Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft
File: mylnPtSjkR9z1Le94bHnP7l4Nak.mft (raw, json)
Hash identifier: Jl8LN6cQQO8y9eA/byMKH7IL2Z5m3akZqykDmkON5sI=
Subject key identifier: D3:97:CD:69:BA:5C:24:18:D1:71:23:9A:E4:91:56:20:A8:47:10:39
Authority key identifier: 9B:29:67:3E:D4:A3:91:1F:73:D4:B7:BD:E1:B1:E7:3F:B9:78:35:A9
Certificate issuer: /CN=9b29673ed4a3911f73d4b7bde1b1e73fb97835a9
Certificate serial: 019A7225FAAA2F2D4AD6A2EB383181A3EECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft
Manifest number: 4A
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: mylnPtSjkR9z1Le94bHnP7l4Nak.crl (hash: kbFcOl5q7a+YnAeDkEuVJ8ig5l8XG/iUdV2gqDLjqe8=)
2: pmhToACE6Z904v0QaJlEdW18_ig.roa (hash: MKUwU4Rq//uzJTt/a+BtsfAk5/82XATI4rUdtUbh/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fa:aa:2f:2d:4a:d6:a2:eb:38:31:81:a3:ee:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b29673ed4a3911f73d4b7bde1b1e73fb97835a9
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=d397cd69ba5c2418d171239ae4915620a8471039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:6b:1c:2d:42:4d:2e:cc:8d:a1:14:18:79:
45:9a:f9:1e:22:3c:ba:2d:16:65:80:4c:30:e3:a1:
c6:3d:dc:fb:d0:8e:b1:c2:74:c0:b1:e4:de:09:72:
05:31:69:f7:b7:ad:d2:4b:92:d6:30:82:24:36:ab:
65:46:71:1f:4a:b7:22:b7:a0:e9:65:c8:2b:ec:e5:
58:dc:9e:5e:c5:a6:e6:4d:ea:e1:b9:99:0a:e6:ea:
6f:e6:0a:34:01:fd:59:fe:37:b0:e5:51:71:5c:1d:
af:07:af:72:ab:56:fc:d9:22:14:0b:a1:33:0b:37:
ae:f1:87:5a:67:f0:8f:f1:42:87:5e:53:2c:e4:10:
3a:40:e1:73:04:0d:3b:8f:d6:ab:68:d4:f2:4f:a4:
29:8b:06:52:26:f3:1e:4f:44:1a:3b:09:62:34:7e:
9a:04:17:08:f7:80:b3:30:7a:8b:26:9d:94:b5:46:
df:a3:00:5d:f2:9f:62:31:1a:de:fc:9f:bb:5b:d5:
65:d1:2c:98:36:9f:58:b8:ca:e9:a7:66:ee:98:ae:
71:d1:9e:2e:6e:32:21:84:57:9e:02:c4:53:19:55:
bd:c4:54:98:3a:a6:a1:70:9c:6b:12:81:aa:84:44:
23:d4:ee:b8:4a:86:0f:59:81:3c:60:4c:09:48:01:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:97:CD:69:BA:5C:24:18:D1:71:23:9A:E4:91:56:20:A8:47:10:39
X509v3 Authority Key Identifier:
keyid:9B:29:67:3E:D4:A3:91:1F:73:D4:B7:BD:E1:B1:E7:3F:B9:78:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:09:bc:d8:73:7e:4c:a9:41:1c:41:8e:93:11:04:18:ea:cc:
9b:56:5b:8b:ea:9c:0f:59:32:fa:6b:b4:70:81:c2:e4:7d:34:
c8:3a:05:e1:82:2d:ec:3b:40:2f:10:c1:07:32:d6:13:9b:8d:
63:e4:1f:8c:89:04:8d:8a:ab:ef:0b:8c:5e:d9:42:c4:7c:c3:
87:93:d1:bd:57:52:d7:38:29:26:2e:2d:d2:09:8b:36:72:5b:
79:ea:c5:c2:cf:02:e1:5a:43:99:8a:30:b1:96:35:8d:6b:56:
2e:8f:68:7f:e1:50:9e:e6:e2:db:e7:e2:02:b4:d2:35:01:04:
c4:a6:c0:33:54:f5:f9:2b:76:32:d1:44:73:2b:d3:22:a6:57:
fb:15:c2:3b:98:8d:52:cf:9f:b0:a2:ca:70:e4:4b:53:79:2f:
8c:31:a8:e3:ce:f0:22:78:b8:f6:a9:66:b0:9e:ee:0e:7a:37:
58:63:d9:60:be:f6:f2:bf:8f:e1:5d:2f:7b:1e:1c:60:33:d1:
7d:ba:ed:89:02:5e:2f:95:3c:cb:03:ed:7c:77:1d:c7:c8:15:
ca:dc:57:df:04:c8:1c:e9:ec:59:77:28:4c:c1:89:ce:8e:b2:
a6:6c:79:53:30:59:37:b3:e9:f8:7a:d2:70:46:96:90:e1:78:
ed:82:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:29 2025 by rpki-client