Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: 4mnUKdTxSN7975wekftUHsI4muLOAiaPdW0/xCY7T7Y=
Subject key identifier: 8B:CF:A8:28:5C:72:90:48:8F:2A:6A:C9:C1:51:1B:8E:14:8B:D4:8C
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 0199FB7C8B7571FB589FC1CF227D6ADB67EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 0457
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: EiSwReCkIwG8q5uGT4/A6swqvOedtWzyJhwSPrPVW6M=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8b:75:71:fb:58:9f:c1:cf:22:7d:6a:db:67:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=8bcfa8285c7290488f2a6ac9c1511b8e148bd48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:fd:1b:d8:91:05:0c:46:67:4a:52:f9:b9:
6a:f7:d2:ac:c6:df:f6:89:48:0e:79:2e:d6:82:14:
36:45:22:ed:0b:1b:b8:5e:6d:a7:13:77:36:a2:0c:
f2:9b:78:c5:a4:51:57:48:ef:74:4e:9d:1c:f0:fa:
b4:f0:35:d0:5c:5e:50:44:32:24:f2:3c:8c:9f:1d:
e7:21:47:db:4e:8e:d0:28:4b:f1:ff:c8:a2:9b:1f:
00:c8:24:33:de:43:24:62:a4:cd:49:b5:9c:7a:40:
4b:52:53:bc:a0:c3:c6:af:b1:3b:fb:a7:a6:e9:3a:
fb:b1:2b:8b:69:0b:83:98:24:6a:41:81:c9:07:1f:
bd:9e:e3:5e:29:45:e7:3a:76:b3:9b:f4:aa:6c:4f:
9a:5b:8a:19:1c:60:cb:40:bd:fe:6e:e8:3d:5e:d9:
5f:c8:76:7f:08:26:7e:8f:21:0b:8a:bb:df:2a:a2:
c3:98:dc:3d:4f:51:15:fc:55:b6:57:53:60:da:a4:
c4:a4:0d:40:a5:5c:21:41:a2:a5:30:5b:2e:c8:b3:
a6:c0:a8:6e:a7:0f:70:92:55:a0:34:04:a8:7a:74:
a3:4f:d0:0a:6b:20:3e:25:be:a0:c3:98:bb:c7:04:
ce:ee:48:9f:75:ad:9d:5d:96:0d:a6:d9:42:f3:60:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CF:A8:28:5C:72:90:48:8F:2A:6A:C9:C1:51:1B:8E:14:8B:D4:8C
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a5:47:f0:3f:17:46:d7:8a:aa:bb:8b:b5:21:7f:07:db:55:
d5:16:d1:65:a0:4c:61:00:a6:95:49:e2:a6:6a:b4:35:1f:ae:
b2:ec:cb:a4:51:1f:be:05:9e:d7:df:80:bb:a5:2c:8d:01:73:
ca:73:d3:a0:d4:55:b1:f8:46:2b:9e:fb:ef:58:ea:6b:f9:b3:
bd:99:e8:15:dc:95:77:35:ae:a5:ff:d1:6f:5b:b3:bf:d0:45:
aa:7b:e6:40:98:d2:80:ae:2d:32:b6:6e:b2:4d:78:38:c3:af:
fa:ac:83:53:06:ea:30:ad:28:72:63:f1:9a:32:e8:d3:97:8a:
69:31:a6:d0:ef:e1:a4:fe:10:14:cc:17:91:e5:82:6a:ca:28:
3c:0b:fa:53:db:3c:9d:6a:e3:d5:e3:a6:d5:57:96:fd:0f:eb:
be:67:14:e8:25:83:f6:2e:e0:66:5c:f2:fc:61:0d:b2:e5:69:
ba:48:95:cf:f8:f6:e6:b4:d5:f8:9b:c1:8b:b1:be:04:7f:73:
8a:d3:97:bd:3b:a5:82:fb:51:22:6c:da:48:be:82:89:62:17:
27:f9:74:87:8b:9f:cf:b5:30:a6:70:e8:e1:3a:12:7f:f8:65:
72:12:69:f0:ff:84:9c:ee:fe:d3:28:75:95:e3:02:23:c8:88:
62:6a:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:34 2025 by rpki-client