Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: y57KvOeb2yhUMqBPF7qnAZznc/SEaJzEaKA88SAcKeQ=
Subject key identifier: 41:D7:EA:82:F0:AE:56:E4:80:3D:F1:6A:DC:89:55:C7:5F:F2:E2:36
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 019A4E86BFC843896C64B829F6B3D2C9CE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:44 +0000
Manifest this update: Tue 04 Nov 2025 11:00:44 +0000
Manifest next update: Wed 05 Nov 2025 11:00:44 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: Epa2T22S964gSfisSQTZgFhoVgnhzYgExdgwtVxV83Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:bf:c8:43:89:6c:64:b8:29:f6:b3:d2:c9:ce:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Nov 4 11:00:44 2025 GMT
Not After : Nov 5 11:00:44 2025 GMT
Subject: CN=41d7ea82f0ae56e4803df16adc8955c75ff2e236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:59:ae:50:49:33:7f:e2:69:be:c0:29:5d:
16:79:23:9d:e7:bc:b5:6e:64:e0:be:fc:5d:40:5f:
74:7f:5c:6b:2d:ce:ab:89:af:bf:3c:65:f0:68:3e:
00:ce:4e:73:2d:35:83:43:07:fb:da:3c:83:b9:52:
ea:ce:8f:e8:c6:28:99:8b:4d:94:09:6c:da:3f:45:
80:14:b2:20:55:bb:88:b7:8b:68:e4:eb:30:02:6c:
4e:5d:e5:e3:24:48:d2:d8:5d:65:10:9b:5a:11:df:
26:61:cd:84:41:e4:76:f9:59:d8:70:36:bc:c0:8e:
4e:d0:24:fa:1c:4a:dc:23:6f:e3:b3:c7:20:ba:df:
95:13:d8:25:ab:a7:f7:3b:c8:68:d5:fb:bd:9d:4e:
f4:a2:57:cb:d4:a4:70:3f:03:99:33:95:de:d4:17:
08:e0:a5:84:3f:13:c1:94:9d:e7:de:48:3c:3e:20:
0e:25:e8:68:0f:f5:10:3b:39:46:04:7f:2b:c2:45:
e9:46:2f:26:66:ee:2b:5f:8a:9f:a4:1e:d6:4f:ec:
85:9a:05:dc:15:a0:ce:84:16:3d:4f:3f:26:69:78:
7d:52:5f:66:80:cf:b4:57:30:2f:79:24:c0:06:09:
a1:b9:b2:40:5e:30:0a:75:72:47:6a:db:43:67:5c:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D7:EA:82:F0:AE:56:E4:80:3D:F1:6A:DC:89:55:C7:5F:F2:E2:36
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:d8:42:b2:6f:fa:57:6b:45:b6:e3:d9:ee:d9:5e:8d:fd:
bf:37:1d:60:c2:85:d7:38:30:35:2f:6c:85:75:a0:b8:25:78:
db:bc:ec:7f:56:05:37:b3:85:ef:69:8c:6b:3a:82:f5:39:64:
e7:7a:d2:5b:33:bc:d6:b2:68:bf:24:c7:6b:cb:c9:ec:38:0a:
7a:64:fd:65:c1:06:73:f4:9c:aa:4e:1d:34:6c:72:8b:11:c0:
59:dd:63:5d:43:cc:d1:77:d6:8c:c3:a3:c9:2b:0b:c8:c7:9b:
14:15:b9:20:9c:d7:aa:70:b8:2d:34:ff:76:e1:a9:49:62:ad:
dd:30:ba:57:1e:a9:3b:ff:f2:2b:d6:df:10:bc:d1:e7:ef:95:
a7:60:1f:da:4c:aa:e7:38:45:eb:b2:ee:56:b4:7d:18:bf:49:
b2:d5:fc:38:77:43:85:58:db:cc:b2:75:7a:d3:1e:d7:90:e9:
d9:2e:fe:28:a3:96:8b:e5:57:e8:42:f1:48:e5:ae:93:0d:6a:
d1:9e:af:1b:e0:51:7c:80:b1:8a:c7:d4:83:02:7e:b7:d5:4b:
15:fb:9d:76:97:87:de:3e:1f:29:15:bb:9b:f3:04:13:ef:2f:
c8:1d:af:b2:4e:a2:c5:7d:5e:de:90:96:1a:2c:91:89:b5:30:
2f:58:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:28 2025 by rpki-client