Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: 1HHrmgbm+5V0PrV3A6kvdt0qKJ0GBF7JVwstkQ1aUc4=
Subject key identifier: C8:48:FD:E0:DD:06:82:11:33:C3:6C:A9:80:D6:BB:EC:87:32:A1:C4
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 0199FB45C269F399B1AA422ACDA5B43A0C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:16 +0000
Manifest this update: Sun 19 Oct 2025 07:01:16 +0000
Manifest next update: Mon 20 Oct 2025 07:01:16 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: avV62Ijav2lFUK5UF1uK828cI6nm/A/MYMX+oESymhA=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c2:69:f3:99:b1:aa:42:2a:cd:a5:b4:3a:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Oct 19 07:01:16 2025 GMT
Not After : Oct 20 07:01:16 2025 GMT
Subject: CN=c848fde0dd06821133c36ca980d6bbec8732a1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:4e:82:2b:b6:b5:4b:41:4f:35:55:cd:c9:
64:7d:74:71:4b:2d:97:4e:a9:de:77:ca:f4:3d:b3:
a3:5a:9a:68:93:c2:63:c2:e0:ce:98:a4:eb:f6:84:
41:05:af:00:31:e1:d9:7c:2a:c4:25:a3:e1:e1:04:
be:e2:ce:1e:cf:a4:35:65:24:f0:f9:b6:94:02:8d:
c9:32:19:7f:3c:80:f7:6e:9f:85:4f:44:74:b8:f3:
c7:3f:8d:fb:1f:5e:c9:4d:19:32:57:06:3a:02:42:
53:c6:60:d4:3a:96:75:64:dd:16:0c:a7:85:97:c0:
a0:96:7c:05:85:5c:f6:0b:30:fc:0d:ae:35:b1:11:
7b:5c:42:03:d5:f5:2a:e2:58:1e:c9:86:d8:94:1f:
a2:7a:17:fd:7f:af:3a:35:4a:2d:ed:02:44:7b:49:
52:f8:84:7d:a0:45:6f:f1:5d:fb:ee:f4:8b:b1:75:
5f:dd:da:ea:69:b6:fc:9c:70:38:ac:31:8f:23:b3:
89:67:d4:44:cb:9c:1f:57:0f:4c:fb:90:9f:94:a9:
ec:9d:f3:b7:36:c2:4d:b8:6a:12:54:ec:19:43:c5:
25:69:ed:a4:2e:22:7a:a9:71:c2:71:c0:ff:b5:42:
03:b8:e9:8b:43:ad:24:eb:f2:19:74:5e:7f:c7:53:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:FD:E0:DD:06:82:11:33:C3:6C:A9:80:D6:BB:EC:87:32:A1:C4
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cb:19:04:e1:a5:6f:1b:16:77:cd:c5:f5:50:fc:74:d6:5f:
d3:75:8f:d4:b2:6f:0d:0d:9e:e4:92:ed:99:94:ce:81:83:b2:
0c:89:bc:80:ac:90:71:d6:e8:66:8c:68:8f:af:b9:c9:20:9c:
62:b9:ad:0a:77:25:8b:6c:24:fa:82:63:f9:36:ba:f2:d1:24:
10:27:03:33:7a:f7:ba:35:b6:aa:e0:a9:d2:88:f3:fb:43:55:
9e:b8:db:38:74:f1:35:a5:c7:a6:d8:61:15:65:29:ff:2d:4b:
03:a0:69:d6:bc:14:26:48:74:a0:15:a3:6e:0f:23:d2:03:be:
f0:c9:fc:34:6d:f1:8c:1f:d8:1d:56:0f:79:90:83:e2:4f:b8:
84:31:03:2b:9e:84:4a:0c:50:45:60:86:48:ed:e2:79:28:6b:
9a:e7:8c:2f:eb:de:43:88:9b:3d:5a:12:d9:cb:09:39:1c:25:
f0:1a:b2:55:47:a0:d8:6b:34:f8:db:6b:dd:0f:79:dd:b0:c2:
ed:9f:9a:c3:15:48:9d:75:d9:a5:6d:50:2a:44:4d:3f:2b:a0:
32:76:e4:c4:b1:e1:0a:37:c6:de:dc:7d:cb:e2:76:15:28:6f:
a4:4c:3b:52:9c:59:48:70:31:e1:eb:99:d1:02:b8:27:d0:05:
9d:c3:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:59 2025 by rpki-client