Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: AeaH9AKiGq7jFRb0tV6TiSir9PFbCxULydqM36WaPnc=
Subject key identifier: 4B:F9:B3:F1:37:61:DA:04:AC:0E:67:D0:65:4A:3C:2D:64:3C:79:13
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 019A7113127FE596469639A2952166A86304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0F39
Signing time: Tue 11 Nov 2025 04:01:06 +0000
Manifest this update: Tue 11 Nov 2025 04:01:06 +0000
Manifest next update: Wed 12 Nov 2025 04:01:06 +0000
Files and hashes: 1: 1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa (hash: 5NLaYiuNwek7qbqlr2qTFyj4HJSwenOAixDp+ZTkHiw=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: HB+Z1L9kJcu8JpQDCbfMiBIPcREpQQ81Khl9Bkgqwv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:12:7f:e5:96:46:96:39:a2:95:21:66:a8:63:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Nov 11 04:01:06 2025 GMT
Not After : Nov 12 04:01:06 2025 GMT
Subject: CN=4bf9b3f13761da04ac0e67d0654a3c2d643c7913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:c8:82:ae:d4:4d:b9:54:f8:f9:92:f7:67:
b4:d6:80:f7:dd:b3:9f:25:45:47:e5:ea:5b:f5:3f:
1b:c0:e9:1d:14:6b:0c:09:43:f2:91:fb:b1:36:9d:
e8:a1:4c:c3:92:2c:68:e7:27:d5:db:c6:5f:39:bd:
16:97:d2:c8:9c:9d:44:c1:b9:01:c0:5d:ea:b7:3a:
f2:a7:f3:e8:5a:af:c5:8d:ae:c9:8a:75:62:0b:c3:
33:9d:af:b1:53:23:95:a1:0b:89:ae:04:7c:ca:91:
01:ec:e0:53:8c:2c:9f:21:9b:71:ed:74:f2:fd:50:
39:cf:ce:c1:74:2d:7c:74:c1:91:94:d3:1d:2b:e2:
03:90:5a:87:33:b9:24:e4:89:f5:f5:23:f2:c4:17:
19:71:54:d4:82:cf:ce:7e:45:e6:c0:71:e7:d3:03:
20:e4:04:7b:32:ab:f2:56:98:82:3e:b3:bc:30:bd:
f0:7e:4d:dd:05:d7:af:e2:54:3d:5c:d4:f4:72:46:
fe:0f:00:7f:07:5f:fe:b0:50:70:2b:5c:08:62:8e:
47:2e:8d:76:0d:db:0e:84:32:c9:3a:39:9c:0d:96:
50:d1:58:41:dd:1c:90:b7:60:72:cf:e1:63:ab:fd:
b6:b4:69:61:d2:37:20:81:87:67:23:ac:21:c5:c5:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F9:B3:F1:37:61:DA:04:AC:0E:67:D0:65:4A:3C:2D:64:3C:79:13
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:36:6c:a0:52:7e:f1:72:3a:8c:46:36:51:aa:2d:48:52:d5:
7c:3c:c7:eb:24:ed:21:f4:37:2f:b2:b1:ba:13:26:38:01:81:
37:99:e7:82:c3:5b:d7:04:77:77:13:50:55:e6:4d:3c:4d:49:
fc:e4:d4:dc:b7:9c:4b:8c:b6:06:c7:9a:92:54:cc:d6:1d:52:
e8:19:ae:6f:e9:ac:08:8f:48:a7:f7:6f:e9:3a:aa:36:5f:bc:
83:d4:c7:41:66:50:77:2d:19:4b:78:57:d1:47:f5:aa:75:42:
db:d5:a2:fe:1a:e9:fe:13:f0:c8:a8:2f:14:51:d1:3d:11:c4:
de:60:18:1c:48:0d:41:45:fe:93:9a:d8:25:09:24:97:db:f2:
ae:a1:b8:52:aa:15:70:6e:fd:6d:12:08:19:a6:93:a9:6c:65:
82:24:32:f0:77:d0:c1:02:2f:06:19:36:c3:4c:04:63:39:dc:
5a:d6:e4:2e:d4:fe:77:43:44:f9:51:d6:48:28:e3:86:66:2e:
51:dd:ea:60:75:51:c7:1c:91:7f:4e:06:91:dc:9f:33:02:9b:
cb:51:68:76:06:07:eb:04:57:69:9a:7e:72:17:e5:35:94:b3:
10:d0:d7:05:16:43:22:1e:ba:81:a4:88:bd:86:b8:d0:6e:04:
96:d9:af:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:06 2025 by rpki-client