
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier: rOe9dxx5leN+Cr0ZLXSI5v2sZjxCJIGfK5Kj7Bbx/q8=
Subject key identifier: 5E:A7:84:B9:5F:7D:01:9A:6B:B8:EA:24:A5:99:CD:46:36:CE:9F:7D
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 019A4E18F34A7913BF6BE83F74BF80375E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number: 1436
Signing time: Tue 04 Nov 2025 09:00:49 +0000
Manifest this update: Tue 04 Nov 2025 09:00:49 +0000
Manifest next update: Wed 05 Nov 2025 09:00:49 +0000
Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=)
2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: vrqPpGWvT0gUKg9Wk0yabeoidgQSMKQBt43AVFWnb50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f3:4a:79:13:bf:6b:e8:3f:74:bf:80:37:5e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Nov 4 09:00:49 2025 GMT
Not After : Nov 5 09:00:49 2025 GMT
Subject: CN=5ea784b95f7d019a6bb8ea24a599cd4636ce9f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:80:c2:31:6b:45:7b:96:a5:bc:39:0b:38:
bf:01:29:1c:96:6d:4d:03:c2:d5:16:c5:36:d3:27:
02:1f:5f:a9:c5:9d:45:c8:30:67:cf:85:6f:c6:19:
9a:ee:47:27:96:12:0c:78:69:01:a0:1c:3a:9a:b1:
43:82:28:5b:6d:13:65:eb:64:9f:c5:06:c5:ea:a6:
ab:3d:44:5b:96:59:cc:dd:c6:eb:70:91:8c:31:20:
f5:5d:68:ba:5b:12:84:ca:c6:83:31:da:5a:3b:86:
3e:3f:2c:68:49:33:47:01:1f:2c:13:6c:3c:a5:44:
dd:02:02:43:c3:e4:ad:3f:da:0f:78:6d:8d:ca:6f:
5b:57:c8:ec:86:c1:14:c0:fd:58:c5:24:39:d0:68:
a9:a2:19:42:7b:18:fc:ed:07:09:c5:24:6d:b1:bc:
2c:7f:26:da:b7:ca:96:98:f5:67:65:3f:30:34:7d:
08:0a:f1:3b:5f:2d:29:ac:58:75:40:f4:89:71:4a:
77:21:73:7e:8a:c5:57:f7:43:e7:10:01:b3:ad:ed:
5b:09:bc:13:b1:4d:25:5c:93:eb:91:43:f2:f6:a1:
d9:e3:14:1e:40:96:1b:d6:9f:0a:3b:97:0c:79:a1:
31:77:96:8e:4b:bc:9e:b9:b3:4e:35:6b:93:5e:11:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:84:B9:5F:7D:01:9A:6B:B8:EA:24:A5:99:CD:46:36:CE:9F:7D
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:d1:e0:e6:e9:1d:c3:2c:aa:35:0e:b4:37:3e:cf:99:34:7d:
c0:9b:46:d7:c3:3a:9b:3e:a5:eb:57:04:1b:2c:71:9d:e1:c0:
c9:87:22:1f:4c:fa:e6:f3:86:26:df:3c:9b:e8:0a:9f:1f:17:
b0:f7:6d:6e:49:82:90:21:e7:9e:2d:ab:6c:30:85:63:a2:5c:
e0:83:9e:06:8f:f4:63:52:4a:0b:8f:73:59:b7:c8:dd:2a:1e:
f4:31:dc:cc:7e:90:3d:35:74:42:cb:4c:fe:e0:9c:a7:a7:a2:
02:25:3a:bb:6c:54:35:89:19:79:1e:7c:2e:ab:a8:87:98:d4:
fa:54:d5:6e:39:0a:8d:7d:13:3c:27:ee:8b:01:16:79:b2:b7:
91:c6:87:bb:f0:8f:cc:83:cb:bb:ad:ed:9b:d2:b3:82:5a:32:
b9:90:56:85:25:7e:82:73:df:df:dc:73:a7:d5:e9:ff:fb:5e:
be:fd:72:d9:8a:4f:dc:ca:a3:08:eb:99:e7:7e:fd:fa:bd:44:
62:73:8e:eb:96:ae:9b:e4:06:a2:26:5c:cf:9d:3e:53:b2:e4:
a3:20:0e:2c:bd:71:15:9c:86:cb:58:ad:43:10:73:c9:e0:dc:
03:5f:4d:ef:1f:d3:cc:62:6c:29:cf:05:36:68:ae:54:9d:cd:
23:34:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:09 2025 by rpki-client