Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: Fha2x+nPblx/LCN9c5nm4zsLjimqXO/EJ+7axz7DNHs=
Subject key identifier: E8:0B:9A:77:3C:30:4C:06:77:94:7C:E2:CA:47:F3:44:E3:FA:56:9B
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019A4D07ACA91E83276D4A7EBAFE8270539D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:02:19 +0000
Manifest this update: Tue 04 Nov 2025 04:02:19 +0000
Manifest next update: Wed 05 Nov 2025 04:02:19 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: QcA/lGNVr0GybTmSqMoSTNviZQz0g70PnHUwKQk7+ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:ac:a9:1e:83:27:6d:4a:7e:ba:fe:82:70:53:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Nov 4 04:02:19 2025 GMT
Not After : Nov 5 04:02:19 2025 GMT
Subject: CN=e80b9a773c304c0677947ce2ca47f344e3fa569b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:da:ea:b6:07:e2:60:5e:08:3b:6e:75:b7:
f7:51:d4:71:d7:0f:40:87:13:53:11:9f:c3:40:79:
6c:0a:5a:59:f1:27:56:a4:d8:0a:6c:f2:2e:4a:9a:
42:f1:c9:26:77:bb:9a:e2:16:e0:c1:66:23:0b:7b:
a0:a7:8a:85:7d:0e:8c:76:71:90:38:f2:98:d4:b1:
46:38:64:a4:2a:a3:35:40:ff:55:b8:44:68:3c:7b:
be:a2:a5:4e:0b:77:0e:aa:37:05:ac:a2:16:19:9a:
9b:5b:ae:68:6c:be:1d:29:a0:c4:3b:63:b9:6d:b5:
92:b9:4a:72:ac:12:c2:c0:9a:73:28:18:29:63:08:
6a:62:5d:65:52:59:77:d6:31:0d:e8:3b:a1:fe:b5:
4a:68:3e:73:93:72:b8:44:5d:61:90:6b:b4:94:09:
92:5a:50:47:7d:d4:2a:d1:65:c6:c2:4f:28:38:c0:
3e:21:e5:eb:30:07:b7:6d:1c:9e:b2:36:a7:b0:73:
89:79:0a:ef:56:ab:b0:a5:38:87:e1:05:76:67:79:
dd:58:31:98:ab:f7:82:7c:08:66:a3:70:a3:dd:5b:
d3:40:ad:f8:77:3f:4a:2f:79:71:cd:38:e5:d7:e0:
0a:16:cd:67:96:59:ed:eb:26:55:b9:79:7f:f1:5a:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:9A:77:3C:30:4C:06:77:94:7C:E2:CA:47:F3:44:E3:FA:56:9B
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:71:82:0f:0a:51:68:06:46:dd:46:4f:ab:0e:e6:a2:e9:af:
ec:9c:0c:9d:53:db:33:15:1b:4f:55:a0:7b:cd:53:29:6b:8c:
6d:76:6e:2b:14:e7:94:d1:6d:36:dd:78:72:66:2b:86:37:d5:
ea:8d:d7:f6:09:d5:cd:4d:0e:04:a9:74:34:8a:87:13:66:2a:
36:c2:d8:83:f6:21:d4:13:e9:2e:16:8a:e3:64:82:71:cf:3e:
c4:1c:ae:db:cb:6e:f3:ba:d4:2e:10:8f:0b:67:a2:50:b6:28:
53:bb:76:66:32:e7:02:a8:99:de:ea:fb:4a:d1:73:e9:c7:43:
23:65:7a:34:45:24:85:90:48:55:01:cf:24:64:58:3f:60:40:
f9:6b:21:f6:9e:d3:b3:97:4e:5d:ca:b3:e2:fd:39:00:de:2b:
63:8f:f4:63:eb:0c:f5:2c:4c:06:3b:66:47:ab:f8:4c:b2:43:
1a:86:c1:e5:79:09:3c:b5:62:0e:fb:84:aa:14:61:3b:27:75:
03:b9:0a:d0:d7:19:00:42:2c:04:85:f9:e4:0b:8e:1f:4c:45:
7b:5e:47:7b:ed:0f:22:af:24:53:9b:08:c6:d9:a5:07:d7:cd:
84:fa:56:18:d8:8f:11:97:a9:01:39:cc:e5:d9:d6:49:e3:ad:
cf:8d:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:30 2025 by rpki-client