Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: tZxhKpPgitryIqIpDmxFGjTZvCkW913ONs4uFa/kQog=
Subject key identifier: BB:0C:23:04:1F:73:6F:02:AC:FC:16:8C:3A:90:08:70:3F:0D:23:A2
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019A4F2B9B0073B0D366B3078A90F9CC819E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:49 +0000
Manifest this update: Tue 04 Nov 2025 14:00:49 +0000
Manifest next update: Wed 05 Nov 2025 14:00:49 +0000
Files and hashes: 1: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (hash: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=)
2: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: n6/cjMU4wa24HfAZyACMTUPUFnKN8dpIYXM9GwNFZc4=)
3: sfQ3GEtYzhBBWxqpfOQ0GcKpsbY.roa (hash: wrk4xF0OxGaC9MkY6FPvwbKzU+JxYtuzUOz5b0tcuxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:9b:00:73:b0:d3:66:b3:07:8a:90:f9:cc:81:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Nov 4 14:00:49 2025 GMT
Not After : Nov 5 14:00:49 2025 GMT
Subject: CN=bb0c23041f736f02acfc168c3a9008703f0d23a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:75:b8:a4:74:34:44:52:1f:2d:dd:62:e7:
9f:f5:82:d0:32:89:30:48:e1:9b:2f:13:8a:77:bf:
42:23:74:b9:5b:6e:63:89:6b:32:3e:f0:a5:e8:b9:
9b:9a:b0:a0:91:16:e1:94:e7:4e:42:6c:88:a3:32:
50:15:3f:8b:07:88:f3:1f:75:45:af:b7:4a:32:f9:
05:56:6c:3a:b4:d6:81:75:ad:3e:d8:7f:cb:fb:90:
3c:d8:b3:ef:3f:84:f6:3a:62:d9:80:6e:92:04:ba:
1f:e7:16:8e:93:62:a4:d7:9b:89:e7:cd:38:64:f4:
f2:0a:6f:ee:7c:8a:51:a7:d5:13:64:90:04:30:53:
76:7a:4e:93:91:a5:4b:db:4c:60:d3:42:07:ba:fa:
d5:fa:05:16:6f:f0:6e:cb:2e:cb:c4:07:ea:27:37:
5e:1a:57:b8:26:21:e0:83:5e:57:d7:2f:30:01:38:
f3:d0:af:58:55:0e:40:42:42:b1:d3:03:51:c9:04:
51:d0:a4:fe:cc:9d:bd:dc:01:af:7b:66:dd:60:48:
e0:b3:81:3b:9b:ee:93:f0:f8:ac:12:03:70:ad:8e:
3a:e0:c2:0b:29:14:d9:a2:91:29:0c:46:d0:d5:1f:
99:8b:75:92:ac:f3:af:44:9d:b4:56:d1:e2:c0:15:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:23:04:1F:73:6F:02:AC:FC:16:8C:3A:90:08:70:3F:0D:23:A2
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b7:d5:89:b4:59:77:76:1c:32:91:75:73:fc:2a:a8:c1:a8:
7c:db:c6:55:93:d7:5d:8f:a4:ce:73:9c:0f:4d:73:ab:57:f9:
33:54:00:fb:76:bc:87:f8:f4:43:25:29:06:58:a8:3d:cc:4b:
18:6b:17:ce:5f:33:92:e6:45:51:4d:4b:3d:02:ce:bc:0b:57:
a5:0f:33:e6:a1:33:cb:a2:ca:96:2c:c3:4c:e6:55:31:22:73:
ae:f1:ce:b0:23:cf:c7:97:37:d7:2c:c2:84:c6:8c:f7:59:cc:
3e:01:16:ea:69:29:18:78:54:a7:95:44:17:0e:2f:6c:9a:23:
f0:62:93:2d:a1:b2:16:b2:17:9a:5d:99:f4:09:36:ea:44:98:
2a:73:26:7d:2d:38:3c:44:f1:6c:41:74:56:7e:b6:d0:fc:f2:
e7:e9:9e:8b:20:57:c6:9d:af:92:b1:f6:b1:4a:ba:6f:e9:f6:
e3:1c:28:c0:19:d3:3a:32:21:d5:f0:89:eb:e1:17:c3:a3:4e:
c7:ef:ba:92:da:75:82:b0:08:92:83:2e:89:fc:58:75:74:f9:
98:b1:82:1a:80:52:50:00:67:9b:35:9a:dc:eb:58:fb:9c:54:
f6:2d:d6:59:d3:0b:fd:ef:40:80:e8:02:30:e8:e4:7f:4b:d1:
14:5d:29:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:36 2025 by rpki-client