Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: xP+q69GKFRrnpktIWPlq+1xFO6f0ihrs6QZsgocTrlA=
Subject key identifier: 2C:7B:FA:E1:F4:DC:CF:38:27:4C:9B:51:57:AC:B4:78:8D:1D:D1:EF
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 019A54F6DCACBF900DD67430C60063B5A2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 025B
Signing time: Wed 05 Nov 2025 17:00:55 +0000
Manifest this update: Wed 05 Nov 2025 17:00:55 +0000
Manifest next update: Thu 06 Nov 2025 17:00:55 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: LURE0IguzJxHVQYmcPY/Rxw0wEZ/4ZvCUTFM2jI7x5U=)
2: IcIhqkwJl3oIn1TFze0JKC2ukZo.roa (hash: N9HPji4dA8H0kkRU9JW+TERsQXqgse1gQnpLkAfBwZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:dc:ac:bf:90:0d:d6:74:30:c6:00:63:b5:a2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Nov 5 17:00:55 2025 GMT
Not After : Nov 6 17:00:55 2025 GMT
Subject: CN=2c7bfae1f4dccf38274c9b5157acb4788d1dd1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:49:9a:6f:5e:c5:01:b9:15:84:e9:28:dc:
42:83:da:b2:9d:54:5f:36:95:54:ab:29:99:78:63:
f9:69:be:d3:a2:69:6d:a5:c7:09:44:b0:93:5a:cd:
a7:c9:7c:97:1e:3c:fc:ff:1e:e6:c1:98:5f:47:e6:
5e:00:19:24:cd:87:da:a8:0b:50:ad:fa:55:7f:e9:
eb:a4:c1:cf:df:45:d5:69:c8:e0:38:65:98:ef:d2:
65:cf:be:d8:be:47:2e:cb:3a:25:d3:1f:20:4f:4b:
53:4e:c6:17:7b:74:46:2e:98:46:da:14:d4:ec:2a:
0b:a7:e1:c1:0b:ad:6d:05:a6:31:58:4f:3e:ad:8e:
25:93:aa:40:14:a3:5f:9b:a6:16:8b:ce:f7:20:40:
01:37:13:d6:08:20:85:ac:1d:21:c1:bc:21:f4:5e:
69:44:9e:18:66:ee:e5:a2:c6:e6:33:d1:ea:ec:06:
05:ad:74:d4:ec:6f:d0:69:50:bb:e3:93:b3:de:85:
ca:db:e1:97:99:6f:74:92:45:b9:7b:47:ff:9b:24:
94:e9:4d:07:b5:ef:80:9e:b1:37:d4:36:3d:ea:a4:
e9:6f:12:da:b1:ce:57:6d:a0:a6:9f:fb:f1:cd:9d:
b2:b3:c9:bf:83:35:fb:69:58:b8:a7:59:31:b8:04:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:FA:E1:F4:DC:CF:38:27:4C:9B:51:57:AC:B4:78:8D:1D:D1:EF
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:3b:13:bd:30:1c:0a:7d:5e:43:d0:71:8b:c9:f5:8d:08:
46:55:7e:cc:84:ab:0d:3a:51:1a:cd:9e:90:19:1e:1a:7e:71:
cb:3c:40:00:8e:d7:10:99:a1:b6:d5:7f:30:66:81:a8:cd:de:
55:bb:d2:d0:22:38:f7:54:aa:e8:74:e8:56:90:b5:00:ea:b6:
c5:2b:dc:b2:5d:ad:50:47:7a:47:0b:84:cf:e1:40:11:18:4f:
16:d4:a0:93:24:b4:fc:a1:31:0c:3b:f4:2d:1a:1a:af:01:7d:
e9:6b:95:50:ab:f9:39:e0:c6:19:cb:21:cd:e8:ee:8d:fe:de:
a9:8d:26:b7:ae:30:15:71:f9:db:35:6c:45:2b:35:82:6e:a5:
a6:98:25:43:36:1e:f7:19:a9:4a:92:53:84:af:89:14:9b:bc:
52:88:31:6e:79:cb:02:d7:b1:04:dc:2e:d7:55:5d:e0:cf:0d:
1c:11:a7:75:82:25:26:f7:1c:b1:7e:98:2c:57:74:47:e8:2b:
2b:c5:4a:fb:07:1b:c5:8d:2b:8b:8d:d5:6a:74:df:ce:73:8f:
48:18:83:76:dc:b6:59:da:26:64:65:26:fb:0b:e3:33:0d:9b:
2a:08:49:2d:21:30:3c:a6:f2:c1:98:de:ee:bc:8f:14:a1:63:
cf:1a:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:06:50 2025 by rpki-client