Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: Am+6ciOwqkrV2xI/r/Qljm/z3iDvz27bbgWeLYiiW0c=
Subject key identifier: 97:DF:05:88:E4:4E:1C:DE:58:AE:EC:8F:3F:DE:6D:CD:BF:F5:FA:FE
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 019A4F624408188F21D071EB1093BC2C72D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:30 +0000
Manifest this update: Tue 04 Nov 2025 15:00:30 +0000
Manifest next update: Wed 05 Nov 2025 15:00:30 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: YbWkLxBkosQL6a0jD7vEphljr7H0Y/qSy6njBTILUDQ=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:44:08:18:8f:21:d0:71:eb:10:93:bc:2c:72:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Nov 4 15:00:30 2025 GMT
Not After : Nov 5 15:00:30 2025 GMT
Subject: CN=97df0588e44e1cde58aeec8f3fde6dcdbff5fafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:9e:79:f0:c8:05:60:bf:b8:67:00:7f:b9:
2b:99:92:a2:6e:74:89:3b:b1:6f:41:1b:36:c5:56:
e9:9a:b9:b8:5a:60:3e:09:83:96:9d:5a:fd:5c:0a:
a3:e9:83:8a:67:18:a5:07:7d:e2:b3:eb:cc:44:97:
ec:84:a5:3d:28:dd:41:19:8e:95:1d:28:38:05:bf:
04:8c:cf:01:a8:3b:08:3c:ff:cb:3d:ac:67:38:4e:
f2:69:92:ba:88:f8:65:38:c3:64:bd:c2:d6:68:8f:
c1:0b:4d:df:d0:8c:89:e2:57:29:6a:29:9e:77:de:
29:a6:0d:69:b9:a5:2a:60:09:5e:e0:27:f1:f3:3c:
9f:e9:8e:d2:26:5a:4d:87:b2:c6:f6:e0:f4:b2:e1:
d1:1d:63:87:22:a1:44:19:fb:5b:2a:26:1a:b3:49:
30:e4:d9:67:dc:1e:45:05:76:5e:84:6d:cc:de:61:
62:59:4a:6f:af:74:c3:63:2f:cb:63:05:0a:2e:f2:
81:e8:7e:4e:c0:02:48:2e:70:6c:d9:9b:15:a9:7e:
e5:62:c8:f4:18:a0:84:a6:73:6f:29:63:fd:31:24:
7e:d5:40:47:fb:f1:b9:29:a8:14:93:e5:a4:7e:46:
6e:07:35:19:f7:f6:9e:ae:dd:d8:73:1b:a9:7d:16:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DF:05:88:E4:4E:1C:DE:58:AE:EC:8F:3F:DE:6D:CD:BF:F5:FA:FE
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:4c:1a:24:ca:97:06:13:91:30:b8:c5:1a:f1:b8:33:05:
f8:a3:17:62:ac:9c:f3:70:e2:f8:44:67:42:e2:b4:46:1a:0a:
a2:60:17:e1:d7:ce:eb:7e:38:ac:4d:ef:a5:3f:cb:bd:58:ea:
10:14:1b:3a:28:fd:3f:cb:d1:21:cb:64:de:ee:63:c0:a1:6e:
b8:5a:86:aa:dc:db:1f:bd:9b:87:d2:9e:33:40:8f:7c:53:fa:
84:87:fe:10:e4:a3:12:91:be:a1:5b:ee:2e:8e:fe:87:db:e2:
0d:29:aa:4d:b2:a3:30:ca:a5:f8:9f:17:b6:91:15:4c:43:52:
46:60:d2:8b:ec:9f:05:fb:f4:aa:16:64:ed:13:06:13:91:e0:
22:87:85:6f:bc:62:44:95:70:09:b0:f8:2b:92:a9:4b:89:e2:
f8:40:1e:57:a5:72:87:9c:2b:03:3a:67:b0:19:02:6f:f5:2c:
72:58:7c:f8:00:87:ac:a1:d3:70:87:fb:62:e1:d6:48:c8:21:
6b:72:a5:dd:d7:4d:6d:5d:5e:36:ab:57:b5:4a:62:5d:b9:7e:
a2:85:d8:4f:ca:58:2f:e5:63:20:f1:ba:53:6a:7b:60:bb:f5:
d4:d4:80:68:7a:06:a0:fb:fd:ef:d3:de:0b:d5:84:b9:23:58:
86:91:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:31 2025 by rpki-client