Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: hDDXGIcwHiQ0imTdBSusRv9ycabTSNWARfATYnFQGL0=
Subject key identifier: FE:5E:7F:56:0A:85:5C:C6:B8:00:84:97:25:14:C5:43:BB:41:5A:AB
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 019A7112A5ACB670D6CE9900A2CF89868408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 0EC2
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: qGP61S2z4E0joH5Baj+My+Nhj5SRm8nDtRxFoywVY0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a5:ac:b6:70:d6:ce:99:00:a2:cf:89:86:84:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=fe5e7f560a855cc6b80084972514c543bb415aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:bd:63:5b:5c:49:f5:62:e0:4b:d7:08:24:
46:b2:ce:87:82:fb:ef:28:8c:ba:1b:b8:a7:85:31:
bd:e5:64:65:78:5e:52:32:0a:0c:36:e4:d3:0e:7d:
10:ae:db:56:57:51:76:49:81:cc:3e:2a:12:8d:b5:
62:17:52:2d:96:fd:f9:81:73:d0:74:8e:66:d6:f8:
97:41:38:9f:d4:b1:ea:13:b3:02:38:fd:d7:08:18:
11:08:68:ff:d6:65:24:92:25:34:58:ae:c1:9c:99:
bd:5a:70:43:e8:80:60:f5:2b:2e:ba:88:2f:6c:0b:
1f:4e:2c:48:b7:b6:7a:f2:cf:d8:2e:b7:45:31:e0:
6c:55:83:a7:3d:06:06:13:0a:e4:13:44:8d:4b:21:
3c:e5:81:ae:ff:0c:8d:cf:57:7c:69:bb:fe:e7:ba:
4a:d0:58:a1:bd:a8:3c:52:8a:7c:34:d4:c6:e0:7c:
0b:a1:66:46:00:4c:85:36:10:33:af:4a:1a:ad:c7:
60:f7:a5:dc:c1:3e:ed:13:7b:f5:ef:e5:8c:be:6b:
31:ae:53:ae:f9:c5:8d:9b:aa:db:05:97:77:1b:93:
14:13:6f:c4:80:2a:fb:c5:d6:90:a3:c4:9b:d3:a3:
d8:1d:c6:07:c7:be:51:8c:89:cf:b6:b6:28:7a:25:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5E:7F:56:0A:85:5C:C6:B8:00:84:97:25:14:C5:43:BB:41:5A:AB
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:29:5a:71:6f:4a:c7:ee:73:49:91:07:82:b7:9a:34:d5:ec:
ea:34:c5:a9:6c:8b:38:d9:a9:08:48:e3:1d:68:cc:07:3f:fc:
8f:35:05:a2:68:9b:82:e0:83:40:1a:5c:23:04:01:91:7b:c3:
5d:04:0c:2d:18:97:4e:8e:e5:82:a8:1a:56:26:8f:e1:5a:eb:
47:9b:b0:bb:93:2a:11:69:53:50:45:27:3d:e7:4c:7d:76:50:
39:90:45:5a:00:7b:06:09:16:1f:02:65:eb:04:97:2a:c9:cb:
82:20:d2:e4:32:e7:a6:45:2c:90:9f:c7:58:6f:52:18:ad:3a:
cc:61:1b:a0:0c:22:21:5a:89:2a:64:ad:2b:e7:80:e9:c8:36:
33:32:e8:4c:f6:0a:16:fe:da:ba:40:84:1b:7e:60:3f:31:db:
56:0f:5f:ea:02:d7:17:0e:9e:7a:87:3e:d6:17:05:21:fe:24:
3d:2d:7e:aa:1c:a4:f6:1f:00:52:0b:c9:f2:22:e7:63:99:bd:
e8:af:8d:10:09:e2:df:82:d4:59:a3:8c:c2:9f:12:88:26:1b:
6c:3e:f1:7c:b5:5d:4c:74:27:02:33:47:47:7e:00:b3:a9:35:
bf:9d:30:03:8c:30:d7:e7:05:c9:69:73:49:7e:0b:42:fb:30:
b5:b2:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:39 2025 by rpki-client