Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: lUCUVPcfET0DcV3B5H5V9K5XUDCD1ehsuUdI9JpPK0U=
Subject key identifier: 01:96:C0:16:75:E6:CE:29:C7:F4:D8:45:81:75:1C:7E:DB:A3:75:E1
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 019A4EF45981F8420F48A8590C498D50DF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 140A
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: GP44a/yJ2vBKcipV8Maviz+ZROmlSh5EFPfkakk+6PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:59:81:f8:42:0f:48:a8:59:0c:49:8d:50:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=0196c01675e6ce29c7f4d84581751c7edba375e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:9e:58:e1:96:ad:24:af:a8:02:9b:e7:e0:
2d:90:43:a6:70:e5:7c:4d:b9:a7:04:d6:20:de:86:
84:76:79:a8:6d:86:16:86:95:0e:30:f5:03:08:bd:
f5:ea:f2:9d:03:df:7b:44:03:a5:16:29:06:de:d3:
fc:4b:e9:09:08:9a:e1:46:d9:ec:8d:74:c5:75:a6:
9f:89:b0:6f:5c:a6:13:bb:60:ad:d4:d0:27:5e:1c:
b9:e1:45:e3:77:aa:1a:ea:07:79:37:d0:87:6c:14:
b6:0a:f5:9f:23:59:3b:c1:6e:fa:e1:7d:6d:25:8d:
bf:fe:8c:3f:07:00:3e:4d:9c:d3:9f:24:f6:0e:af:
62:12:a4:3e:26:57:7a:42:f6:2b:78:1b:5a:e6:1c:
67:ea:0a:49:8b:22:3a:03:09:03:e6:11:4b:79:dc:
26:ed:ff:f2:ee:1c:b8:ef:71:55:74:7e:56:3b:dc:
8c:90:ce:70:aa:f4:02:6a:16:72:55:be:15:67:02:
02:9c:0b:bd:ab:31:dd:64:1a:30:12:b9:55:66:eb:
c8:e6:77:6e:bb:af:ce:3b:b3:39:ff:04:5d:b4:61:
3a:ef:3d:b4:28:d9:70:79:08:0b:ce:31:dc:ed:a8:
44:65:06:64:f3:6a:c2:f4:e4:3a:15:9f:7f:d5:5b:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:C0:16:75:E6:CE:29:C7:F4:D8:45:81:75:1C:7E:DB:A3:75:E1
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5f:d8:7f:a3:d3:85:e4:74:ed:cb:2e:e0:9b:88:10:4f:35:
0b:2f:ec:3c:7d:e9:fc:fd:07:67:ad:c0:44:fc:7e:87:61:d0:
1d:ec:ba:e8:29:8b:67:ef:16:9a:4f:f4:45:d2:10:5a:70:ef:
b1:c8:6d:3f:53:4e:60:22:21:f6:4e:f4:15:75:06:3e:15:df:
ee:f9:ce:e4:51:5f:2b:f7:69:69:d5:4f:12:8a:98:68:11:73:
0e:e8:5b:18:e9:0b:b3:ca:df:c1:c6:18:1e:65:da:a6:bb:da:
34:1a:7d:a3:24:67:12:79:6e:a5:45:d3:ae:39:3b:a3:76:d4:
a2:7e:84:ea:4e:ef:cd:8f:6c:14:8c:d0:45:47:e9:99:7c:b8:
4b:89:71:ea:bd:fe:df:93:1a:6b:73:46:46:cd:36:28:2d:cd:
e3:0a:36:97:8d:81:8b:01:c1:34:85:12:a4:a0:bc:2b:82:37:
0f:13:99:59:ca:44:a4:4f:d3:b0:c3:22:68:23:93:19:34:a9:
8f:57:97:85:28:ef:17:6a:cc:83:31:bc:14:4a:73:da:c1:30:
61:95:e7:31:38:33:c9:ce:af:66:db:04:65:55:55:5a:9b:71:
2e:1b:b1:a8:af:be:d7:a8:4d:e3:57:a1:ae:10:b1:1b:ba:5a:
39:80:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:34 2025 by rpki-client