Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File: my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier: h7u+2wtvc16oTB2xFgexugWPqfL5y/CZD4n09MKEzOw=
Subject key identifier: 36:F2:5C:8F:C2:33:38:1A:57:BD:1D:5C:C1:9C:3A:5C:A9:9D:F8:D9
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 019A725C913A328688C042332F2BFA3FEE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number: 1516
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: ubPSNPgqR3mG/GiF6s+sxX5NLN2OwTXleKOxPuZViZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:91:3a:32:86:88:c0:42:33:2f:2b:fa:3f:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=36f25c8fc233381a57bd1d5cc19c3a5ca99df8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:17:90:b0:23:28:f0:e6:5c:c6:b1:96:29:
2e:87:a9:67:a6:c9:21:53:07:1a:f9:90:db:96:b6:
3c:fa:e9:e0:f1:29:a3:a4:3f:04:e0:b2:89:e9:df:
82:a3:6e:97:f8:de:2c:82:ba:36:db:9b:c3:ce:1e:
2f:78:eb:bc:b0:8d:09:0c:5a:a2:ff:3a:8d:a4:14:
f6:4b:89:b0:a2:84:be:19:df:61:ec:88:e0:5a:1e:
62:fb:3c:4a:cd:13:34:0f:25:60:ef:66:b6:28:b2:
1d:50:b9:a0:0e:54:1b:e6:14:50:c0:83:be:6a:85:
08:ac:f5:c6:02:4b:82:05:de:f5:56:00:00:ac:09:
ad:e4:ee:4f:76:17:38:bc:10:85:f7:71:36:c8:da:
a1:9b:4d:99:b3:23:6d:2a:e6:3d:ff:e7:47:04:86:
0a:0f:42:a3:40:ab:98:2c:b8:f2:1e:80:0e:cc:55:
85:5a:f0:eb:4a:75:18:4d:0b:cd:23:17:28:6c:70:
55:d9:26:86:f3:f6:a3:f4:d5:0f:39:8f:16:dd:3e:
34:f4:78:e6:da:09:2d:49:b2:85:2f:05:72:e3:50:
e8:e8:c7:9c:5e:85:72:7e:07:2f:3e:55:4a:ad:22:
09:67:da:ff:fa:e4:ac:ee:d2:d2:c4:c1:8c:ee:03:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:5C:8F:C2:33:38:1A:57:BD:1D:5C:C1:9C:3A:5C:A9:9D:F8:D9
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:84:44:e4:f3:59:9a:0b:6c:b9:b4:2e:c9:14:e1:d5:60:fd:
4b:53:b9:0d:a0:ed:a1:7a:95:cf:4e:5c:4c:52:d7:df:97:34:
73:54:25:8f:7c:61:e8:8d:03:bd:ce:d7:b2:9c:c6:87:39:25:
4e:7d:23:84:64:07:d0:39:4a:a5:b1:b6:1e:47:8b:ab:d3:53:
18:44:d5:74:45:fe:5f:9e:1f:f5:ee:7c:00:1c:ac:b7:70:8e:
7a:f7:17:c0:fa:d5:82:f0:8d:f6:a0:84:4a:18:29:16:6b:1c:
a8:f6:88:d9:fb:5a:d4:e6:ee:92:da:da:7e:e4:34:8b:d9:ab:
c4:a9:02:81:f1:94:98:c3:b6:6d:a6:fb:33:67:2a:bd:ef:3a:
19:72:5e:f0:35:c7:53:f7:a2:95:37:54:15:e2:1b:d6:45:90:
01:3e:78:53:e1:68:2c:36:f5:f9:61:6f:81:15:d0:ed:44:14:
67:39:98:0d:79:aa:ec:21:1e:c3:ef:3f:18:44:ec:a8:54:ac:
88:7d:9e:f3:24:cc:cc:82:02:c2:6f:99:21:e9:7a:41:bd:cd:
5a:95:44:3e:00:f2:4e:6e:88:55:2b:a7:8b:ea:f4:ee:41:69:
aa:93:5d:d0:0c:5f:54:6c:e1:99:69:d4:ef:ff:8d:66:11:9e:
43:e8:81:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:18 2025 by rpki-client