Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
File: mNtTOItvp7HlovTGhjq3Hxz7VRI.mft (raw, json)
Hash identifier: ZMQ6RYbUCG5Mi0x64NsC1+t3BzRA59Oj8H4YYowJZFg=
Subject key identifier: BC:90:DE:BA:98:96:BC:57:6B:0F:DB:81:EA:E1:6B:49:0B:58:B9:1C
Authority key identifier: 98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
Certificate issuer: /CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Certificate serial: 019A71B84652E6933BB8951CC21B43B284BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
Manifest number: 0425
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: mNtTOItvp7HlovTGhjq3Hxz7VRI.crl (hash: w9sJB0noItl5P4ixZh6GveFHcWGFQRD7BU69DpreJBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:46:52:e6:93:3b:b8:95:1c:c2:1b:43:b2:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=bc90deba9896bc576b0fdb81eae16b490b58b91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:de:8a:dc:e7:e0:ba:af:33:68:5f:9e:13:
44:47:b3:d4:f2:99:6b:ec:7e:ca:c1:f9:05:1a:28:
e8:e3:bd:93:ff:0b:05:71:2f:f7:e0:26:87:ba:64:
d3:80:5e:41:5b:71:48:d4:a9:14:e0:6c:9e:22:9a:
7c:11:92:fb:8f:41:78:32:8e:4d:fc:fb:38:bb:8c:
73:ef:c1:8d:fc:6a:ba:e3:57:11:fd:54:33:cf:c6:
56:cf:ba:27:94:8b:3e:1d:7d:f7:cd:a8:c9:bb:0c:
d7:4a:60:63:58:52:c7:cc:cd:9c:34:37:f5:36:86:
d1:5f:9c:ca:a5:ff:9f:80:17:7e:ad:e6:ea:86:a5:
30:29:82:84:ad:b5:90:32:95:76:a0:72:3b:61:77:
17:ae:5e:21:e2:26:b9:a5:78:10:a3:fc:9f:6c:02:
ea:4f:6f:e1:7d:b7:71:c4:02:e6:18:ed:f8:04:9b:
40:ea:3a:28:26:51:46:3e:b1:f7:84:6a:5f:29:10:
6a:27:6a:97:7b:2c:e5:16:0f:03:9e:8f:97:cc:45:
cd:e9:97:0a:4f:f6:ce:af:0b:8c:7e:62:a1:96:52:
3f:20:28:c6:d5:8b:f0:94:5c:7f:5b:52:e6:90:e6:
08:4e:d5:f7:39:57:29:fc:44:35:92:40:e0:7d:db:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:90:DE:BA:98:96:BC:57:6B:0F:DB:81:EA:E1:6B:49:0B:58:B9:1C
X509v3 Authority Key Identifier:
keyid:98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e9:01:80:02:e9:16:2e:e0:3b:fa:3d:b6:65:0a:e5:ed:61:
07:55:1e:b0:89:9c:ef:2c:89:17:02:18:2e:15:f8:4a:c0:87:
12:5f:2e:7e:80:01:86:bc:9b:f1:83:82:d1:63:e1:c8:ed:43:
17:f0:2a:f9:25:1c:53:7b:b5:f2:69:a2:a5:fd:08:e4:49:26:
cb:7c:fa:8a:49:47:6e:71:2a:67:35:02:51:c9:96:34:06:9e:
59:6a:a8:58:1e:2e:41:f2:c6:36:41:36:f6:5a:94:be:12:5e:
d2:bb:9e:e7:78:d5:e4:3e:7b:f1:3c:5f:3f:a3:f9:f8:e2:7f:
58:23:11:a2:4b:72:6b:39:22:1a:26:62:5b:39:b3:5a:85:87:
7f:83:45:e9:61:d5:33:39:ec:9f:a6:fe:b4:54:91:7a:be:e8:
82:98:3a:16:78:86:ec:95:4c:25:24:05:e5:4a:d0:0a:60:36:
76:71:c4:8a:ba:97:4d:2a:24:d2:ba:f5:51:8c:36:2e:a7:17:
d0:43:89:19:2a:12:1a:1b:e1:b9:f9:46:65:ed:d3:3a:68:b3:
31:07:5c:ab:6d:7a:b1:5b:ce:bb:52:b8:a3:63:35:ee:fd:2a:
d2:49:ce:df:80:13:8e:b3:b7:a2:0a:8d:19:72:8a:4f:1e:9a:
03:48:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:07 2025 by rpki-client