Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
File: RMrauRpreaMhYYgHxnibKxyYI3g.mft (raw, json)
Hash identifier: s5nb15wPWa4YqgdpuuwgOPrcu1LVCHk0FEEr7ybhsMU=
Subject key identifier: 74:D4:7A:A0:DA:A3:51:F1:E5:66:BB:02:D0:56:9B:37:96:36:FE:75
Authority key identifier: 44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
Certificate issuer: /CN=44cadab91a6b79a321618807c6789b2b1c982378
Certificate serial: 019A725C60B5EDFF9F5888D08F7DED3E7A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
Manifest number: 11CF
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: RMrauRpreaMhYYgHxnibKxyYI3g.crl (hash: ApNQMI904YqhK4pDsV4FSYhch/TlvSoe8GMMMbb9Zbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:60:b5:ed:ff:9f:58:88:d0:8f:7d:ed:3e:7a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cadab91a6b79a321618807c6789b2b1c982378
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=74d47aa0daa351f1e566bb02d0569b379636fe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:60:d7:97:97:dc:fe:5a:c0:7a:83:16:10:1d:
aa:bb:6a:5d:3e:1a:46:b1:86:30:b8:11:92:22:95:
bc:aa:c1:14:45:f4:c7:a4:d4:30:8e:f8:df:35:2d:
b2:6d:8f:67:ae:38:21:41:17:ca:c1:b5:70:39:d2:
23:42:55:da:e8:19:d3:9c:9a:89:89:fa:23:78:d4:
6f:ab:74:a5:07:55:3e:f8:4b:3e:d1:a6:bd:70:d3:
c0:d0:03:6f:47:52:0c:53:89:21:60:ec:92:04:1f:
fc:20:a0:36:c6:ef:53:24:6c:bb:23:8c:a3:e7:bf:
ca:37:26:f7:cf:cb:82:8f:94:75:75:c0:ba:80:83:
bd:42:f3:be:80:c6:60:ff:7a:16:75:6b:42:62:2a:
db:2d:b2:a7:f8:9d:b2:72:d0:5e:85:7b:c9:31:39:
2b:ed:7e:b5:9e:a6:1b:6e:84:32:63:a8:94:28:77:
53:a3:83:cb:16:da:b4:8a:75:be:79:e1:d7:2d:43:
05:5b:7a:a9:13:db:a6:c9:61:d2:04:93:4d:be:83:
5d:89:59:20:a9:53:fa:e7:09:06:fd:46:97:03:ec:
2a:9f:df:65:58:0d:ba:18:17:80:00:16:0d:25:2f:
93:de:15:24:69:9c:72:54:14:c6:c6:eb:57:20:1c:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D4:7A:A0:DA:A3:51:F1:E5:66:BB:02:D0:56:9B:37:96:36:FE:75
X509v3 Authority Key Identifier:
keyid:44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7d:12:75:16:9d:85:bb:99:8f:c7:40:d7:37:6d:b4:92:aa:
be:9b:ba:05:04:9d:2f:c6:53:61:02:4c:71:a6:15:74:1b:7a:
27:ed:9c:a6:b7:df:c0:5a:8d:50:42:c9:ef:36:f1:ab:3e:74:
b6:26:4d:a7:73:15:54:bf:8f:d9:58:4d:10:10:5f:7d:2a:e7:
6a:c1:85:32:51:53:f7:b9:9b:56:11:64:45:1f:1c:dd:1f:72:
16:12:a6:52:7a:35:8c:c7:57:49:fb:ff:57:b0:94:fc:39:26:
fd:bb:c5:0a:85:6f:1d:27:26:2c:bc:f5:44:75:a1:f7:b6:61:
0a:f3:bf:6c:d2:f8:98:30:f2:d3:bf:6c:34:dd:ed:15:b9:22:
80:8c:53:83:83:c5:54:f9:75:77:c0:16:4a:99:8b:23:dd:b4:
eb:02:a3:cc:0f:f1:97:fb:7a:98:6c:d8:b5:72:a4:71:20:e9:
a5:f5:09:78:8d:ca:55:93:9b:f7:80:2d:0a:ef:f7:8a:f0:a5:
e2:13:4c:6a:9c:ef:48:5f:b4:be:27:8b:fa:34:db:0b:4e:10:
f5:60:9f:87:26:fa:ba:53:50:d7:b1:98:bb:f1:a3:e1:06:c2:
3f:5f:0b:f3:7a:9f:b4:77:d7:c5:0c:55:e4:ae:13:73:35:4f:
82:9b:b7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:24 2025 by rpki-client