Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: o964dGzpq8zHmfa6/h4ft/zUDse3SRBybcXZcJTdRCY=
Subject key identifier: BA:86:C6:CC:CD:A7:84:66:D2:C6:09:68:92:25:3C:C0:51:11:8B:CE
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 019A71B8CD3B406C998691B1BAA6D6C6F70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 0A24
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: VGc5ACk4XoTKsGLVaWhIcg7uLrR41Er+MFwno+Nncoc=)
2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cd:3b:40:6c:99:86:91:b1:ba:a6:d6:c6:f7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=ba86c6cccda78466d2c6096892253cc051118bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:b8:34:87:9f:0a:4d:77:dc:86:4e:9d:f5:
d8:b5:7b:0b:bf:f8:e4:9c:92:e7:49:8f:b4:bc:5c:
91:ef:06:91:b0:40:bf:22:09:cb:ab:a1:41:2a:b9:
1a:6b:3b:b4:59:43:11:ed:bd:89:63:72:e4:76:17:
2e:28:3a:fb:09:69:17:76:0a:ce:f7:eb:e4:4a:9e:
1d:aa:25:3c:a9:e1:e6:58:08:52:58:4b:2f:b3:5d:
ad:bc:05:ae:5c:bb:4a:2a:95:49:9e:78:1c:89:2c:
10:ad:46:bc:bb:ba:13:84:dc:3a:14:49:cb:d5:ec:
a8:68:89:cd:8b:5a:51:31:05:80:81:fc:be:b4:cd:
ee:91:2d:ed:c6:e6:7d:85:77:7b:56:3e:d6:cb:d8:
95:03:a6:8a:c4:31:96:21:60:2b:da:36:3a:74:67:
b6:8a:73:88:67:3e:a4:24:90:4e:36:55:da:5e:ff:
97:1a:ca:1a:64:ba:ae:fe:7f:f1:51:0d:db:d2:80:
67:82:dc:80:20:02:cf:d5:b6:15:29:b5:43:66:59:
b8:55:ca:dc:48:bb:db:5c:88:c6:62:74:df:9c:12:
f6:fa:ca:74:e7:a3:73:04:b8:26:88:84:b3:ef:09:
4d:3d:0a:27:f3:86:e0:d1:ac:cd:01:07:3e:42:02:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:86:C6:CC:CD:A7:84:66:D2:C6:09:68:92:25:3C:C0:51:11:8B:CE
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:28:15:b5:67:81:11:47:97:54:e7:a6:d3:27:e9:dc:51:
6c:1c:03:49:b4:36:ba:9c:a7:7b:e6:49:c3:50:66:8a:16:e6:
bb:48:de:f5:f8:1d:56:3b:41:8c:bc:c4:ea:fc:2e:f9:bd:45:
e4:81:01:cf:94:9b:b4:b8:66:84:98:f7:3f:d0:e7:f7:b1:ef:
a7:7f:8f:df:2a:18:cf:43:2e:c2:7a:f3:b6:f4:25:95:3b:d7:
3a:d0:46:06:03:10:4e:22:8c:55:e3:88:c0:dd:f6:8a:75:31:
b5:93:2d:02:50:c2:59:c8:ae:fc:09:68:e5:62:c7:10:23:fe:
ea:5a:5f:81:63:d3:0b:f5:3f:50:da:73:a9:9c:49:50:0d:58:
e8:60:7f:5a:6a:a8:b1:5c:7a:f4:f4:cd:23:95:75:f1:b3:8c:
4e:12:88:25:ba:e9:c4:cc:7b:5b:f1:a9:2c:16:a1:72:33:9c:
79:fb:2a:48:3a:6b:10:17:8a:46:73:d3:da:fb:55:0d:a4:25:
23:97:63:7f:fe:41:ce:7b:f6:1b:41:b3:5b:af:d0:43:b8:35:
b1:ef:93:87:04:a5:9b:b1:17:26:e7:c6:8d:35:03:9b:09:72:
52:77:34:6d:83:21:94:bb:dc:1b:c0:09:fa:0d:71:2e:c7:cb:
ae:03:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:13 2025 by rpki-client