Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: TQL1sXtHZDsO2GyAU9UbyXjIZLfw8BnOxnacvOmiKpY=
Subject key identifier: 5E:4A:9A:5D:2E:F3:C8:04:67:76:53:88:92:35:F4:C0:BB:35:F8:8B
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019A518795A9B31BC27DD49001B0DF520D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 1716
Signing time: Wed 05 Nov 2025 01:00:31 +0000
Manifest this update: Wed 05 Nov 2025 01:00:31 +0000
Manifest next update: Thu 06 Nov 2025 01:00:31 +0000
Files and hashes: 1: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=)
2: kNjtAZnBIdDs69zL_sxo5b2kvsE.roa (hash: ZvUWHB49abkoN+508ycB2Kcm14s8kB/R0ioTMdmzGbc=)
3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: 8dQQkUK5N0bDbmPLpGV4xj34apes8kAb3LUluGjr+gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:95:a9:b3:1b:c2:7d:d4:90:01:b0:df:52:0d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Nov 5 01:00:31 2025 GMT
Not After : Nov 6 01:00:31 2025 GMT
Subject: CN=5e4a9a5d2ef3c804677653889235f4c0bb35f88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:a2:bc:48:d9:d2:ac:9e:e9:a5:8a:28:64:
46:0a:0b:ee:83:b9:e9:36:63:af:7c:d0:72:7f:55:
d0:d4:a7:74:6c:49:26:e1:90:75:33:07:26:71:da:
c6:f0:a7:cb:28:b1:f1:05:ff:10:33:e4:57:64:d4:
21:e0:11:db:ad:b3:ba:98:8e:05:e1:da:e5:0e:b8:
d3:a7:e7:5f:12:af:b4:10:cf:00:73:6c:b6:67:43:
56:02:87:51:84:11:6a:c5:57:40:ec:19:23:41:c6:
6a:8d:7e:0b:75:bd:2e:b6:6f:f6:aa:3f:85:05:9a:
3e:6f:52:a1:77:84:7b:73:9e:de:1a:32:b6:fa:a4:
37:f9:b4:0b:51:98:5f:3e:09:62:d4:b5:f9:2c:4c:
56:e0:ce:ec:83:54:e2:7e:4b:c5:b7:74:74:64:ce:
5a:77:95:6f:b6:66:93:ca:56:2f:84:b8:0f:48:f4:
f1:1c:ef:a7:69:4b:c3:87:f2:4b:c0:8c:f7:b8:9f:
17:43:dd:b5:49:a3:81:53:f6:f6:bb:ab:c0:5d:d3:
04:c8:03:0f:b0:30:1e:1e:21:ca:11:7e:8f:4a:ca:
e3:88:97:10:45:39:0c:cf:1e:21:34:03:a6:2d:6b:
7b:cc:4a:ef:13:36:40:36:8a:ab:a8:e1:88:df:f6:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4A:9A:5D:2E:F3:C8:04:67:76:53:88:92:35:F4:C0:BB:35:F8:8B
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:fa:42:13:fb:d7:50:62:62:ac:0f:f2:d3:0e:85:97:3e:
2b:15:80:3d:3c:d8:9a:19:79:0f:e2:12:81:4c:27:cc:d8:47:
02:ad:76:01:2e:fa:97:0a:b7:8e:66:e0:7d:c6:5f:2f:89:d6:
af:54:7e:46:48:ac:b6:de:cc:0e:e2:ae:d9:82:02:6b:79:58:
55:7b:d1:20:0d:09:c4:a9:45:ee:03:06:cd:24:7d:10:0f:8a:
f6:3f:00:28:9c:39:03:2f:bf:19:3a:56:91:27:2e:ed:b2:b4:
ee:57:49:1e:36:05:d7:cc:25:25:74:32:c9:b1:4d:45:fa:a3:
eb:67:a3:af:5b:0e:ab:90:61:0a:ee:52:fa:a6:fc:4b:65:3a:
a5:0b:02:f8:3f:e2:d9:76:56:aa:9a:c9:31:04:75:bf:cf:2f:
87:87:d2:cd:4e:e4:c4:cd:80:75:cb:8d:e4:dc:9d:79:26:66:
24:4b:a5:fd:45:72:ad:ff:12:c1:54:55:ca:5a:b0:48:40:7c:
0f:80:71:ca:73:02:e6:fd:a9:e4:a3:08:ae:28:82:f6:dc:73:
66:34:6d:08:5c:a4:e7:84:45:2a:24:2f:e3:58:36:57:98:86:
db:9d:d7:35:9b:9e:3e:3d:55:92:2d:cd:ec:fe:b5:fe:a7:b6:
ff:af:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:39:30 2025 by rpki-client