Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File: mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier: y/KvfBUmpQ10SJtn8LJZC42QLnmMXmBCGFRhZ0Kb5QQ=
Subject key identifier: 33:08:70:CC:38:86:8F:DF:E5:A7:D9:74:96:4A:AF:77:42:DA:57:FB
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 019A4EF533B7E6FAF225C9A68856FE03C58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number: 172E
Signing time: Tue 04 Nov 2025 13:01:23 +0000
Manifest this update: Tue 04 Nov 2025 13:01:23 +0000
Manifest next update: Wed 05 Nov 2025 13:01:23 +0000
Files and hashes: 1: GQRzcbGzWvSj3FBVjoQIeOqNNGk.roa (hash: 9iREodFCIhImvgis0W2BigBjZMAhENAEnDzq98vhkcw=)
2: H0P6Uhc2PQuAj9mI5JuLmXDsE-E.roa (hash: lFsz70YXVH8oaNr7AK6yGfw7Y8IvCmN3m4Wget06GNk=)
3: Rwa55-aiWzleQi1HsBZSagHTLqo.roa (hash: 0rSyRYL0K47FYUV+DhbsOlxazMDwyVqW5IEzSPcxljc=)
4: ZDeqr4bzVJZzwb_UfOlQJbn9JTw.roa (hash: 3Blt9qc0qNOTbyRJx5iL7tY6336Yd2GQWHTIQYOz0WA=)
5: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: t8EEzZPUyq7oFGcIOxIm4ka9QBg6zvkhme6oDr6OV8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:33:b7:e6:fa:f2:25:c9:a6:88:56:fe:03:c5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Nov 4 13:01:23 2025 GMT
Not After : Nov 5 13:01:23 2025 GMT
Subject: CN=330870cc38868fdfe5a7d974964aaf7742da57fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:2d:6f:2e:75:8e:68:1e:e8:29:55:00:af:
7a:12:d3:ec:93:5d:5a:65:9a:6f:f0:17:c0:2f:2f:
ac:c4:13:ea:9c:cb:a9:16:3d:d9:75:f2:2b:fc:3f:
d1:78:4d:36:03:8d:2a:87:04:fb:e9:e0:8b:41:92:
34:c5:1a:f8:37:68:98:b5:df:15:75:80:8c:76:7c:
44:af:46:0d:3a:44:87:13:9f:bb:62:82:56:14:d2:
42:57:a6:b1:49:10:81:7e:29:ff:bb:4c:67:1c:81:
38:f6:91:43:88:5d:40:3c:f7:0f:6e:28:0f:6d:da:
7a:5f:7c:aa:2a:1d:62:48:b3:a8:d8:be:80:2b:dd:
92:27:2e:70:98:05:23:fe:e4:ff:20:a8:65:ea:2e:
b1:65:f9:43:b9:bc:54:1b:be:42:8e:f7:9f:bc:42:
68:be:0e:8d:1a:89:df:18:02:c4:4b:6e:5d:d8:19:
f1:6b:da:90:05:22:cd:ec:98:6c:67:08:a8:a2:52:
db:78:1c:72:65:a2:c2:49:68:11:ad:9e:a1:84:ef:
96:2a:1a:54:49:74:55:a8:81:fc:44:26:b1:b8:88:
79:f0:59:e6:1e:ca:83:85:32:d5:1a:d0:dc:a8:03:
87:af:34:b8:c1:07:f0:b5:d1:04:af:23:7d:7d:0f:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:08:70:CC:38:86:8F:DF:E5:A7:D9:74:96:4A:AF:77:42:DA:57:FB
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cd:45:6b:a6:f3:3c:2d:8d:ba:d1:c2:fc:2e:6d:36:d7:d8:
ca:f2:04:38:d9:8b:76:2f:8d:fa:c1:90:49:c6:96:79:15:bb:
88:d5:70:36:99:b7:ef:09:c8:fb:11:40:71:59:68:db:77:20:
3d:ee:31:2a:b4:e3:8b:30:f7:30:7c:f7:71:31:9f:42:0c:71:
01:91:b4:22:99:f3:ac:d2:ed:54:8e:07:3f:cc:18:5c:f5:ef:
28:64:47:f9:08:fd:82:47:ba:74:0d:f5:a8:f9:79:66:42:6d:
b0:2c:d8:66:56:1d:18:60:a4:06:11:57:5c:e6:d3:f5:8d:c4:
d7:3b:29:96:4d:93:b2:57:e8:fd:a0:24:d3:4e:14:82:b2:74:
33:be:c8:cf:74:f8:57:de:d9:e0:c6:24:bd:dd:78:ae:e5:b2:
8c:e2:d9:90:f1:94:c6:cd:96:8b:5a:e3:7b:57:15:c8:46:4a:
96:78:bc:bc:0e:61:20:9e:89:56:ed:66:5b:39:8b:6c:11:dd:
36:13:6f:d6:20:bc:95:da:a6:76:d8:c4:55:71:fe:74:23:d8:
8c:58:5a:02:8d:53:53:b0:c7:6a:93:6b:7d:82:d1:74:0d:4e:
b3:cc:30:97:51:38:61:89:a7:22:67:e8:d6:70:41:11:58:9c:
69:4b:66:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:58 2025 by rpki-client