Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
File: mnCwUeXN-WLbwms1JIjQgxvfmjw.mft (raw, json)
Hash identifier: rI2Ac8LpYhrV1a2TlxA8drXev7RqGoaKPArY46D8ikg=
Subject key identifier: DF:9C:8F:0B:08:7F:D2:A6:E6:52:94:CC:3F:08:C9:7F:1E:57:F1:FE
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Certificate issuer: /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial: 0199FC21C630F7662D0FA3549C0D415D5745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
Manifest number: 139B
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: ApYo8usd2f87kfxBSCL43GkwNl4.roa (hash: HVht7PktvVlX5vG6maaHsCCbjpS8pRttM16W+m0bt9g=)
2: Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa (hash: FmxP6Uz7faOa7pJaYu4u/4WUOpulDOhau3FqT5C1MnI=)
3: mnCwUeXN-WLbwms1JIjQgxvfmjw.crl (hash: sIeINnJfonsB58vJjn2Uw/eqzuJ5nqRCNUgwQ8xKMww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c6:30:f7:66:2d:0f:a3:54:9c:0d:41:5d:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=df9c8f0b087fd2a6e65294cc3f08c97f1e57f1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:18:5b:a8:bb:ed:0f:18:9c:f1:31:66:df:
6b:f8:4b:05:23:50:4b:8a:6e:69:a9:70:9b:3b:ec:
9f:41:68:0e:a9:78:e3:dd:99:65:2f:75:01:b5:18:
7a:27:c4:80:b8:aa:25:b7:ca:88:a7:55:8b:15:86:
be:d6:bf:53:1e:eb:ab:71:b4:e8:f9:26:97:e2:ac:
23:73:92:d8:07:a7:94:8f:76:7c:0d:44:88:28:35:
58:8e:ba:1f:af:10:04:e8:82:7e:e6:aa:14:be:70:
01:15:85:6a:ad:70:8f:c5:42:94:5b:de:6c:77:a0:
e2:9e:93:5e:a5:a7:69:f5:f4:d7:a1:e7:56:8f:10:
5c:8a:9f:33:59:5f:23:bc:a1:cb:54:a6:ad:a9:a4:
a1:75:3a:0a:e3:05:2e:2c:53:5b:20:02:84:79:ac:
05:c9:54:d7:99:89:67:1e:dd:da:7f:3d:11:f8:bb:
7f:55:99:be:ff:0b:9d:bc:62:64:64:b2:05:d7:66:
c8:a5:c4:97:94:cc:c7:0a:ac:9a:78:91:1e:13:f5:
36:61:9f:89:50:e2:13:c6:c7:88:c5:b8:c3:cf:b5:
7e:ad:0d:82:dc:6e:54:a9:59:0a:99:83:07:07:16:
c2:63:12:ee:47:df:54:78:f4:69:a3:a0:e7:1f:9a:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9C:8F:0B:08:7F:D2:A6:E6:52:94:CC:3F:08:C9:7F:1E:57:F1:FE
X509v3 Authority Key Identifier:
keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:a6:d1:b8:1a:b1:89:42:13:47:4c:02:39:e8:85:57:f5:
b8:d6:30:15:51:e1:be:63:27:eb:ca:a6:9a:aa:cb:9d:96:ba:
80:44:0e:f3:d2:65:c2:b7:56:76:f9:3f:88:fa:75:67:46:c0:
32:ba:e1:49:83:c7:68:12:33:c7:29:23:94:c0:0f:ee:23:a8:
c3:7a:b8:90:23:7c:af:90:06:58:f4:ef:1d:a0:4d:ce:96:0b:
7a:50:d3:0d:f0:a7:52:a8:55:24:ed:50:e0:65:53:ba:2c:7b:
e0:19:19:1f:b2:09:b3:35:f5:e0:e2:2c:15:86:60:5c:53:50:
1b:e9:20:50:19:68:86:50:70:36:92:2d:5b:1d:3e:30:34:3b:
b0:2f:92:00:6c:08:ea:3e:c8:06:02:5e:c8:61:d8:4e:2f:3f:
e4:d7:a0:b4:86:5c:96:50:dd:73:29:35:cf:8d:26:c9:16:3d:
11:d5:a9:10:57:f4:82:9c:bc:36:5a:12:74:af:15:61:f0:e6:
73:88:84:9b:0f:72:92:5a:d1:24:21:8d:3e:ec:18:05:50:e6:
fc:16:42:d8:f9:65:81:4d:95:86:51:81:db:2d:fd:34:b4:94:
d6:c5:c1:cb:84:f6:9c:e0:e9:cd:b4:02:01:58:02:6e:c6:6f:
61:78:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:27 2025 by rpki-client