Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File: my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier: TePcmD62/P+S+J6sK44crURuub+/O96vKXIIdG0a4ww=
Subject key identifier: 34:CE:81:62:A7:B1:E7:B5:5D:07:FD:71:77:A2:71:29:26:EF:CA:B3
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial: 019A71B79C6728013BF41ACC5CF7EBE115E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number: 0ED0
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: TYmzPcB6BZn11j/lZf+JKZm2UPYr0TN2LJTSL/z3YuA=)
2: qDQj2i79pZYtwis1stkVmdhu_cA.roa (hash: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9c:67:28:01:3b:f4:1a:cc:5c:f7:eb:e1:15:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=34ce8162a7b1e7b55d07fd7177a2712926efcab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:aa:e2:d0:23:49:e0:55:ee:ce:6b:b8:4f:
8f:aa:cb:64:60:7f:05:e1:02:73:a2:e4:c7:e6:a7:
a0:f5:9a:78:71:cc:65:55:d2:85:18:2c:fd:7f:9b:
e4:6b:93:fa:67:93:a0:08:b0:83:24:0f:c6:9d:d4:
21:0b:ea:a0:56:b5:f1:32:d3:fa:33:98:30:52:d1:
54:4a:35:54:cd:35:93:01:57:3b:24:32:1d:84:23:
b0:5b:41:25:ae:aa:62:ed:8a:c0:94:15:bd:26:55:
09:35:cd:4b:8e:78:bf:0a:94:b6:e1:57:0d:5c:68:
80:b8:3b:77:b1:34:fc:f1:87:66:90:42:31:2f:8b:
a8:f5:f4:89:c6:58:c8:7e:7b:50:06:d7:37:0b:ca:
55:80:ec:ea:1a:42:30:a4:84:6a:38:7c:c2:b3:a4:
61:40:fd:1f:3b:fe:a0:75:3e:b3:7a:a6:23:04:f7:
48:8a:48:fb:d4:90:c7:34:b0:65:d9:a6:c3:e4:ea:
be:29:ac:ba:7f:53:5c:1e:01:58:68:ca:be:43:ac:
49:fd:ad:07:e3:08:6a:12:54:45:3c:4e:71:2f:e8:
df:11:a5:62:91:be:17:dd:42:a0:09:3f:a8:52:ae:
c3:1f:1c:05:55:5d:4a:64:62:4f:4f:d6:94:57:e5:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CE:81:62:A7:B1:E7:B5:5D:07:FD:71:77:A2:71:29:26:EF:CA:B3
X509v3 Authority Key Identifier:
keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ec:42:09:6f:fe:46:cc:93:30:52:85:aa:e1:82:26:70:ce:
74:e8:b8:eb:37:63:45:40:83:6a:bd:32:e8:ef:e1:23:10:1d:
90:1f:07:12:22:ef:92:65:bb:ec:90:77:44:ac:3f:9a:62:6f:
26:f7:13:95:fd:0b:e3:98:19:ca:2c:2e:94:df:67:6d:3b:b2:
e2:dd:c4:7a:e3:56:c5:86:6c:72:10:f0:c0:94:cc:c2:d5:98:
96:20:e4:97:5b:c8:78:a4:c8:b6:f0:63:31:78:53:1a:18:ef:
8a:cb:2a:f2:07:b0:7e:5c:29:99:9c:17:83:1d:08:b4:e1:f1:
69:32:60:6e:8a:11:bb:4b:ea:1f:e8:b3:0a:b7:01:2c:d7:c1:
c8:ce:40:8b:27:7c:24:ea:8c:de:52:e8:27:a7:08:74:bd:e8:
bd:22:80:ea:9b:b7:94:f6:3a:04:63:79:9b:ed:f0:92:5d:f1:
8f:35:48:fb:23:5c:98:e1:de:68:cb:fe:93:d1:f8:d5:7e:73:
e8:b1:52:99:4c:3b:20:e5:3a:9e:15:94:9c:3f:fb:04:cb:d9:
23:88:57:85:0a:4b:7b:4f:a2:9b:64:19:8f:fd:04:8e:9e:ba:
00:f2:46:37:84:d1:68:7b:ca:a4:56:ba:07:5e:d8:d8:e9:02:
e3:57:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:43 2025 by rpki-client