Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier: v7VV5S7DCxOhF4kORN6Lwv9hFeP+j3U5UHK1+i/0LI0=
Subject key identifier: 39:E3:B8:28:CF:32:47:2F:6E:82:8D:AB:A5:39:80:58:59:67:96:FA
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: 019A729365ACD9AB1C59BE949F26FCEECEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number: 0E01
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: YErVt-7gu1jQqcup8-GVaaYjMj4.roa (hash: nT1lcrWfw1dtZ1xk/0YupjRA64MYT4KdIF9Y0byNnSM=)
2: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: y5b5plWidUxDuSM80wwdKG/fWv6KWM7Puqlvjh4Ddho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:65:ac:d9:ab:1c:59:be:94:9f:26:fc:ee:ce:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=39e3b828cf32472f6e828daba5398058596796fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:8e:12:92:bd:44:e9:1d:86:20:dd:fc:80:
6a:92:29:1f:1f:47:2b:b7:f1:d1:59:34:c5:a9:c6:
2f:a4:06:7c:d0:9a:a0:82:3a:85:84:00:78:52:34:
c2:b5:39:1e:80:38:f2:92:cd:76:74:3b:41:0c:4e:
1a:72:1f:2d:1e:d2:48:8e:8c:79:b4:60:3a:69:15:
ed:c2:4b:5b:d2:0a:23:23:b1:e6:4b:19:4a:c5:6c:
54:e2:63:2b:f2:c2:15:d8:01:0e:14:87:38:cf:78:
a0:6b:ec:ad:78:aa:90:78:b0:f1:92:21:eb:a0:71:
5a:2d:87:ce:62:53:f8:90:a9:6d:35:5b:0a:20:0c:
c1:98:4f:6f:09:76:8a:f3:73:13:45:cc:24:33:3f:
64:c2:48:08:58:ac:37:ec:b3:5e:3e:1c:85:16:ad:
77:a9:3b:c3:81:2b:4e:1e:9d:18:94:ec:56:eb:bf:
dc:bf:68:84:6e:6e:fb:0b:da:25:6e:56:e2:05:ee:
97:a7:72:41:51:6e:17:ff:6a:ea:ec:e1:15:f0:4f:
13:83:dc:e6:dc:c6:e8:4e:2f:c9:c1:47:d5:5b:bb:
7a:b4:71:74:79:c6:c8:9f:c0:63:87:57:32:44:4b:
af:ea:3a:53:45:de:27:bb:a5:91:68:b2:96:08:91:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:B8:28:CF:32:47:2F:6E:82:8D:AB:A5:39:80:58:59:67:96:FA
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b2:9f:3e:d7:0d:c8:b5:83:ad:98:5b:81:94:df:33:4b:09:
c2:9d:0b:f2:7b:76:6b:6c:45:a4:dd:94:3f:0d:26:37:f3:95:
c0:ed:89:6a:0b:e0:af:a6:1f:85:15:ef:d7:dd:bb:45:cb:6d:
b6:e7:4c:72:24:18:57:ac:9c:7d:1a:f4:55:40:db:37:f9:1f:
1c:ab:8b:bc:aa:34:c9:2a:f1:a1:e2:92:97:73:57:8e:50:47:
1e:c7:5b:68:fc:2e:44:9f:07:1d:5e:83:3d:3c:be:47:e0:6e:
44:94:74:3d:b0:7b:6e:cb:36:96:c0:1c:09:63:55:81:b6:69:
4c:fa:d4:61:ff:8d:dd:09:ab:80:98:22:0d:a9:67:28:fd:1b:
a3:da:7f:d7:92:ce:d9:a7:e9:4d:10:6f:c2:01:0a:b9:66:b5:
6d:c6:da:47:c5:3b:61:46:dc:bb:d0:ed:b5:4a:ce:69:9d:62:
2e:05:00:99:71:47:b1:2b:d9:d9:b5:9b:c5:ea:1d:15:03:f0:
ec:b7:74:e0:bd:a0:73:63:9c:1d:47:78:a9:2e:4c:c0:41:4c:
b3:d5:ae:2b:ed:5d:b0:51:52:e1:55:bb:20:3c:9f:1b:95:5e:
b7:28:b1:b3:4b:86:ca:b0:55:10:c9:6f:a1:83:10:9e:a5:fb:
4f:b5:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:45 2025 by rpki-client