f:d7:48:17:aa:1c:fb:c3:7c:2f:ca:12:
d7:44:ed:5f:71:ff:ca:f8:38:d0:2e:d2:f6:4e:8b:
df:ff:43:80:12:7f:b3:5b:b7:68:26:b4:81:19:44:
ff:df:3a:ff:04:83:07:b4:6d:cf:bf:d9:2d:ab:b4:
5e:c8:9b:1e:d8:0e:54:4c:17:51:97:6b:05:64:22:
1b:30:42:12:58:33:1a:da:76:a8:20:21:44:2e:e9:
37:ca:43:4f:5d:bc:7b:b3:ad:80:4f:6b:f6:ae:43:
84:f0:22:7f:a5:d0:2d:d1:84:a6:e7:0d:4d:58:c9:
b0:23:6d:dc:75:05:97:61:14:17:62:e9:03:3f:cf:
79:e2:db:04:3a:78:70:4e:8a:07:72:9d:81:37:3f:
af:11:f8:a7:17:b2:f6:57:bd:03:79:14:32:66:4f:
1c:19:db:99:70:65:64:8f:4e:38:55:a2:ed:e3:e8:
1e:39:e4:3e:92:bb:44:82:64:be:b3:57:78:ad:89:
ab:24:06:b9:40:7f:0f:57:68:a2:60:f6:fd:d9:22:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:A8:9B:DC:CF:8D:AE:59:3D:71:A5:06:DF:24:CE:35:F8:1C:91
X509v3 Authority Key Identifier:
keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:31:eb:0a:a3:c8:97:97:7f:8c:4a:5e:4c:fe:7e:ce:0b:87:
64:45:f5:e7:56:eb:81:a5:2d:c6:ea:0f:30:cc:52:ea:9e:84:
82:03:10:91:d7:f2:fd:e5:6d:b6:71:0c:2d:59:05:f2:00:56:
dc:66:a9:52:e4:32:2c:68:4f:e5:0f:8e:db:d2:2b:cd:20:03:
dc:82:43:ba:5d:d8:d1:21:4c:70:cc:47:21:14:c7:3b:34:e7:
9c:5f:3e:58:6d:b6:89:f6:51:99:f0:1f:c7:ae:6c:7c:06:cc:
c2:10:4a:9d:b7:0a:b6:fa:22:0f:3e:39:06:86:24:f0:b5:4f:
0e:fc:5e:55:33:08:72:dd:93:36:bc:7c:36:49:6d:e7:2d:02:
89:fb:c2:c3:72:98:5d:de:ac:8e:4f:72:b4:db:ac:97:6c:8a:
c5:98:40:50:c6:60:11:b4:3a:ce:25:95:a4:86:d5:f9:e6:a5:
35:58:e7:8e:e6:5d:e2:c5:e3:31:e4:35:8c:3e:e8:40:14:82:
09:c0:d4:96:26:a6:71:bb:2a:ca:af:9a:c3:ee:a7:90:26:1b:
10:15:f2:c3:d0:d7:a3:b8:59:3c:b7:32:a3:c3:25:c2:d2:6a:
0a:87:4b:f2:51:5d:25:4a:b0:28:c9:4a:37:31:09:b0:a6:fd:
78:d6:e7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:57 2025 by rpki-client