Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: Wk3wBc3y2hml2arvWisVHFlzfRh0xkANniQrHki0FPU=
Subject key identifier: 5B:DF:41:A4:DB:96:D0:7E:C7:8F:E3:64:BA:8C:86:FA:CC:64:7C:16
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0199C4FB7BFE0B4DCCEECCB61D5B909CB187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0C4F
Signing time: Wed 08 Oct 2025 18:00:39 +0000
Manifest this update: Wed 08 Oct 2025 18:00:39 +0000
Manifest next update: Thu 09 Oct 2025 18:00:39 +0000
Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: FNkgG3lYLC3oeayMyP5gxPDSurZwnLfTCQz3AdetGxk=)
3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:7b:fe:0b:4d:cc:ee:cc:b6:1d:5b:90:9c:b1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Oct 8 18:00:39 2025 GMT
Not After : Oct 9 18:00:39 2025 GMT
Subject: CN=5bdf41a4db96d07ec78fe364ba8c86facc647c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:99:82:4f:1e:43:0b:7d:c8:8c:76:06:ce:
b3:fb:ef:92:01:a8:bd:9a:5b:32:ba:fa:4f:ab:e8:
7b:f6:b3:a2:2d:7c:a4:1e:6b:16:31:21:ee:b7:23:
a2:67:a8:c0:83:29:38:38:6b:98:c8:3a:c1:fb:70:
1e:bd:d9:91:b4:40:4c:28:b0:57:f1:84:41:27:e1:
4b:4e:0a:38:d1:38:31:73:28:65:88:fe:46:ea:bd:
23:50:bb:2d:56:dd:99:95:fa:4d:f5:00:81:b6:a1:
6c:00:e1:ba:b8:c3:39:cb:73:e2:c3:26:cb:fc:1d:
42:6f:9f:4c:d3:6f:61:a5:6d:c0:16:5b:a1:e9:85:
08:75:30:ce:57:c3:96:f9:da:94:1b:18:a0:68:43:
f0:d3:6e:43:d8:9f:31:69:e6:0b:08:70:59:20:23:
9d:71:54:e2:15:e5:13:6a:8c:88:30:b7:cc:24:6b:
38:e5:fa:7b:d2:30:5f:df:a5:49:75:b4:de:e2:ec:
91:a5:4b:1a:2a:11:8f:6d:3b:aa:22:e8:a8:48:d3:
be:ea:36:2f:6e:f7:a8:d0:be:90:23:88:95:82:4a:
4e:4d:01:7a:65:9f:98:cd:60:af:2a:e7:5d:1c:72:
c7:6f:e0:cf:a5:69:27:d1:2c:3e:91:d9:e0:7a:32:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DF:41:A4:DB:96:D0:7E:C7:8F:E3:64:BA:8C:86:FA:CC:64:7C:16
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a0:8d:1b:33:a1:98:58:85:e5:07:de:da:9b:60:70:f8:ec:
49:92:b7:df:4f:d0:81:c0:55:b3:90:8d:d8:d0:fa:e6:7f:33:
1c:0e:c3:e5:bf:81:c2:90:bd:97:b8:2f:3b:cd:d8:20:62:9e:
94:15:f1:f5:6b:92:f9:58:bf:67:74:10:85:e1:dc:06:ce:d7:
05:0a:af:6e:ff:02:0d:1f:15:83:eb:3e:4b:cd:45:d7:63:f8:
c3:ed:fa:81:4e:28:44:f7:06:0a:40:b8:53:08:7e:3e:db:7e:
84:a4:ac:88:b9:dd:96:f0:fe:7d:d3:11:0c:22:dc:ab:2a:42:
63:fe:05:fc:e9:34:68:e3:c7:cc:8c:56:04:f3:5b:99:48:ce:
8e:69:38:34:6d:78:f0:fd:2e:83:a1:0d:44:b3:01:a0:dc:e5:
31:35:75:28:c2:e8:9b:65:a5:95:72:cb:8e:3a:c1:bb:aa:4f:
68:a7:12:b3:06:9a:09:96:7e:0e:3b:9c:30:62:a9:d4:36:7c:
c2:83:c3:22:f0:82:59:54:77:4a:ff:2b:89:ab:1c:8b:95:cc:
0e:7a:e5:be:f9:85:d7:af:f8:5a:bd:93:7b:9e:ef:36:8a:b9:
6d:5c:22:71:0d:10:a9:7a:56:40:e8:43:02:01:90:fc:f8:ec:
8d:04:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:29:59 2025 by rpki-client