Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
File: mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft (raw, json)
Hash identifier: 36TxGB7wgJtfNkUhl6jHWvIWCreFu8Z3yeiLDBELoi4=
Subject key identifier: 03:90:82:EF:1C:92:E4:F0:53:20:67:B6:E7:0C:36:12:67:6B:7D:69
Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
Certificate issuer: /CN=984133b31d96b27c1af818114b169c9a5745e094
Certificate serial: 0199FC8F431115FE648C87CDD2BB3B9C771A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa (hash: Cvot8FafLsZehYZMxIgY8/gFTZVz6XlYdnhjP+IggKI=)
2: mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl (hash: 1z9b/leV2c5w3siOkY9U2lRDRVMu7lrX9M3WG6/N1GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:43:11:15:fe:64:8c:87:cd:d2:bb:3b:9c:77:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=039082ef1c92e4f0532067b6e70c3612676b7d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:b1:7b:fe:17:67:f9:09:f9:9f:be:a7:6a:
de:38:b5:6d:55:7f:20:26:ce:bf:2a:e3:74:01:e5:
83:a2:b5:fe:97:44:8d:e7:9f:2d:95:59:ec:1a:f8:
83:ad:41:f8:00:e4:7f:4a:a0:33:88:96:84:7d:23:
da:73:0d:fb:ce:89:42:f8:94:64:02:8e:18:e4:7e:
6c:c0:60:4b:77:f6:dc:6a:d5:cb:f2:81:ae:b4:cc:
80:7f:77:b1:12:4b:2c:39:97:4e:bf:8b:09:b6:58:
ac:02:1c:43:30:4e:0c:d0:9e:ca:3d:07:ad:4b:22:
cc:b0:9f:a2:91:db:d7:68:42:67:ba:4b:b9:25:99:
8b:c0:99:e2:f5:8d:25:dc:d1:2b:2e:75:9c:a2:ca:
d3:27:48:ab:79:db:8c:67:fa:a7:1d:44:6d:ff:3f:
0c:46:ff:f7:48:2c:18:57:1b:ea:59:ae:25:23:fb:
e4:6f:4c:6a:c8:1d:c4:bb:3f:17:31:cf:2d:b5:16:
50:a6:bb:61:6d:2c:3e:d4:a6:19:0f:3d:70:16:e9:
27:d8:46:7d:2c:f5:ef:47:ab:9c:b5:d7:df:6f:0e:
58:7a:4b:7e:58:f5:6e:c7:d7:b7:28:92:35:66:4f:
e5:ed:86:94:60:10:a6:b8:ac:22:ab:a6:62:df:fd:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:90:82:EF:1C:92:E4:F0:53:20:67:B6:E7:0C:36:12:67:6B:7D:69
X509v3 Authority Key Identifier:
keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:1b:48:ac:19:de:ee:fb:a2:ed:75:e2:5f:df:47:3a:26:10:
d1:aa:3f:6c:0b:29:45:85:08:78:e6:3d:8d:82:8a:68:77:20:
fb:53:1f:e9:a3:ed:be:d6:e9:53:59:a4:cd:0b:9b:7d:7d:ab:
79:4a:82:b7:f9:0f:a4:c3:cc:6b:e5:18:cd:ec:19:29:c9:8a:
85:60:62:d2:76:32:af:11:9b:79:f9:1c:83:0c:71:01:93:b8:
4c:48:a1:cb:3b:cb:cb:fb:a2:7f:5e:30:0d:55:58:a9:7e:0f:
95:62:a8:41:75:3a:f3:96:d5:24:5e:40:52:0d:31:ee:6b:36:
80:70:18:dc:fb:03:8f:44:2d:4e:91:63:51:2b:02:19:b8:2b:
9c:65:08:06:10:50:18:07:82:b5:4a:19:84:b6:ef:d8:26:e3:
9d:cb:53:99:18:35:29:28:21:53:dc:9a:cf:37:9e:14:60:0c:
9b:47:4e:fd:32:36:1c:4d:29:55:c2:37:8b:71:12:33:c8:19:
f1:1e:e9:81:b4:50:ef:10:c3:cd:6c:ad:18:a3:c2:ce:20:18:
85:a7:ff:d2:cc:48:1c:2b:c9:ba:d9:83:12:32:ec:6b:a0:2d:
36:69:bd:16:43:1c:43:05:4a:d7:3f:ee:0e:6d:06:4e:6a:0e:
5c:34:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:36 2025 by rpki-client