Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: x+npLLU8b2189pFbHk41QK2Gu/WaTdwKdidEpHxs+Jg=
Subject key identifier: 91:BE:4B:26:73:C8:F3:4C:E0:56:F7:B4:CE:DF:88:58:73:45:C9:33
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 019A7226343370E589D624316533421C0183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 1399
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: vLWvjDKyR34Q6WBsCtq5Cpfu6AJn0iK+Z7TtgFmqVd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:34:33:70:e5:89:d6:24:31:65:33:42:1c:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=91be4b2673c8f34ce056f7b4cedf88587345c933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:b9:f5:7a:32:c2:4c:cd:25:b6:ac:6f:27:
38:c7:c8:e8:c4:96:94:15:20:f8:5b:ef:09:6c:be:
b2:49:58:0b:67:36:10:0a:6b:e5:21:83:2d:f6:ea:
93:8e:81:12:d5:ac:04:5e:66:70:35:93:94:a9:ce:
0a:d3:b5:2a:50:f8:52:04:8e:2b:bb:5d:86:7e:dd:
d1:33:09:86:e4:48:fb:d1:47:e1:a5:82:a7:de:2a:
ed:40:94:be:34:4c:86:87:cf:70:e6:3b:f8:4a:40:
e1:41:f7:f0:7f:71:ca:2e:ce:69:e7:38:9a:bf:63:
0f:84:65:0c:d3:2c:6c:12:83:f9:87:5b:0f:d4:d9:
20:54:2e:53:5d:f9:a4:2f:4d:85:8f:93:25:2f:94:
a9:fd:07:8c:fd:7e:a1:7a:5f:aa:f2:12:df:6c:c1:
41:2a:ee:11:be:1d:ed:99:e3:eb:0f:38:58:32:5c:
4c:7e:11:c1:42:7d:4d:68:dc:ce:a3:a7:f3:32:9e:
d1:a1:63:47:7f:0c:e4:2e:69:88:4f:36:71:21:dd:
87:92:ad:23:9e:4c:9e:b1:88:3b:39:77:05:47:76:
15:fc:20:fe:81:45:07:16:c4:a4:a2:6c:6d:93:59:
23:11:89:b8:cc:0a:24:b8:33:9d:e9:5d:37:e8:6f:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:4B:26:73:C8:F3:4C:E0:56:F7:B4:CE:DF:88:58:73:45:C9:33
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:85:fe:0a:e3:0f:e3:09:97:50:2e:99:b3:6a:df:81:4f:ca:
a6:1d:9d:62:54:7c:7f:c8:5b:a2:f7:09:08:4b:40:5a:41:a2:
05:53:9e:0a:3c:10:59:e6:98:fb:c6:ce:22:73:4a:db:73:c8:
35:22:64:dd:af:33:1f:21:5d:69:5a:24:a6:7c:d3:b6:a4:1a:
23:a7:4e:83:0a:0d:cb:fd:f1:16:9f:9b:4a:c7:16:14:33:67:
ef:cc:b8:96:4f:4f:11:41:ff:d5:29:31:ff:5c:50:87:93:06:
ca:37:7f:f5:2f:2b:8c:54:7f:34:37:40:b4:6f:81:be:7a:50:
f9:15:ae:8e:db:69:5b:27:a7:b4:b6:e4:ce:df:dc:b7:96:79:
4f:a8:c4:da:6f:57:9d:28:5a:2f:bb:26:ac:7d:8f:e8:01:16:
c6:b6:e8:65:6a:5e:f6:a5:f1:cb:30:33:56:2a:7e:7e:db:d4:
7f:7c:a5:cf:e9:57:0b:d3:e0:89:59:03:3e:f8:1e:3c:1f:8a:
32:52:43:4f:60:94:13:46:c5:ad:47:b4:18:4d:77:03:d4:43:
00:8e:e7:bd:89:ee:e2:5d:19:1f:d8:9d:02:84:83:81:13:92:
f3:d3:1c:a0:85:18:a8:05:54:4f:ac:29:64:5b:9c:24:43:9f:
95:34:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:24 2025 by rpki-client