Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File: MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier: XKFN1vWmZR/q6a/k3rBXeqR5YV3CvHZP+vukx7Vb/Go=
Subject key identifier: 22:AE:B1:49:6A:73:5C:D5:00:99:B4:EC:D3:4D:EC:37:99:07:53:A7
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial: 019A70A50484B1FADC96903E6A8321B29F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number: 0DC2
Signing time: Tue 11 Nov 2025 02:00:54 +0000
Manifest this update: Tue 11 Nov 2025 02:00:54 +0000
Manifest next update: Wed 12 Nov 2025 02:00:54 +0000
Files and hashes: 1: 8epfI_mMakP3Lc2UTESKvosKkSQ.roa (hash: TdgdgIhwNAm+SCbAnoUIw15ZVzHOK/dqP386QKWeMpw=)
2: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: fQ81QwuK0AWO8xqLG52yeuftfnRjdqll+wgaq2MHrD0=)
3: QGmT3Sq2OPr697a4jgYrgI5vyvo.roa (hash: cuVDNdIzZEyCh+DXAd1wDhu2rpRcNesepLeBXruUFrc=)
4: wrK5q_yhp6CSYsOOeb2tBzjXlME.roa (hash: GpJJNVkvPjxKFXFwN00ofjrbHt5+9rV8i+MDqv4Rs8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:04:84:b1:fa:dc:96:90:3e:6a:83:21:b2:9f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Validity
Not Before: Nov 11 02:00:54 2025 GMT
Not After : Nov 12 02:00:54 2025 GMT
Subject: CN=22aeb1496a735cd50099b4ecd34dec37990753a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:86:1b:d9:07:ec:39:bb:36:b0:0a:20:5a:
39:bb:13:31:59:4c:cd:d7:6b:1a:af:84:dd:e4:2b:
a9:0a:82:29:ff:29:22:21:64:a7:c2:cb:ac:8e:8f:
7f:d6:fc:65:78:7b:fe:8e:72:31:02:d0:c1:4f:f7:
f7:02:c8:dc:e7:b0:2b:3f:a4:99:f3:24:f9:97:09:
0e:34:77:26:01:f9:07:13:d6:94:e8:95:30:b3:29:
31:9c:23:bf:a7:2b:7c:5d:ce:61:dc:df:df:d5:21:
46:36:bf:ae:8a:e5:15:16:02:f7:45:31:ab:72:25:
d6:47:fb:2e:db:e9:19:05:ea:8d:d6:76:9f:69:5b:
80:47:49:2e:7a:f8:13:f2:a8:9b:6e:1c:bc:47:a9:
82:49:f4:a8:68:4a:0f:b3:3d:90:4b:0b:da:d9:a7:
7a:c7:dc:20:2f:f3:af:20:05:fa:ab:82:67:f5:a8:
bd:ea:41:35:17:5e:b6:5a:db:b9:c8:c9:5f:5b:9c:
a0:7f:02:56:97:bd:36:aa:36:14:c5:59:f5:c5:81:
98:64:9a:4e:63:12:e4:e3:5a:89:13:9e:48:fd:b5:
0e:ed:d8:90:13:55:af:76:69:99:11:82:24:ab:f1:
ca:09:40:14:b0:76:bf:3f:cb:3b:f5:92:72:ad:11:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:B1:49:6A:73:5C:D5:00:99:B4:EC:D3:4D:EC:37:99:07:53:A7
X509v3 Authority Key Identifier:
keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:18:40:88:cc:86:7c:47:f1:41:a1:e7:28:ed:4b:d5:2b:91:
d6:7e:6e:ba:3f:e4:c0:b7:9f:da:bc:a4:f5:60:f9:a9:b7:00:
35:90:f4:53:16:47:0b:19:fe:68:3a:f3:de:d8:cc:a7:58:e5:
f3:7a:d5:f9:0e:f7:10:30:ac:ac:c0:28:27:15:12:f1:1b:78:
b1:75:af:da:33:2f:8b:41:62:35:44:a1:bc:fa:04:40:67:dc:
a0:fc:79:d8:da:5c:e5:e0:b0:67:66:a6:4b:c9:63:09:d3:77:
f3:ae:a1:92:e8:df:ad:93:78:2c:e4:0c:ca:b6:02:e3:28:fd:
07:ee:89:22:dd:05:fe:7e:1a:4e:b0:5d:c6:d9:be:cb:c7:72:
23:cc:82:78:42:c6:a5:53:ae:90:84:46:15:c7:0d:c3:d2:78:
08:09:c0:65:27:82:6b:21:a4:e0:d6:d8:d8:34:86:7e:ce:5a:
50:b4:73:9e:e5:14:9b:e2:e4:c3:5e:7a:82:63:85:92:32:05:
29:1d:e5:6a:37:f4:73:c4:63:9e:4a:87:f9:99:08:f7:8c:52:
45:82:b8:ec:b9:d2:b1:59:81:3e:2c:9a:d3:21:aa:f2:3c:47:
be:95:a9:fe:79:39:6c:a4:b8:ff:aa:a7:5b:bf:1a:d8:22:b3:
4a:fa:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:38 2025 by rpki-client