Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: 3y9ARx7vT9QdiRPfSdc9Xe7E27+/SCn6QlsO4fNufy8=
Subject key identifier: 91:5B:5A:E9:97:72:27:27:B0:5A:9F:44:B0:5A:4E:53:28:88:51:F6
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 019A718098687ECF501CCBA70743E0BAADD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: EF
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: LNE0MuZMavkklT_2pqrHqhF84rY.roa (hash: ZYqhRbVzdQKSF9ZEirdkyB29pkjWB2pzYX8b2N86rj0=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: 1JLaqcWmdVrc+DvFjNolK6iW/qPckXR7fMZdz1DipCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:98:68:7e:cf:50:1c:cb:a7:07:43:e0:ba:ad:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=915b5ae997722727b05a9f44b05a4e53288851f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:d8:71:64:fe:20:e0:6e:36:45:ef:27:bf:
86:7b:22:8f:b1:5e:2f:9d:3b:9e:83:1b:5f:46:38:
5a:3d:d2:24:17:36:1a:69:b4:fa:04:bf:ed:52:e5:
03:37:e8:e7:21:6a:a7:d5:4e:f2:dd:a4:66:45:b3:
2d:d3:a9:86:cb:6b:85:e1:da:f9:59:12:38:b8:03:
d2:12:3e:cc:be:ea:10:3e:72:88:67:87:0a:4b:33:
f6:04:d6:eb:6d:6e:f0:6b:77:fb:a8:8f:c3:7a:4f:
be:af:50:aa:e6:2f:cf:89:76:3a:88:a5:9e:61:2e:
f0:39:b4:f6:84:b5:ad:e0:40:4d:e7:d7:7d:7a:86:
87:61:78:54:71:34:dd:c4:e0:bf:f0:a5:2c:a3:d1:
82:de:18:d8:4c:e1:b7:49:c5:57:88:7c:76:7e:8a:
38:84:da:a6:69:02:ee:f5:fd:aa:df:bd:5b:6b:e5:
74:1f:03:9f:12:20:b8:e0:8e:ad:ce:74:5c:9a:52:
e2:25:13:b0:6c:7f:18:d0:2f:1f:e0:49:c9:65:b0:
2c:11:2a:e8:d8:b8:ea:8c:94:20:df:12:fa:a5:f6:
d3:4b:d9:53:65:5c:31:d7:5c:ac:38:8a:25:30:ed:
a6:56:a5:1d:09:af:41:cc:aa:1b:ee:63:23:21:fd:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:5A:E9:97:72:27:27:B0:5A:9F:44:B0:5A:4E:53:28:88:51:F6
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e8:92:f8:0f:f3:0e:28:9d:1d:fe:07:56:ee:d1:f3:20:ef:
ac:29:e6:a0:d2:53:a8:5d:e4:56:c8:fa:8f:08:9d:68:c3:85:
ce:56:26:7d:1e:d2:4c:7d:97:38:96:77:21:ba:1f:9b:82:7a:
ea:9d:3f:da:4b:1d:65:22:50:be:f4:69:af:10:bf:28:70:a2:
19:99:44:a9:b6:a7:56:4c:d5:be:f5:48:92:db:16:2c:45:b5:
3d:5d:3d:4c:c9:80:8f:df:54:83:66:0d:1d:6a:97:e4:4a:d5:
d4:51:ba:c5:8f:a3:99:60:47:61:8b:e8:15:16:e2:95:78:61:
5d:d2:18:17:0b:3f:f1:4b:73:3c:f8:c0:65:12:5d:d9:4a:38:
46:25:f8:7a:ae:2c:ea:99:f7:91:b6:49:de:ad:f5:22:9a:4e:
dd:e2:89:aa:16:ba:05:46:1f:3f:26:fe:ce:14:6c:aa:1a:87:
97:fb:91:a1:15:aa:18:33:e1:e7:8b:85:ea:d0:22:b4:5d:16:
ed:6d:7a:2b:5c:9f:e6:b7:45:67:4f:d8:ce:28:5d:74:66:51:
5e:57:bd:43:3c:f1:64:55:bc:9e:f7:09:0c:b7:11:5d:57:90:
09:16:0c:28:7c:e4:84:e7:b1:b1:5f:11:06:eb:6d:a2:7e:75:
c5:4d:91:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:00 2025 by rpki-client