Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: 3jbd8ZVxtleEyARumIb54Cq0WU4LeFBMyVwbLVBHEzs=
Subject key identifier: 0E:2D:98:AD:6B:BC:DA:E1:67:BE:27:E1:0B:9F:31:40:34:50:B3:A2
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019A53ACCC5D22D8C398ADD2C2964153209E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 1354
Signing time: Wed 05 Nov 2025 11:00:24 +0000
Manifest this update: Wed 05 Nov 2025 11:00:24 +0000
Manifest next update: Thu 06 Nov 2025 11:00:24 +0000
Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: SDNnks6QZB2L9AUNXTbzr7sd3wn15dkN3p3fQE4jFx4=)
3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:cc:5d:22:d8:c3:98:ad:d2:c2:96:41:53:20:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Nov 5 11:00:24 2025 GMT
Not After : Nov 6 11:00:24 2025 GMT
Subject: CN=0e2d98ad6bbcdae167be27e10b9f31403450b3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:98:6a:c0:de:75:e9:6b:25:ff:f5:7b:08:
9b:11:d9:8e:ae:e0:96:df:6a:54:55:be:1d:3b:e2:
fc:81:40:53:44:b2:47:af:42:77:a2:cc:8d:e4:24:
5d:c2:b8:b6:c6:c7:b4:50:5f:e4:7d:e4:59:58:ba:
11:d7:f3:e0:cf:7b:4a:4d:3e:b4:3c:f7:fe:8a:87:
d4:3a:3b:1d:fc:d7:8e:28:b3:ff:ea:4e:03:23:53:
56:84:fa:56:ac:03:ed:b7:fa:2d:b7:33:7b:10:e6:
b9:43:49:40:aa:ea:65:11:aa:52:1d:e2:d7:43:66:
a7:89:cf:d3:64:f5:87:80:cd:61:c5:23:de:f1:a2:
ee:b1:9f:af:9c:ab:2f:ad:65:32:8c:c1:9a:24:fd:
52:d3:f9:c1:f1:33:2c:d8:88:98:37:21:c0:cf:70:
fa:57:24:04:37:23:90:97:dd:fc:7f:52:f2:be:b9:
86:b3:c3:55:62:54:a6:08:fb:d6:e8:a6:9e:03:5f:
9f:d2:75:a5:b5:b8:2c:ee:df:11:dc:0e:9c:87:ac:
a1:f2:5c:0a:85:14:8b:eb:57:24:c8:b3:b3:18:26:
6b:c5:53:12:15:0d:15:55:16:8c:37:12:7a:7d:36:
9e:f4:f9:b9:0c:c7:1d:e6:78:15:41:4f:b2:40:3b:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2D:98:AD:6B:BC:DA:E1:67:BE:27:E1:0B:9F:31:40:34:50:B3:A2
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b7:95:1b:f7:80:bf:08:62:44:81:bb:3d:e3:59:ee:99:b9:
b9:ab:9e:d0:7b:6a:77:ee:23:ca:60:6c:08:be:27:41:a6:be:
e5:5c:f3:81:31:28:5c:30:c8:88:d8:66:4b:d1:fc:00:93:6a:
39:6e:3c:3e:14:ca:73:e9:9e:d1:ef:83:36:fd:f8:85:da:34:
b6:c5:6a:3b:fe:6c:6f:0b:63:09:95:48:07:78:4a:a2:38:48:
1a:41:bc:5d:66:c1:52:00:26:32:07:7a:d3:59:e9:a7:59:11:
ca:f9:43:4e:31:6c:76:12:09:bb:88:fc:a9:cb:59:1f:ad:0d:
25:12:28:39:74:71:30:c3:cb:77:31:b9:02:38:b2:97:32:ad:
36:31:8d:7d:a7:16:49:00:e1:cf:d7:95:e7:2b:45:b1:e0:60:
ba:f3:a1:93:66:0d:5b:b6:7a:42:b7:d8:b8:c0:a0:7c:d2:80:
13:44:18:6f:93:9c:78:a6:d2:e6:b1:a5:fe:d1:c4:81:5d:ce:
b3:62:50:55:f1:61:2f:e0:4c:a1:1d:16:2e:f9:5e:04:7a:4b:
9b:fc:4d:8d:90:80:d8:93:b1:fe:42:99:cc:07:31:17:9c:99:
d8:f3:fe:00:d9:6a:23:49:65:0f:a6:8a:75:93:3e:cd:61:94:
41:c5:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:57 2025 by rpki-client