Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: FnhxeqBwV56FZe0Ixbl/ACT2NNjgu3hOh40YQ2DMSBg=
Subject key identifier: 5F:4E:4A:99:C6:8F:96:AC:77:54:E8:36:C0:3B:2D:E2:D1:E9:A6:16
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 019A522C26069E3A9EA7AC43D6948B1C38E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 0177
Signing time: Wed 05 Nov 2025 04:00:16 +0000
Manifest this update: Wed 05 Nov 2025 04:00:16 +0000
Manifest next update: Thu 06 Nov 2025 04:00:16 +0000
Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: FMHPCicR+5wL8ucKU0mzjTyxEXud3uCU8EdZxsHUZOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:26:06:9e:3a:9e:a7:ac:43:d6:94:8b:1c:38:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Nov 5 04:00:16 2025 GMT
Not After : Nov 6 04:00:16 2025 GMT
Subject: CN=5f4e4a99c68f96ac7754e836c03b2de2d1e9a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:72:49:43:9d:c5:03:dc:08:4b:57:13:c6:
3e:a4:fe:98:b2:70:41:cb:7d:98:43:1c:81:03:59:
ec:0a:20:a2:2f:0f:68:81:ec:41:e2:28:73:56:4d:
b1:ce:cd:f9:ba:9b:f2:80:b2:60:89:56:e9:bf:74:
c5:88:9b:e0:ab:83:d1:92:59:1f:9f:b7:32:dd:93:
bb:df:99:a8:82:2a:71:fe:d5:1c:01:be:1e:5f:d2:
30:f8:a2:be:55:b5:6e:0c:b6:4b:cb:51:40:2e:07:
db:3c:b6:40:dc:7b:52:91:71:06:fa:6d:6e:26:56:
ef:a7:8a:45:97:35:eb:9b:c4:cf:ba:48:00:21:c5:
32:2a:8a:af:d9:90:42:c1:cc:b5:00:cf:a8:84:65:
87:84:05:7e:69:06:86:80:d8:5b:2f:3f:ac:92:51:
65:a0:e4:9e:c0:54:cc:c3:02:e3:d1:f0:f9:f1:af:
d8:2c:51:eb:b4:65:94:57:dd:2a:fa:d1:a7:ec:34:
ae:a7:76:7c:fb:1f:d7:82:d4:c5:68:c2:2f:0d:f6:
a9:ba:fa:4b:90:c8:5f:2e:18:c3:5f:79:83:46:39:
0a:6f:8c:fa:ae:c1:28:98:09:41:7c:92:77:bd:48:
98:2e:9b:a5:66:31:fe:30:f8:fd:7d:e3:74:ed:dd:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:4A:99:C6:8F:96:AC:77:54:E8:36:C0:3B:2D:E2:D1:E9:A6:16
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:13:a0:2e:86:48:9d:50:50:ba:0c:0a:9f:54:0f:9f:33:5c:
7a:17:cd:05:18:ea:45:3e:f4:7a:9d:d8:14:b9:20:7d:a3:61:
51:f3:2d:41:48:a0:3e:27:60:ed:f0:e7:a7:4d:c1:90:97:b2:
08:57:e8:14:72:d2:b4:a9:ee:b5:57:3e:12:66:f9:61:f2:09:
ee:a0:45:fc:bd:08:8c:0f:5a:a5:0b:94:18:0e:85:b2:b3:b3:
82:71:7d:7a:3b:e3:4c:ba:b9:23:9e:a6:62:f5:c7:0f:57:f6:
59:72:47:25:0e:45:da:3b:84:21:a8:7a:04:a1:06:33:8a:5d:
27:26:47:ab:8a:22:ae:a3:dc:bc:e8:15:5d:ea:f6:98:3b:1e:
85:d5:bc:75:06:75:33:97:1d:16:51:0a:c5:f2:a8:db:da:cb:
da:8a:bb:10:3e:87:82:8b:66:7d:e0:5a:f3:3a:f3:e7:2d:01:
57:a9:79:28:55:75:20:7e:1d:e8:99:63:2d:40:14:50:0a:45:
bd:79:47:b4:a1:49:71:a4:99:33:1c:53:c9:51:03:9a:30:7f:
eb:8c:25:fd:3d:0a:6d:cc:a3:0d:05:d2:7a:17:a2:af:3a:e4:
83:0c:a8:23:f2:72:12:1b:34:7e:fa:ad:53:6d:8f:c1:d3:0b:
f7:92:81:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:09 2025 by rpki-client