Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: BsyzevXoZW+turyzL39FX04R/hmKFhonMOTc2ZTpxXM=
Subject key identifier: 92:D4:36:4E:68:ED:AF:28:B3:3E:4D:D7:16:AD:DE:3B:B0:B7:2B:11
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 019A4FD07E60F595F91612A8568BC0A1E718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0D22
Signing time: Tue 04 Nov 2025 17:00:55 +0000
Manifest this update: Tue 04 Nov 2025 17:00:55 +0000
Manifest next update: Wed 05 Nov 2025 17:00:55 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: MY9ivzpKagqUIxtNl9cGgrnKxOP31S3wIQbhkfnerRI=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:7e:60:f5:95:f9:16:12:a8:56:8b:c0:a1:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Nov 4 17:00:55 2025 GMT
Not After : Nov 5 17:00:55 2025 GMT
Subject: CN=92d4364e68edaf28b33e4dd716adde3bb0b72b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:6a:bc:c6:e2:9c:56:2b:8c:99:0c:ce:99:
ba:9d:a4:ad:58:f2:46:08:8d:83:9e:83:0a:93:c5:
b6:6f:b1:ec:df:fe:45:bb:9d:1d:81:4d:49:0e:0e:
c9:04:12:0a:a0:76:a3:70:cd:93:35:b0:c5:21:fe:
5f:0e:91:34:c9:e2:fc:c5:0d:40:fd:f1:26:04:e9:
c6:77:cc:47:91:3e:f0:fe:91:f7:95:f2:3d:10:8b:
5c:a5:7e:59:b7:ec:cf:13:c2:58:a7:1e:8e:e2:1d:
af:ed:89:4b:c7:6a:e2:92:6e:3b:26:1e:ea:ad:ab:
7a:87:67:35:ad:51:1b:fe:83:3f:5e:06:07:6c:bc:
ed:88:0f:ac:ee:09:e5:0e:fd:04:39:8c:8a:d2:c1:
75:25:ce:0c:c8:a3:f5:9c:c9:2d:0a:c7:46:6b:d0:
89:7e:9d:2e:06:7f:17:9e:25:c2:5d:bb:c1:3e:f9:
87:a9:a4:85:e9:b1:9a:81:da:f9:3c:33:39:62:ed:
60:44:b7:41:a5:47:a5:1b:90:fb:b7:ae:80:66:a9:
27:b4:06:01:a5:38:c9:95:de:eb:1d:0f:9b:c6:62:
b5:29:b5:00:56:a8:5f:fa:94:8e:4f:83:01:f6:33:
ff:47:cf:77:31:1a:92:ef:e8:b9:b3:08:e0:53:51:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D4:36:4E:68:ED:AF:28:B3:3E:4D:D7:16:AD:DE:3B:B0:B7:2B:11
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d6:a7:e4:10:7c:53:74:df:af:e1:6e:d5:47:9f:db:a8:9f:
27:54:4b:86:f3:c7:f8:25:ae:4f:1d:a9:61:ad:f6:87:9e:21:
a8:3d:c3:bc:a8:ab:d0:8b:d5:6a:84:50:d8:32:ae:6e:d7:ce:
7b:c5:55:81:53:66:24:13:ae:d4:b0:de:f1:77:65:94:9f:a1:
7f:b6:73:5f:7e:bf:ad:1c:de:84:64:0d:7d:5b:25:68:b5:b9:
a8:95:0f:5e:c3:ca:9a:f1:5b:9b:6a:30:03:02:7a:e5:e6:b8:
85:50:ab:65:43:d9:7e:35:c4:f7:1c:75:ba:45:cc:3a:ba:a8:
77:35:86:50:81:fb:e3:37:92:4f:f5:a2:a5:b9:a9:e8:a4:f5:
cb:d9:1c:52:d4:c7:68:99:91:41:c5:8e:63:8e:4d:b3:6e:6c:
f9:49:59:31:91:24:c1:7d:67:9c:f2:a4:3a:0a:76:75:9a:0f:
48:2b:77:92:71:74:28:65:e7:a9:75:f0:8f:24:e1:ea:38:39:
18:6d:5e:1c:b2:9e:cc:d7:68:f1:87:28:5d:c2:6b:18:83:6d:
26:81:d7:81:d7:fd:83:c9:51:d0:27:26:ce:40:97:ce:1a:e3:
14:15:af:e9:87:a4:7f:87:c6:1f:22:3f:3d:af:05:a1:d1:ca:
43:7c:f6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:39 2025 by rpki-client