Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: /W28418h75mli0wEVPPuwbs3vBu3b+q9FSzpH59Joqc=
Subject key identifier: A6:7F:3F:98:86:C9:9D:CB:C3:E3:23:B3:DF:5D:97:58:AD:B7:8E:E7
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 01992367BAE8D0E825A41901C8DEB863425A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: 42
Signing time: Sun 07 Sep 2025 09:00:24 +0000
Manifest this update: Sun 07 Sep 2025 09:00:24 +0000
Manifest next update: Mon 08 Sep 2025 09:00:24 +0000
Files and hashes: 1: LNE0MuZMavkklT_2pqrHqhF84rY.roa (hash: ZYqhRbVzdQKSF9ZEirdkyB29pkjWB2pzYX8b2N86rj0=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: lJXWSyE/F5pRqKeHpZD/lrJOE8oMa5JzhFwJJwnevIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:ba:e8:d0:e8:25:a4:19:01:c8:de:b8:63:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Sep 7 09:00:24 2025 GMT
Not After : Sep 8 09:00:24 2025 GMT
Subject: CN=a67f3f9886c99dcbc3e323b3df5d9758adb78ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:0f:e9:5e:7a:b0:cb:05:c4:33:bd:26:98:
07:f9:fa:85:94:bb:27:3b:8c:bf:e8:35:2a:ed:c3:
86:52:79:29:63:82:90:56:f7:82:4c:c3:37:a5:a3:
52:52:83:0f:0f:c0:b2:70:d3:b6:f2:76:39:4a:6a:
52:21:0a:0e:bf:2b:02:8c:fa:8b:48:7f:1d:10:98:
ba:6c:2a:09:98:46:e7:ab:f8:b4:42:ff:ba:08:61:
75:3c:e5:92:87:0d:37:73:45:7a:9f:77:b6:c6:f5:
d5:25:5b:4c:0a:dc:af:3f:25:c4:5e:73:dc:a6:30:
52:98:7a:d4:84:ff:67:c2:de:2e:9f:05:ad:e1:ef:
8e:21:0d:a7:fa:8c:93:bd:c2:4b:20:fe:80:e6:a5:
27:f4:0e:78:b8:b4:eb:9a:21:3c:62:c7:46:f9:77:
b9:dc:ff:cb:fd:6d:53:9d:ff:a7:b0:66:45:99:d7:
fc:e1:6a:b0:f9:b8:7d:55:97:18:c2:cb:95:ed:0f:
19:9e:5c:a0:fe:ab:8d:b3:57:19:00:4d:39:ca:3d:
2e:63:b7:71:89:51:64:07:31:c1:d4:a6:71:5e:8c:
85:2d:25:8b:58:52:b6:36:31:ca:5d:e8:d4:54:9a:
66:77:e4:a5:f2:62:ca:39:a4:62:03:a4:70:0b:0f:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7F:3F:98:86:C9:9D:CB:C3:E3:23:B3:DF:5D:97:58:AD:B7:8E:E7
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:30:4d:1b:02:bc:ce:2b:62:97:64:3d:d3:0a:7d:50:9f:b1:
96:e1:dc:ed:95:19:c5:e4:57:41:a5:03:e3:29:36:af:d2:f0:
74:15:0b:4e:c9:09:a3:93:2a:37:15:3d:10:76:c1:65:0e:69:
9d:2d:f2:5a:86:fa:42:0d:1a:28:a5:8c:2c:ef:c4:ab:9e:da:
a8:60:c4:6d:2b:28:a7:e2:a8:ad:83:f4:dd:88:7e:92:19:73:
e2:52:89:09:ab:18:1e:a5:e9:45:51:28:47:28:5a:3f:4c:1c:
1d:06:e1:a8:29:61:6f:20:76:a1:dc:f1:78:a0:2c:19:e7:9c:
bc:bf:e6:f1:1e:19:a8:eb:b8:1a:95:f2:a6:e0:f8:6b:2e:86:
71:6e:68:fd:16:21:2e:35:16:57:26:db:23:3c:53:32:39:e6:
e3:da:fc:0c:04:e7:74:43:f8:b3:d0:18:c4:79:54:61:4b:f1:
ea:50:de:1f:50:64:c9:96:32:fc:95:df:0f:17:85:31:23:2a:
99:3a:c2:48:7a:1a:6c:49:10:e8:ba:2f:9d:6c:47:46:5f:cc:
3a:ad:d0:a0:aa:b4:68:b4:c5:7b:70:18:49:00:e5:d6:68:77:
1e:61:b9:3d:40:c0:d3:f7:75:68:08:49:f5:77:f4:2f:f6:87:
ec:4e:3a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:23 2025 by rpki-client