Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: eO5DqVAJ+X4a1Wsqzc/MMceuFx8tmhSeGMywa62yGi4=
Subject key identifier: 47:B3:C8:5A:6A:15:C7:BA:DC:4B:8E:32:49:B5:1F:1C:B4:12:31:AB
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 019A70DC0C044437DEF0E089B886A365987A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:01:00 +0000
Manifest this update: Tue 11 Nov 2025 03:01:00 +0000
Manifest next update: Wed 12 Nov 2025 03:01:00 +0000
Files and hashes: 1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: EW0RD/Y3xIiwvDvQvOkLvjZR/Jt1rZ35tZPzAxsUplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0c:04:44:37:de:f0:e0:89:b8:86:a3:65:98:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Nov 11 03:01:00 2025 GMT
Not After : Nov 12 03:01:00 2025 GMT
Subject: CN=47b3c85a6a15c7badc4b8e3249b51f1cb41231ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:7d:97:d0:d6:ed:6f:cc:96:47:50:6d:af:
55:01:9f:a5:0d:2f:40:40:13:42:6b:f3:80:39:7f:
b8:97:2e:91:b7:07:f1:11:4d:62:5c:2b:60:16:94:
fe:1d:43:eb:68:4f:15:f3:9a:27:d2:ac:0f:d6:bb:
85:2d:36:7c:a6:69:40:96:ee:b9:cb:28:4d:be:7c:
71:bc:b1:1e:d5:6b:97:c5:41:91:7a:fc:38:0f:d3:
26:03:01:11:31:38:aa:2d:21:a3:7f:f4:42:b4:39:
66:a5:bb:bd:84:72:b3:20:65:a9:19:2e:12:62:89:
36:aa:20:a4:a7:17:6e:81:17:01:c4:dd:a5:f0:49:
ad:0d:10:f1:77:ba:6a:29:47:85:1c:19:18:2e:0e:
4b:d5:1a:7b:cc:cd:c7:42:d0:10:a5:30:00:42:28:
0a:40:b6:04:3e:aa:7c:72:dc:75:68:33:a6:fc:38:
76:13:c2:2a:fa:c3:85:be:e3:ac:ae:3b:e2:f7:9f:
9f:05:b5:77:68:dd:df:c9:9a:86:a4:f0:e9:40:b0:
53:ac:9c:df:30:49:2a:14:07:30:67:41:53:b4:7f:
7a:3c:20:f9:4a:6d:d0:86:16:32:f4:b5:60:12:ea:
94:f2:81:8c:e8:8a:ba:e7:6f:5f:87:da:5e:f5:0a:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:C8:5A:6A:15:C7:BA:DC:4B:8E:32:49:B5:1F:1C:B4:12:31:AB
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:56:7c:43:c0:27:56:e2:c4:98:b8:f5:ff:4c:dc:c2:dc:0f:
2c:e5:4f:c7:46:75:88:b7:d7:69:7a:9a:d1:56:37:88:98:52:
a6:c1:f2:f4:3c:11:10:86:f7:c2:ad:83:a3:fc:a0:0c:4d:ae:
ed:c6:9c:9d:f5:4f:b6:9b:6e:d8:d3:1c:a7:9a:81:94:4f:d9:
3c:0c:07:ff:6e:37:34:bd:8a:da:60:33:9d:53:31:be:c5:bb:
1d:b5:dc:c7:42:f9:da:1b:a6:c5:9f:dc:fd:e2:ef:d7:49:84:
3b:39:70:dd:f7:13:78:f9:3e:c2:f4:88:48:15:80:36:d1:80:
ec:4c:3e:70:00:4b:4a:10:03:dc:1e:39:1b:49:eb:f7:6b:ef:
02:6f:f1:69:2c:64:0e:a5:d7:c3:dc:47:38:78:48:bc:2b:52:
c7:07:06:e8:b8:cd:3d:94:48:33:89:39:e3:4e:64:9a:82:3d:
37:dd:20:76:16:25:32:9e:f0:a2:e7:ed:14:40:61:f3:0f:68:
e4:f7:d1:f1:f5:60:ff:77:c7:27:77:e3:c8:ab:f9:8b:2b:73:
b0:a8:55:d2:2d:56:d8:be:64:d8:3b:81:b4:c7:c0:da:a8:15:
a7:ad:ab:6f:ed:6c:11:28:f7:64:16:ca:7f:e4:0b:85:90:ca:
e9:b5:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:43 2025 by rpki-client