Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: P5cxepgF9ntXOqysbPF8+H4EAJctvyUNMZrBLM812zY=
Subject key identifier: 60:9F:FA:A1:53:82:F9:2E:5C:88:77:90:B5:C1:7A:20:2A:20:0B:69
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 019A533F71911C6EDE450000E1A6BA1B7966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 1094
Signing time: Wed 05 Nov 2025 09:00:58 +0000
Manifest this update: Wed 05 Nov 2025 09:00:58 +0000
Manifest next update: Thu 06 Nov 2025 09:00:58 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: kaPYaXeGpljfLKPGtiZX7s0YBwGpKedsYxHpnd6uHj0=)
2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=)
3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=)
4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:71:91:1c:6e:de:45:00:00:e1:a6:ba:1b:79:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Nov 5 09:00:58 2025 GMT
Not After : Nov 6 09:00:58 2025 GMT
Subject: CN=609ffaa15382f92e5c887790b5c17a202a200b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9e:75:75:c5:81:51:04:ed:d9:d2:82:c1:a0:
bd:fb:5e:32:55:09:b2:95:75:95:81:4f:a4:4a:37:
49:a3:41:2f:30:65:63:b4:96:ce:86:de:ea:7d:e1:
12:55:0c:2f:fb:bf:ef:eb:6b:4a:c8:2c:42:12:f2:
7f:d1:0b:3f:16:69:f9:46:1b:d2:42:15:b1:76:51:
00:1e:73:71:0a:ad:d4:03:cb:37:78:1d:b5:78:0b:
18:71:05:b3:94:29:f2:52:b2:19:ee:28:f9:99:02:
83:eb:6f:4f:f1:de:9a:e3:c7:ae:af:a2:c0:99:10:
ef:47:6c:ab:14:38:ba:b1:f1:59:f0:17:8e:6e:a3:
dc:c4:29:fb:11:2f:5f:17:12:6e:0d:68:7b:c8:9a:
ad:04:a9:5a:6f:43:3c:fc:1c:f6:46:ff:01:94:66:
03:94:96:da:c1:71:95:c5:4e:03:17:0c:6e:e4:80:
d8:99:b8:53:f5:18:19:54:c1:9b:11:cd:b7:8c:e3:
c9:ad:c4:31:4b:98:53:ea:fa:88:f7:e4:ff:81:a9:
97:15:88:4b:23:c9:6c:87:e7:39:13:0d:e9:e6:c6:
1e:8d:ee:00:14:af:6d:34:af:2f:4e:a7:1e:bc:6b:
00:6f:55:9a:ca:12:ef:2c:84:55:7e:8b:a2:71:f5:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:FA:A1:53:82:F9:2E:5C:88:77:90:B5:C1:7A:20:2A:20:0B:69
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:51:21:60:3a:24:7f:fa:9a:97:7a:95:07:05:d5:4d:74:fc:
bb:5b:d7:9b:99:22:b7:a2:da:d3:57:7e:7e:89:f0:25:06:2f:
86:b7:94:40:c3:dc:cd:80:1b:61:a1:5f:38:0e:bb:c5:3e:44:
7d:cf:84:92:dd:a5:6f:42:e6:05:57:6d:25:9c:8a:30:5d:50:
79:25:7a:26:c6:39:1b:0a:90:9c:0a:8b:fc:5d:be:a5:b6:85:
67:40:92:cf:76:d0:fd:16:fb:40:89:44:d9:27:ea:8a:51:e9:
fe:ec:29:fe:97:64:bc:94:78:d8:d8:50:fa:a1:56:4c:40:b3:
63:ff:27:79:07:17:b7:27:e8:b4:45:d6:df:c3:c9:84:b0:ed:
5e:a3:d7:3c:66:ac:f2:6f:8a:e7:6b:21:08:8e:28:d3:cb:4c:
8c:c1:14:ec:4d:7e:7a:5b:66:21:69:48:a9:02:9b:43:82:d7:
66:41:e3:ff:6c:ad:17:1d:ac:e9:78:3f:17:18:06:c1:86:ef:
d1:5d:d4:db:ac:d3:13:37:21:d1:8e:e9:28:ab:71:07:72:95:
b4:51:cf:c4:1f:35:e5:d3:ba:d5:c0:62:19:34:36:ea:ef:61:
ea:29:ae:ad:0d:65:c7:2c:15:4a:fd:7a:d1:0c:90:a5:e0:a1:
1d:7c:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:54 2025 by rpki-client