Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
File: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json)
Hash identifier: I2oh/Ozny9r4W4SJTlRCtzmFvCjejSBSEUpyxeJUs4k=
Subject key identifier: D1:59:24:70:BD:8F:14:58:35:ED:40:92:DB:FC:55:97:BD:BD:07:D4
Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
Certificate issuer: /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Certificate serial: 019A7225D994C538CE574441904316484123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
Manifest number: 025A
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: W8iTYjU2Evc2p5yDOFlKPLpAZr0.roa (hash: +1HDTD3+F6qn6zfwt9WbeLBT9ppZuriPW/cOhjwp96g=)
2: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: F69WpvOagKi0clBLfyBuEnf4iPHmRx0A0C4LGOjgVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d9:94:c5:38:ce:57:44:41:90:43:16:48:41:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=d1592470bd8f145835ed4092dbfc5597bdbd07d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:44:e3:ac:0c:85:0d:71:fb:15:12:10:ec:
d7:9d:1a:ed:31:60:a0:56:9f:8a:ca:77:ad:b1:2c:
3e:d9:8f:f0:8a:68:06:75:98:5b:96:94:5a:d3:7e:
5b:51:43:a8:70:f8:91:01:71:49:56:26:3d:df:2d:
32:7b:8f:5d:40:ce:2c:30:d2:41:dc:b8:e8:fa:32:
6c:34:65:61:4f:01:14:a2:45:67:84:62:87:92:e7:
bb:3e:6c:f4:2e:ca:0a:58:02:22:7e:29:83:65:61:
d9:c2:4f:d8:02:af:7f:00:06:5c:18:e4:e2:ac:14:
0f:7e:b1:9b:30:40:ea:71:57:16:9b:22:a6:d2:cb:
09:c3:e9:75:45:e0:cc:65:d0:3a:2e:26:58:b7:d8:
0a:49:c9:15:06:44:21:bc:7c:7b:56:82:d0:85:c1:
99:cb:cb:65:9e:4c:9d:1e:f2:b1:d5:4b:97:ec:ed:
f5:00:2d:90:6f:ef:7c:3a:10:fa:fe:be:a8:a9:33:
db:36:26:7e:89:c3:30:e9:1d:49:de:eb:a7:39:21:
ab:9e:df:6a:97:59:0b:17:64:0d:3f:c4:3b:32:82:
11:d6:2c:99:dc:21:f6:1c:0e:c6:7d:73:58:b8:ef:
10:81:66:75:82:d5:01:1e:ed:f9:25:77:b6:73:6f:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:59:24:70:BD:8F:14:58:35:ED:40:92:DB:FC:55:97:BD:BD:07:D4
X509v3 Authority Key Identifier:
keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2f:04:4f:e1:4f:7d:1c:e4:5c:e3:2d:3b:89:a6:8c:41:6c:
a9:6f:42:bb:4e:c3:ad:2f:47:c1:23:47:58:f0:67:1a:2a:cb:
07:f9:68:a2:bd:89:53:2a:af:ec:a7:27:74:b1:c9:a5:ec:e2:
57:36:de:98:13:a9:df:01:15:65:3d:d6:82:14:ae:47:2a:7f:
1c:f4:40:2d:2f:72:9a:da:90:8e:1b:f2:39:da:8c:fa:5b:f0:
37:5e:9a:a6:2b:ee:f0:ea:5e:d2:94:5f:88:60:73:eb:53:ec:
84:ad:ac:b9:39:81:26:04:c5:42:de:fb:5f:c0:b0:dc:fe:c1:
1c:ad:c8:f0:d6:de:60:fc:de:42:ed:4a:51:50:8d:40:f9:22:
6e:6a:7c:fb:9f:e5:9b:3d:56:33:7f:3b:41:e6:a7:b8:bd:86:
55:9e:49:80:eb:db:4c:97:a8:14:d4:a6:2b:d8:01:f4:1c:f9:
ea:16:77:f4:0b:6b:eb:90:bf:48:1a:6e:2e:c9:16:30:79:e8:
a9:e0:4d:f2:41:de:05:3b:2c:66:27:6a:9f:2e:31:9f:f5:ed:
7e:25:ea:d5:06:94:ff:b3:25:8f:47:4e:6e:37:34:37:6d:a2:
8f:b9:68:c3:50:d3:1d:a0:e0:9e:ac:43:ac:7d:03:9a:17:57:
46:e2:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:21 2025 by rpki-client