Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: efsEDWHV9ENY2vWougxBz8/3Tu8YKmsbb0+oBM1pWfc=
Subject key identifier: AF:E8:CA:1D:70:AF:47:EC:71:9B:93:F7:7B:FB:11:92:95:E7:24:03
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019A71EEDEFF7E8846B34B1FD82054EE029D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 0809
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: 8UfH3QapSb1dVv8M5ay3SvgqZ7IdLOdZaltgerz52VI=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:de:ff:7e:88:46:b3:4b:1f:d8:20:54:ee:02:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=afe8ca1d70af47ec719b93f77bfb119295e72403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:d1:31:95:21:ce:11:e2:27:78:4a:c9:d8:
d3:f2:ae:b4:8c:56:b0:ac:87:3a:9a:25:3d:b4:89:
74:df:dd:8f:02:82:6e:6a:16:74:53:34:1c:d7:c7:
bd:6a:41:bc:04:ae:9f:1e:ed:30:99:e0:cd:1d:02:
6d:8a:e1:f5:bf:dd:e9:be:0b:2d:44:de:83:c3:9c:
fc:bc:e4:58:24:6e:a9:26:e3:9d:5e:e0:79:e6:02:
6a:74:2f:fc:f3:da:16:ec:f1:cf:7a:28:e0:36:a7:
48:00:38:41:21:19:43:8b:d0:ab:c5:3b:79:cb:84:
eb:5f:10:6e:b1:0c:ae:c5:44:7e:7a:72:25:ea:18:
ec:46:87:4b:93:cd:eb:1f:1d:83:89:64:c7:48:fd:
41:fc:18:17:3f:c3:7e:99:b4:6e:11:46:07:1d:ae:
88:72:ec:7b:e3:66:36:83:17:14:dc:63:3a:5d:b0:
aa:e4:8e:56:17:be:fb:ac:e7:16:b6:0c:50:dd:dd:
22:35:d7:e4:f3:ec:68:26:9a:ea:ce:83:f0:de:7e:
33:25:d1:f7:71:7c:5a:d3:46:e9:ff:02:e3:5e:71:
fe:b7:20:7f:f9:d1:9b:a1:3f:5f:6c:dd:fd:34:fa:
0d:39:c2:6c:ed:68:63:1b:aa:02:3e:62:c8:c3:4c:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:CA:1D:70:AF:47:EC:71:9B:93:F7:7B:FB:11:92:95:E7:24:03
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0c:b7:3f:d8:53:d2:fb:db:48:50:d3:1f:f7:72:4f:53:6b:
22:03:4c:74:92:13:fc:69:97:a4:ad:ce:76:d7:3e:1d:44:56:
8c:04:11:57:69:6e:79:b7:a7:1c:5e:aa:69:72:2c:9b:cc:e4:
71:04:46:3b:5c:4d:9f:43:64:c4:2c:4c:a1:3c:fe:bb:d5:b7:
36:16:9d:b2:dd:dd:ed:6e:4d:d1:56:92:38:cf:05:c5:6d:da:
b1:aa:c1:b9:d5:de:54:b4:d3:79:ba:5f:d8:b3:0a:fa:9b:e8:
21:93:55:ec:22:c7:7a:8e:8f:03:45:68:6d:7f:e1:45:7b:b9:
98:e9:02:89:5f:e3:e5:52:ec:f0:ae:2d:a2:55:e7:ce:0b:cd:
a4:d9:ce:71:c7:ad:a5:0e:3c:5d:c2:00:14:57:b0:f3:7e:55:
22:44:c1:23:e0:65:72:c2:47:5b:de:61:a1:ec:7c:76:b2:0e:
8b:b0:2c:5a:58:d7:70:c4:63:c0:60:7c:81:f2:8d:92:76:09:
39:fc:e9:17:b7:42:33:95:a1:2e:ca:55:ae:85:b1:9f:ba:97:
3e:0b:e7:a3:bb:63:83:8c:2c:09:b9:75:67:78:9b:4d:db:16:
5e:02:49:8c:5d:62:b5:59:98:c4:49:32:7c:1e:28:1c:f7:6b:
42:27:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:47 2025 by rpki-client