Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: GJARG3B07YosBR+6n2uuD1zl2I+E+gPwDimE7stLmhM=
Subject key identifier: 5B:9F:65:01:80:E9:8D:B7:A7:20:93:A5:D8:DA:13:0B:45:83:BB:5D
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 019A718083639FFE686E1B9F9D74DECFB5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 10BF
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: qRyXKJyAxR0zyYXpB/nLYZ/3slmVs9LP3EJC30R9pZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:83:63:9f:fe:68:6e:1b:9f:9d:74:de:cf:b5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=5b9f650180e98db7a72093a5d8da130b4583bb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:b8:83:46:4d:57:dd:9c:00:63:15:12:e5:
90:b0:4c:36:ac:22:3f:f8:ed:73:f5:0e:83:3f:42:
1b:ed:6b:2a:0d:b5:c6:26:d5:ab:16:70:2d:2a:63:
91:50:b2:79:ce:96:61:a2:09:71:00:ae:c0:31:ec:
40:b1:a4:eb:76:ba:aa:63:30:59:45:91:c6:7c:27:
41:a1:e0:e3:39:b5:14:41:d4:87:58:29:1b:50:8d:
14:47:a4:98:e1:bb:29:05:2b:21:dd:1f:94:c8:5e:
80:b1:04:ed:0d:e8:85:f4:6e:6a:ca:7f:23:19:e5:
71:da:7c:b8:8b:66:43:cc:7f:6b:d9:8d:78:f2:60:
46:8f:1c:2d:5a:1a:5b:72:eb:06:bc:af:f5:08:a9:
b3:89:92:12:48:2b:4f:e9:d3:26:7f:01:d3:68:d5:
ad:2f:14:9f:3e:53:89:5f:8a:1b:83:1d:d0:d5:70:
77:7b:86:5c:80:08:18:c8:47:ba:60:72:e5:fb:dd:
45:48:3e:69:d8:e3:b7:53:9b:95:8a:a6:0a:a2:af:
1a:d2:d8:7e:91:2f:01:fb:79:eb:0f:0f:f1:fd:7e:
49:1d:68:21:7e:f2:c0:3f:d8:6c:3c:79:07:3d:ec:
18:a7:f9:01:25:8f:36:22:78:ef:eb:36:34:6c:26:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9F:65:01:80:E9:8D:B7:A7:20:93:A5:D8:DA:13:0B:45:83:BB:5D
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bb:19:87:24:65:7b:15:9f:41:13:88:8e:a3:c2:97:f3:d8:
5d:8d:16:79:5c:81:57:6f:cb:81:9d:67:31:a4:f4:d5:26:11:
9e:ea:f6:9e:ae:ff:b6:b5:08:d7:94:45:65:8d:98:fe:1d:ec:
8b:db:5b:ca:0d:bb:4a:7a:fb:3f:69:3c:e9:64:45:a7:09:97:
d2:d9:09:1f:38:80:97:b4:ae:cc:57:ed:2f:b6:d5:2c:65:95:
71:e4:ad:1b:fe:0f:ef:b2:ab:7b:b0:4f:75:a0:0d:27:b4:84:
5b:0f:3d:4f:b1:51:af:cd:a8:28:85:1e:57:03:ae:07:ce:34:
4f:21:16:70:e9:13:55:42:fb:72:4d:0f:6f:55:5d:5b:b4:c7:
45:97:4c:1e:91:27:65:e7:4f:af:92:b0:91:85:e6:09:2b:b9:
8e:1b:96:28:7a:51:c5:3e:2d:12:1a:23:4f:3e:16:26:bd:f9:
95:af:6f:23:77:76:d3:18:8c:34:8a:20:b8:10:30:35:3c:43:
99:ad:6d:9b:c1:8b:fb:76:93:6f:8e:e0:7a:18:e8:cb:c4:f6:
cb:72:89:5a:a9:7c:ce:a3:1d:f7:27:f3:c7:73:94:df:61:d3:
50:4c:4c:7a:54:53:a6:d8:b4:ad:bd:cb:3f:7f:a0:a6:47:96:
fa:44:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:47:00 2025 by rpki-client