Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: C313mhJvfpErWJGdVLXPQOl3OO/hLfTtocY1IOw7jqI=
Subject key identifier: 9B:9A:DB:02:C7:B3:2C:1A:25:65:6E:19:39:B5:08:34:9C:8B:63:24
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 019A51F54B821E2D5CD4B666E68B65ED6C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0C98
Signing time: Wed 05 Nov 2025 03:00:21 +0000
Manifest this update: Wed 05 Nov 2025 03:00:21 +0000
Manifest next update: Thu 06 Nov 2025 03:00:21 +0000
Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: pYjhchVesbPEJKbCiRPZfEIdGViEHAfwM6ytJksOHfA=)
3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:4b:82:1e:2d:5c:d4:b6:66:e6:8b:65:ed:6c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Nov 5 03:00:21 2025 GMT
Not After : Nov 6 03:00:21 2025 GMT
Subject: CN=9b9adb02c7b32c1a25656e1939b508349c8b6324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:24:fc:b4:3e:88:81:a1:c4:bb:c3:d7:a4:89:
92:1c:ee:44:8f:26:6f:5f:17:a8:0a:f8:4b:31:ff:
29:d8:7a:b9:fe:02:9f:4e:eb:e4:fc:ba:81:2a:6a:
6a:14:5f:67:0a:ff:79:3e:12:5d:b8:c5:3f:5d:ef:
75:13:bc:92:0e:1e:97:d2:d9:60:87:54:c8:5a:99:
67:f6:68:97:2b:09:47:ee:d3:08:56:32:10:15:a0:
76:f8:3b:5f:a5:fd:59:0c:f7:d0:26:2d:f2:2b:21:
3f:69:b0:5b:5a:34:af:9b:81:39:df:1f:94:46:7d:
e7:9a:5d:68:e2:a2:45:b9:dd:df:fb:4e:b6:c7:e5:
16:4e:8f:2a:87:c8:d2:f8:28:be:51:75:9d:60:0b:
ef:88:ef:5b:75:3b:bf:e4:f0:6c:f1:05:dc:62:80:
b4:be:85:a6:c8:dd:c2:ea:8b:15:bc:c2:08:a1:53:
70:ce:55:a2:e0:62:61:58:f4:d6:79:25:11:a8:3f:
20:ef:91:f6:2b:0f:4e:3e:8c:8c:c6:6e:dd:ef:bd:
fc:d0:e3:0f:79:50:f4:76:6e:5a:e2:f1:8c:ba:b3:
69:11:7b:51:dd:8d:b1:5e:d4:59:25:c8:a6:f1:4b:
9f:02:69:78:51:e7:fd:79:ac:1a:7a:60:30:4a:f2:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9A:DB:02:C7:B3:2C:1A:25:65:6E:19:39:B5:08:34:9C:8B:63:24
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ee:70:c4:bb:78:89:8b:13:35:aa:b5:aa:fe:9d:89:a8:00:
71:47:b7:1f:71:3e:8d:b6:11:92:c2:05:d7:bc:19:8d:c1:81:
0c:b8:87:92:2a:3a:79:29:f5:30:e8:eb:c4:73:a1:2d:c3:b3:
c8:93:8b:80:c2:00:4a:34:c2:24:e5:93:cf:38:a7:17:41:c4:
9b:26:65:f1:7a:af:fc:7f:c0:e8:07:45:d9:d0:7a:12:95:62:
90:50:96:e1:e2:ab:d6:c7:50:e3:af:d8:26:70:60:18:99:de:
60:f0:d3:c7:90:80:f3:ef:82:53:a4:17:78:f4:04:48:e2:ab:
b4:6f:d9:90:9a:f5:37:09:b5:71:94:d2:fb:54:49:36:5b:92:
de:f0:ba:19:ca:4c:8f:b7:92:3c:37:24:89:5b:66:f4:88:7b:
45:79:12:7a:2b:43:94:36:e7:11:c5:e3:7e:3f:75:5e:aa:28:
92:3f:c4:34:e7:13:43:35:3a:fb:83:42:fb:db:df:ab:1a:58:
a7:fa:10:ef:4e:e3:c6:81:39:a7:7c:a1:b9:c3:65:f0:f1:98:
e4:3e:b6:ae:72:96:01:1b:81:42:7a:34:b2:d2:2f:aa:73:3d:
01:e0:4f:76:78:8c:8d:e2:af:5d:03:b3:bf:a8:6c:20:fa:1c:
a7:05:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:57 2025 by rpki-client