Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
File: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json)
Hash identifier: 1xZbprBy3GCnr1Y2jN3nY+BRTDxAsq3kHSjItD2zo5k=
Subject key identifier: F0:D4:55:2A:1C:85:3D:64:23:BD:67:CD:26:C0:1D:B1:5B:26:4E:16
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Certificate issuer: /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial: 019A7149BF72DBEDC750C631E474428B86AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
Manifest number: 15D7
Signing time: Tue 11 Nov 2025 05:00:49 +0000
Manifest this update: Tue 11 Nov 2025 05:00:49 +0000
Manifest next update: Wed 12 Nov 2025 05:00:49 +0000
Files and hashes: 1: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: yZcL1KAkJAhx6gqFx8ajyrM3igFtklyJ7yhdb9zdrPg=)
2: l77XDKqfVAj_0QN9hL5E5zPQSwI.roa (hash: JB8S1ZVJbd9P8hIkFLEuRz8lxPAo3SSfvjCCRc2tF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bf:72:db:ed:c7:50:c6:31:e4:74:42:8b:86:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
Validity
Not Before: Nov 11 05:00:49 2025 GMT
Not After : Nov 12 05:00:49 2025 GMT
Subject: CN=f0d4552a1c853d6423bd67cd26c01db15b264e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:b5:ff:0f:e4:a0:41:eb:92:52:f9:8f:a6:
66:0a:10:cf:63:bc:44:21:1f:4d:50:b0:40:93:31:
76:7c:99:44:e3:18:30:8c:c8:35:c2:0b:31:f4:40:
24:75:bb:38:96:b4:ca:cb:1e:75:48:c6:3d:38:38:
80:e9:c2:3b:fc:25:86:d5:52:ff:18:91:63:f6:20:
a3:17:f5:56:8e:d0:69:2b:6f:2f:56:fe:11:c8:8e:
85:92:77:53:cc:dd:33:7c:d4:18:1c:7d:ce:3e:c9:
49:c5:a7:af:41:4a:2d:b7:a4:bf:67:cb:c3:0d:70:
f3:60:03:45:67:49:83:ce:a7:cb:07:7b:79:60:cc:
0a:63:1a:88:c5:1b:f6:f2:d6:e6:93:89:6d:5a:bc:
9b:bb:9a:a2:4a:99:7d:a2:0f:47:2d:af:5d:e5:2a:
a2:d5:27:d9:0d:7f:f1:15:f6:92:15:3c:9e:18:48:
4e:21:6e:ba:9b:c9:f1:96:af:d4:8f:82:a4:1e:cb:
28:27:91:aa:ce:bc:b0:1f:64:c5:00:15:21:42:b6:
ae:a8:e9:b8:1e:c2:61:68:5d:d4:45:b7:59:72:83:
48:41:87:a9:72:2e:1a:e7:1c:1d:6a:99:df:57:c3:
e1:1a:29:9b:8d:a5:f2:0b:a4:b4:de:f6:98:15:71:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:55:2A:1C:85:3D:64:23:BD:67:CD:26:C0:1D:B1:5B:26:4E:16
X509v3 Authority Key Identifier:
keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:38:ed:41:4a:f7:a5:d6:67:d9:82:7e:91:6a:8b:63:57:7f:
da:d6:41:09:75:32:0d:9c:6b:53:2b:44:dd:67:2b:30:13:8a:
5d:8e:57:80:a6:b8:a0:25:2d:63:4a:3b:97:28:b8:52:a8:86:
51:8f:bd:00:c2:b6:8d:fc:11:8e:42:8a:df:7e:29:50:fe:df:
84:28:3a:e6:f5:4e:27:77:12:89:29:f5:da:30:41:f1:63:12:
dc:63:4a:ed:18:5b:d7:2c:4a:16:21:5c:6a:24:fc:27:32:03:
78:8d:15:a2:02:ac:44:af:45:06:ec:8e:5f:de:3d:9e:08:5b:
39:c2:ab:32:ea:2c:65:c9:2b:af:a1:28:71:a5:c7:41:8f:bc:
f8:97:6e:2e:f7:86:0e:b8:fa:40:51:e7:10:d1:51:4e:23:81:
78:15:70:46:46:5a:b7:a3:9f:27:7b:de:a2:86:3d:d5:33:67:
e8:c9:45:1d:0b:68:74:01:56:ae:ef:39:69:60:5e:12:66:02:
97:80:28:4a:e5:c3:6a:8b:ac:0b:b8:e3:52:e6:5a:90:91:0f:
48:62:ba:6b:73:2c:f9:37:e4:a5:f6:5d:5e:31:07:3a:da:86:
22:73:98:b0:4d:41:f6:e4:33:21:55:bc:11:5b:30:92:88:b1:
b0:8d:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:33 2025 by rpki-client