Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
File: mnCwUeXN-WLbwms1JIjQgxvfmjw.mft (raw, json)
Hash identifier: 88EroN7v9kiAuniZ/dxc9dNUfz8EVvfDKaY9e6DideQ=
Subject key identifier: 10:35:8F:13:90:12:0E:90:B5:DF:42:D1:22:88:8E:F0:EF:19:2D:38
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Certificate issuer: /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial: 019A530802609B2C367AC9CED82EAC0D235D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
Manifest number: 13C8
Signing time: Wed 05 Nov 2025 08:00:25 +0000
Manifest this update: Wed 05 Nov 2025 08:00:25 +0000
Manifest next update: Thu 06 Nov 2025 08:00:25 +0000
Files and hashes: 1: ApYo8usd2f87kfxBSCL43GkwNl4.roa (hash: HVht7PktvVlX5vG6maaHsCCbjpS8pRttM16W+m0bt9g=)
2: Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa (hash: FmxP6Uz7faOa7pJaYu4u/4WUOpulDOhau3FqT5C1MnI=)
3: mnCwUeXN-WLbwms1JIjQgxvfmjw.crl (hash: tPocJSaXz/gIwqdYJDc70FH/+3KgzgfindLNhFCbiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:02:60:9b:2c:36:7a:c9:ce:d8:2e:ac:0d:23:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Validity
Not Before: Nov 5 08:00:25 2025 GMT
Not After : Nov 6 08:00:25 2025 GMT
Subject: CN=10358f1390120e90b5df42d122888ef0ef192d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:6a:6a:0b:05:2b:e8:72:43:d8:e2:6e:c2:
ac:80:dc:4f:c1:5d:5c:3e:b9:0b:97:dd:aa:81:1c:
eb:62:8e:2e:f5:95:e8:18:f3:06:a5:4f:a9:5e:70:
93:b2:19:c1:9d:f9:75:df:76:5d:50:26:fb:27:0e:
fe:b6:c0:99:85:16:6b:b5:5d:ee:63:a8:bc:2d:0d:
c3:4f:7c:f6:58:c0:fd:b2:0a:cc:80:29:eb:dd:74:
30:c8:c0:01:4b:74:75:9e:31:60:08:df:d1:cd:2f:
51:f6:af:08:0d:50:05:3b:6c:03:e3:40:da:fb:26:
9f:f6:a7:fd:88:4f:84:26:3f:46:3e:1b:0d:37:0c:
da:45:1d:43:63:b3:02:23:f4:b1:63:a5:9a:45:93:
6c:3d:3e:8f:74:dd:65:72:b8:e2:b2:11:d8:59:93:
49:57:cb:eb:19:b0:db:2d:f7:de:8c:bc:92:2f:2a:
5e:21:c5:66:e8:15:04:64:a3:31:16:9d:f1:eb:62:
37:0d:7c:e7:6e:73:54:63:22:d6:39:52:b2:2e:de:
eb:6c:67:a7:a5:3a:55:7f:f5:85:01:72:59:0f:b1:
c3:3d:f2:bf:b9:55:de:a1:87:79:b9:19:1d:04:03:
50:69:d2:ee:27:68:7c:90:9e:0d:4b:cb:8f:4d:e3:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:35:8F:13:90:12:0E:90:B5:DF:42:D1:22:88:8E:F0:EF:19:2D:38
X509v3 Authority Key Identifier:
keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9b:4c:ea:4a:80:f1:8b:83:7b:dc:ae:f0:8d:16:65:7a:76:
0b:22:ce:b1:9a:9c:44:be:02:0f:1f:ae:e9:63:37:fb:3e:bd:
e8:46:93:82:16:a7:dd:ec:69:25:d4:84:cd:b3:c0:df:12:26:
6f:64:09:14:44:2b:2a:55:5e:8a:43:c1:7d:5f:c3:ae:ca:fb:
a8:52:aa:b3:a3:f4:c0:4b:54:5b:12:70:a5:ac:a7:78:ae:8f:
2b:0d:82:95:f9:b6:bd:1d:7e:8b:37:d6:a1:ae:00:17:3b:5c:
c1:4e:c6:70:54:70:83:a1:37:70:22:85:f7:f2:9a:18:51:b1:
e4:a3:30:40:85:e8:99:4b:37:22:e9:b2:9d:ba:ef:7c:6c:2c:
10:81:a8:b3:9c:cc:77:7c:4b:50:c9:5e:2c:24:d1:4f:58:21:
dc:47:05:00:ab:3d:df:ab:9e:25:2c:4d:1e:02:5a:99:f3:be:
58:26:72:02:c9:cb:28:cd:0b:b1:9a:44:7d:10:2e:92:5b:07:
33:74:e0:bf:fa:47:18:e8:6a:4e:8f:24:85:2c:76:87:f5:f7:
84:76:f9:d5:26:17:b9:55:ac:4d:32:c2:82:45:42:c9:52:2f:
d7:28:aa:a7:66:a8:71:32:6d:28:2b:cd:21:6e:13:bc:9e:22:
2e:d9:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:36:17 2025 by rpki-client