Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: rszXLrv3LP4t8no6Ibrr0iJTnJPrzi5q/dVvsmUke+w=
Subject key identifier: 93:23:F6:B9:41:74:7B:FB:DD:5B:1D:15:52:8E:DB:7B:C4:DA:91:32
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 019A25F889BEEB0D6C174B469D68D4069DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 050C
Signing time: Mon 27 Oct 2025 14:00:36 +0000
Manifest this update: Mon 27 Oct 2025 14:00:36 +0000
Manifest next update: Tue 28 Oct 2025 14:00:36 +0000
Files and hashes: 1: ZpEam4JrA75W3vKeb-kb3n0W0y0.roa (hash: kYGb95Bh9aZOERP/x6nIdXNnyuRNyDQM9q/MQE4pooE=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: ZFInuyhno4BpvRfgBWI/R5ulcqazMy1zycAw9S+i+GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:89:be:eb:0d:6c:17:4b:46:9d:68:d4:06:9d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: Oct 27 14:00:36 2025 GMT
Not After : Oct 28 14:00:36 2025 GMT
Subject: CN=9323f6b941747bfbdd5b1d15528edb7bc4da9132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:c4:65:5a:f5:86:74:9e:e5:47:cb:17:6a:
1c:98:c3:e1:cb:d1:ad:c2:24:f6:85:83:9e:87:51:
a4:62:ad:15:6f:05:c9:09:4c:ab:d5:f7:8c:14:ba:
f3:56:cc:3b:1c:c1:29:83:1f:e4:15:b2:88:1e:c7:
85:bd:5d:b1:35:66:2d:24:f4:88:01:9b:f7:d5:61:
d3:c4:b2:f5:78:73:4f:7e:5f:88:5c:95:24:3a:14:
c0:c6:15:0f:23:30:13:55:e1:50:bb:82:da:6a:31:
08:1d:40:d6:39:20:1c:cd:3a:82:c5:a7:df:d7:7f:
e0:f9:2a:81:33:71:a5:bf:0d:79:7e:be:cb:56:77:
09:c4:24:db:1c:65:1b:b5:3e:d6:56:a6:73:b5:9a:
5a:98:4e:f2:b9:c7:eb:1a:1b:c9:57:6c:f8:62:96:
75:62:60:f6:98:32:17:54:52:dd:08:a3:f6:b5:9d:
14:ba:7c:9b:15:2f:d3:16:84:43:49:98:ef:2d:fb:
39:8b:15:f4:64:7b:8b:3e:7d:d9:bf:89:fc:0e:c8:
e7:2a:eb:7c:ab:bb:7d:4f:5d:40:ed:7b:15:5d:07:
b3:01:4a:98:a4:d3:98:26:0d:8c:4b:1a:f0:81:51:
a1:40:fe:57:93:a7:b4:f3:90:10:c9:a9:03:b5:b5:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:23:F6:B9:41:74:7B:FB:DD:5B:1D:15:52:8E:DB:7B:C4:DA:91:32
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c2:8a:92:53:93:c5:81:92:02:67:c4:72:2f:b9:9e:c5:5f:
aa:fd:2e:1f:ab:db:71:0b:1e:ab:9a:06:3c:df:39:8b:35:e0:
3c:36:46:7a:ad:41:fb:b4:f8:c0:3d:31:c4:08:7c:eb:9a:3c:
f5:37:02:7a:ef:38:ba:cd:25:0c:fc:b3:51:7e:eb:a4:a0:d2:
db:c5:47:7a:8c:dd:a7:45:8e:1a:58:4c:95:15:62:1b:8b:02:
e0:11:85:41:f6:61:6f:48:51:21:f7:17:79:8c:43:27:59:2d:
a2:27:d5:c8:ba:ec:1e:b1:93:30:b0:5b:98:41:e0:13:31:fe:
98:f8:b1:a3:26:6c:75:65:26:50:e0:b3:8e:7a:e9:05:5e:e6:
fd:13:06:90:e0:3b:97:f7:35:e5:3c:0d:3b:c2:99:c1:bf:12:
1b:23:81:d0:49:fc:08:7b:37:f9:dc:75:0b:2c:79:98:fe:76:
81:a4:d9:0b:f6:ff:86:60:b6:50:69:3a:77:45:2c:e9:d2:a0:
ce:e7:66:c1:ec:a5:7c:fc:a7:d4:06:ba:74:db:e4:25:8f:5c:
b4:2a:a2:9b:4d:33:bd:a9:ec:1b:b2:0e:d7:79:cc:1c:33:79:
d9:a9:e2:cb:3b:4a:91:8c:3d:ec:04:78:8d:78:44:16:43:28:
d0:16:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:30:08 2025 by rpki-client