Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier: 6G/24uzCKSwaHMALK9uC6nmILgbcoNsioEuoahgoOWE=
Subject key identifier: AF:36:8B:E6:24:E7:9F:AA:4E:AF:43:40:8A:50:37:15:04:EB:A6:68
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 019A71B8A4FF9098FDB02867631F2F9C5A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number: 0573
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: DjuSChlZxuREp2sv1aj7r2B5VtZN4NoEb73KetAntl4=)
2: i6CWENtAdnXqPwuX227uTDykXkg.roa (hash: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=)
3: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (hash: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a4:ff:90:98:fd:b0:28:67:63:1f:2f:9c:5a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=af368be624e79faa4eaf43408a50371504eba668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:ab:7b:b7:66:30:5c:91:e5:f7:51:be:16:
d3:10:28:b7:9d:d7:84:50:85:5b:b2:0b:f7:df:5a:
03:fd:39:ce:75:a4:0a:17:a5:d4:15:0e:da:81:dd:
42:96:ce:43:c0:04:63:55:62:36:b8:25:a1:16:9f:
9a:28:1c:14:9b:b6:ac:e8:2f:a0:16:92:61:81:64:
e9:57:62:5a:37:5a:fb:85:62:d2:06:e4:bd:54:11:
84:83:63:92:98:b1:7e:68:2d:82:82:04:a6:43:1c:
07:90:f7:cd:4a:d3:85:de:c0:7a:32:f2:13:3b:eb:
61:5b:c4:d3:f6:51:11:81:23:c5:8a:da:62:b5:9e:
b2:25:c9:aa:a8:09:36:37:b5:2c:e3:36:3b:70:7c:
ff:16:bd:6a:95:8c:10:a5:f5:55:66:1a:b2:b9:f7:
5e:24:76:af:1e:d0:66:86:75:6a:3e:51:13:ce:55:
7e:f8:44:bd:2f:52:63:77:c2:b4:fc:51:5e:b6:b9:
35:4d:08:51:67:96:37:b3:6f:69:da:4f:00:4e:2a:
12:68:ca:38:54:5e:4c:37:ab:81:23:60:0a:1b:0c:
13:3b:05:12:d6:f3:75:fe:bc:2c:c2:a2:06:aa:b9:
61:24:26:1a:71:7a:ab:2a:be:a0:56:98:dd:66:22:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:36:8B:E6:24:E7:9F:AA:4E:AF:43:40:8A:50:37:15:04:EB:A6:68
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:83:3a:40:02:09:a7:87:09:ea:a9:3c:2c:e6:19:d8:25:eb:
26:f8:17:1e:5b:3a:2c:bb:4e:f7:3f:7d:ec:78:2b:97:fe:ba:
fd:71:1f:bb:df:db:c5:35:54:61:39:c9:77:f7:35:c2:f0:4f:
7d:5f:35:a5:ad:0c:73:5e:07:a0:53:97:2c:e2:2e:97:24:83:
c4:1b:9e:8b:25:e5:96:8f:45:d7:81:b4:2e:e4:98:1a:c5:0b:
f0:cb:4a:44:5b:c6:a9:7d:3f:1b:45:e9:21:fe:40:dc:f0:bf:
a3:99:a7:8a:9e:dc:7f:7e:ff:4e:69:23:9e:7c:2f:6f:6b:cd:
67:97:41:1f:10:0c:a3:f8:da:d5:c4:e2:47:23:a3:9f:ea:79:
7d:9e:3c:17:8a:57:aa:17:d8:79:a9:2b:9d:b7:db:83:d3:ad:
cc:a5:72:d8:6b:bb:20:2e:1f:ed:34:b9:f4:25:60:8e:cf:1c:
ac:e2:36:f5:4e:d6:7e:39:a5:74:8c:56:0b:45:9f:d2:15:f5:
9c:a2:38:36:50:f7:fa:92:57:b1:a6:e7:23:28:43:6b:a7:79:
c5:b8:95:0d:6b:85:ec:b9:02:26:54:d8:68:20:93:d7:53:1d:
d2:6f:ec:eb:db:5c:e7:13:e1:1c:6e:c8:55:8a:8a:00:24:6b:
fa:43:23:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:52 2025 by rpki-client