Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
File: mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft (raw, json)
Hash identifier: r/SCI/PCYTZx6t30J6PCa8aqqixuZk4vVSAvC8/iXY0=
Subject key identifier: 55:05:91:3E:00:AA:AE:97:EC:FD:39:E1:E9:31:56:63:CD:81:CA:1B
Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
Certificate issuer: /CN=9915558c6897fea224855cf60381857354708411
Certificate serial: 019A70A55FF40AD81FCD688B6D345B82DCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
Manifest number: 0D89
Signing time: Tue 11 Nov 2025 02:01:17 +0000
Manifest this update: Tue 11 Nov 2025 02:01:17 +0000
Manifest next update: Wed 12 Nov 2025 02:01:17 +0000
Files and hashes: 1: mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl (hash: 3d2J/lAapKlCA1vSMbuwHEgNR4zy+n+SIxh6XWstl/4=)
2: p_ZOqooaB4FZLqO_coSsHFoaxrI.roa (hash: kDng5P96ioc5fd3WKreLwEWmLw7z/u+Qt5PBtL9Aseg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:5f:f4:0a:d8:1f:cd:68:8b:6d:34:5b:82:dc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915558c6897fea224855cf60381857354708411
Validity
Not Before: Nov 11 02:01:17 2025 GMT
Not After : Nov 12 02:01:17 2025 GMT
Subject: CN=5505913e00aaae97ecfd39e1e9315663cd81ca1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:cf:3e:5c:7a:0d:02:05:b7:c5:77:69:2e:
da:0f:cb:a6:93:42:37:a5:16:bb:7c:45:75:de:49:
b0:d8:65:ed:50:0b:90:c1:6a:30:c5:a4:b8:78:f1:
b0:7d:0d:39:a6:9f:a5:2b:85:95:16:48:b4:c3:4c:
3b:21:82:c1:a3:2f:86:6b:14:2f:57:0b:bd:d7:a3:
b8:da:2a:94:b7:f0:9c:ba:77:1d:19:17:1c:1d:c3:
a6:6d:f2:51:f2:b5:f0:63:c9:7b:57:1c:bd:8c:a8:
ba:b0:83:47:8f:8a:bb:33:ba:83:b3:48:49:3c:10:
62:c6:f2:fb:62:cd:5d:5c:4f:1f:1d:ec:ae:5a:6b:
3a:cd:e8:27:26:3d:0d:ed:30:e9:3a:f5:66:68:e3:
0f:5f:3a:ab:ac:5c:ba:5f:b2:bf:88:2d:14:0b:90:
a9:a0:c8:1a:07:26:68:c3:28:40:87:91:45:79:2a:
a7:90:a3:14:47:85:be:7e:83:7d:47:f1:cd:79:9d:
f2:22:77:87:ce:80:c3:47:7b:0e:06:9e:35:63:12:
62:e2:30:91:a7:f3:81:f1:09:dd:50:17:ff:b3:e4:
e4:65:65:6b:1b:a2:6b:3e:13:e3:63:c2:07:27:5d:
9c:ad:a7:fc:f6:f7:ae:56:62:81:2e:97:21:ee:0d:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:91:3E:00:AA:AE:97:EC:FD:39:E1:E9:31:56:63:CD:81:CA:1B
X509v3 Authority Key Identifier:
keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:af:d1:f7:63:b2:cf:8f:54:ee:5a:bb:17:bf:c8:4f:ee:66:
d2:ba:8e:61:dc:69:54:fd:15:95:76:dc:9a:2c:58:27:32:44:
d6:8b:f7:c0:d9:82:3d:68:a4:1e:aa:a0:cf:43:fa:09:08:28:
7a:23:9e:05:b8:8e:36:09:5c:ca:87:36:7f:b8:cc:76:af:09:
de:a0:bb:7b:4f:bd:54:95:63:1c:35:38:c1:d7:51:64:30:f5:
f5:d9:9c:c4:eb:3a:ff:2a:93:88:50:3c:57:a7:4f:98:86:89:
a0:44:97:ee:d6:a9:3a:f1:ba:f4:5c:c5:75:9d:4f:97:e6:c5:
c2:25:cc:fb:62:4a:72:65:b0:97:86:4a:df:47:06:44:f1:da:
07:69:49:15:f6:f1:09:d8:9e:9e:17:b8:37:ec:8f:95:9d:eb:
d1:84:b1:a0:ef:e7:bb:71:14:5c:8c:e1:a8:6b:be:05:6b:db:
d8:29:57:5d:d7:c4:7a:a2:6d:fb:1e:b6:ab:dc:7a:3f:f1:15:
15:ae:59:1d:be:28:93:5e:bb:6c:99:86:d0:2b:b1:2b:6c:ba:
ce:04:1e:41:1d:1b:81:06:d5:1b:33:ac:2a:e9:94:25:28:5a:
c9:c3:5a:b7:89:28:51:ed:bc:8c:a4:ae:f4:3a:93:33:e8:08:
2f:78:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:41 2025 by rpki-client