Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: fKWXcxlI65/76/zY00Yhr5+kZ9cM2Vbr96idFAk0u4Y=
Subject key identifier: EF:F5:A3:86:93:A9:C7:45:53:FA:FD:D8:CF:33:71:3E:09:10:01:09
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 0199FBEA9A0B09D41889DA51CB8EBFBFA4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: oSUKD9Wla4HQoNVa4R7B9DRTFUrUPCtgNcRbfyZHoFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9a:0b:09:d4:18:89:da:51:cb:8e:bf:bf:a4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=eff5a38693a9c74553fafdd8cf33713e09100109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:b3:17:fe:27:9a:3b:0e:1a:b8:6d:63:21:
9e:94:e0:2c:5a:64:c2:15:44:a5:3c:a7:93:89:62:
fd:f4:50:ca:ca:5f:f7:1e:0a:6c:d8:89:0c:59:9c:
0e:86:1b:ff:03:9a:4b:db:e8:26:29:ce:73:b4:ca:
d2:d6:0d:89:28:3c:ff:28:ab:1a:95:6c:c9:8e:c3:
bd:b1:c8:38:c4:56:bf:d8:58:95:6e:66:d8:ad:3a:
a6:49:cf:67:f8:e3:1b:05:30:d8:c2:d1:b6:c8:2a:
af:8b:18:ac:34:87:fa:54:06:88:28:8d:eb:12:3d:
89:26:ce:48:8f:47:e9:b2:1e:43:19:f0:58:9e:d1:
12:9d:17:b1:bf:05:a6:65:a4:43:7b:63:19:b1:a3:
57:f5:44:b3:e5:58:16:d2:38:28:76:6b:8f:3d:5d:
dc:0b:f1:42:5d:61:c3:50:be:32:2a:5a:85:b7:77:
1f:cd:ed:0e:88:48:0a:1b:4c:3d:5f:30:90:3a:24:
bd:d7:3e:0b:fc:fc:be:52:04:7a:6a:25:a0:22:8e:
60:c0:5b:ad:26:24:03:90:9e:6e:4c:d1:a2:2d:10:
2d:0a:3a:bf:12:73:67:e9:d1:f8:1e:85:f5:84:66:
8c:e9:46:c7:99:b1:62:4e:cc:c9:a2:6a:f2:1a:a4:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F5:A3:86:93:A9:C7:45:53:FA:FD:D8:CF:33:71:3E:09:10:01:09
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:71:d8:d8:d0:29:26:a6:20:b5:82:e5:27:26:be:a0:79:7a:
e3:4a:ea:b4:af:0a:b2:57:f2:45:7f:f9:f1:28:d1:25:97:45:
d8:d6:83:36:1d:16:b5:e7:e1:70:f4:f2:e3:90:20:e9:24:f5:
43:43:60:9c:83:0f:4f:24:4b:10:2e:d8:3d:ae:15:d4:d8:c7:
4f:1a:0c:e7:86:0f:50:7d:75:31:bc:fc:30:5d:24:ff:da:f7:
ec:03:a1:15:63:77:62:58:b6:da:80:cf:57:ae:f9:29:29:cc:
29:0e:62:fd:f0:5f:9e:9e:f4:ff:55:37:09:11:20:18:b4:4b:
07:d7:ec:a4:e7:c5:f2:9a:25:19:44:01:b8:46:cd:a9:c1:6e:
77:ac:5a:89:8e:0a:f8:b5:ce:53:5c:e9:2b:84:3e:47:e1:e3:
f4:6e:c5:e6:d6:74:3d:d8:3e:37:7e:36:87:27:86:79:22:62:
db:74:04:9e:22:26:e6:c3:ea:b9:a7:7c:d0:c2:97:be:69:71:
d5:7f:13:3d:05:f5:ba:9d:06:42:f3:9b:78:34:0d:4c:1a:50:
f8:bc:83:70:c0:ea:d9:f4:c7:45:99:cf:10:8d:5f:b3:6b:90:
5f:41:88:57:ce:4d:2f:48:d3:6e:46:dd:8e:99:35:8d:c8:4b:
73:69:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:16 2025 by rpki-client