Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
File: MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft (raw, json)
Hash identifier: mOzu0G6sJD5qCtUYcnMvKoDHzc7j2rHgGz/2I3Fokzc=
Subject key identifier: 3E:40:5F:5D:D3:2E:7D:A6:6E:22:5C:BA:A6:83:DC:81:80:A7:2D:C5
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Certificate issuer: /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial: 019A7113318F383C40E51CACBF1D2324A1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
Manifest number: 0973
Signing time: Tue 11 Nov 2025 04:01:14 +0000
Manifest this update: Tue 11 Nov 2025 04:01:14 +0000
Manifest next update: Wed 12 Nov 2025 04:01:14 +0000
Files and hashes: 1: MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl (hash: be19shAr37Vftzv6xIMj2PRZn8H2YJmw3RblYHjsQMM=)
2: mThuVq__AdJ8m0fUEig5mExB-MI.roa (hash: uwNlHWqFKBBy+qRVS5eJabxoyu+NHhSLJrsP7OWfbIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:31:8f:38:3c:40:e5:1c:ac:bf:1d:23:24:a1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Validity
Not Before: Nov 11 04:01:14 2025 GMT
Not After : Nov 12 04:01:14 2025 GMT
Subject: CN=3e405f5dd32e7da66e225cbaa683dc8180a72dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:13:bc:41:da:2e:03:06:fd:4e:85:8b:72:
e0:fb:0f:9d:cf:d1:ac:91:b9:5c:3a:35:3f:00:f3:
fc:a4:03:e6:48:05:35:79:9a:30:63:98:ae:bd:d0:
8b:76:48:bb:f8:1f:db:c8:9a:5e:59:7c:e3:3c:d2:
e8:c1:82:8f:23:fd:3d:20:e3:8b:d9:66:e7:95:5b:
a1:09:bf:ec:3d:49:da:98:d8:10:70:d7:54:53:60:
49:24:52:ea:d2:7c:29:b3:8e:01:a3:2e:70:fe:95:
51:47:1e:bb:f4:8e:62:8d:d2:9a:b7:46:50:4b:7e:
60:39:56:6c:45:c7:ed:04:35:4e:38:d8:78:78:3e:
e8:72:ae:a0:99:a7:31:9f:c3:f9:15:49:5c:b4:c5:
80:6a:62:2c:52:87:25:b9:7e:11:92:b7:82:b8:28:
85:3d:83:36:e7:42:ff:5a:d9:5f:9a:eb:d2:c6:2e:
2a:5d:b7:78:10:0c:43:8f:68:f1:42:4e:dc:65:7c:
4f:00:94:ed:c4:e6:25:49:c4:a7:24:6b:47:08:66:
8b:19:05:4d:80:ed:9f:43:1b:a1:ca:d6:71:78:57:
7c:23:df:11:0b:6e:eb:ba:f9:44:fb:ab:40:fc:d7:
6e:eb:81:2f:35:20:a0:9a:bd:69:0c:75:c7:fd:c4:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:40:5F:5D:D3:2E:7D:A6:6E:22:5C:BA:A6:83:DC:81:80:A7:2D:C5
X509v3 Authority Key Identifier:
keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:18:f2:91:ba:ba:b7:ea:4e:69:d7:32:4e:a7:5f:7d:3d:77:
97:cc:b6:73:c8:6d:2b:ea:7a:d0:0c:49:0c:a2:9b:a9:c3:ec:
1f:b5:dc:42:3d:17:74:30:6a:cf:26:e6:2f:85:48:e2:d3:3f:
ba:3b:8d:f3:bd:40:de:20:af:02:97:6c:5c:fa:81:fd:76:46:
03:04:99:49:68:8f:77:a1:ec:b8:43:4e:da:50:eb:5d:01:0a:
c5:af:fb:36:77:27:85:6b:8b:a9:23:cb:01:ed:04:71:8d:ea:
84:b5:1a:39:3b:10:96:81:40:ff:80:0b:3e:a8:e0:30:e5:ee:
17:25:f5:4c:ac:7f:a0:2e:50:7d:88:4c:48:03:0c:ff:80:5a:
f3:ee:81:f4:f2:3c:02:42:24:b8:fc:18:35:06:6e:aa:57:1b:
5e:f6:13:6e:c3:64:53:3e:01:0d:ba:76:47:45:72:50:7b:37:
e3:4c:bc:03:70:8e:aa:68:c5:a9:ed:e3:5e:1c:19:2d:6b:d3:
44:53:ef:e7:a2:7b:16:6f:ae:14:57:eb:19:dc:f4:f2:94:e9:
9d:fd:a0:bf:a8:55:63:20:6c:c2:cb:38:36:50:11:4a:0a:a6:
00:d5:5f:4d:31:8e:2c:a8:b5:72:9b:ff:f0:29:f4:88:12:53:
fc:7a:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:49 2025 by rpki-client