Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
File: MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json)
Hash identifier: X53RBrf5KRNYMbjon3zzYr8EPrVrgPTAv4nLZw/qVLg=
Subject key identifier: 0A:2C:8F:02:04:8A:05:91:7E:21:F5:FB:BA:B3:CE:B0:5E:02:B9:53
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Certificate issuer: /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial: 019A4E500ECB9653523BDCB4F6F6EA3401B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
Manifest number: 1225
Signing time: Tue 04 Nov 2025 10:01:00 +0000
Manifest this update: Tue 04 Nov 2025 10:01:00 +0000
Manifest next update: Wed 05 Nov 2025 10:01:00 +0000
Files and hashes: 1: K7ic-zhbgHQLwKvBl_huVj85IK0.roa (hash: qx1tt36I8aNDXu23dLTLfip5Qoh5WTo9OBCgqtsC1fQ=)
2: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: 7sbAIHv8A7XpjeX11JHKBFJw2r5uKBiJiDfYu5wo64M=)
3: pckV3Ny46TaKVnOLD2SsKXbY_nE.roa (hash: wXkkeRI/oAjuXh/YFmny+LydKMS24wNW7vGV6jYr8h8=)
4: vnaSuYqevyYX0jC0-a-c741qDGY.roa (hash: ouDVM8iN649mQg6JJDDBfAW8iLgGBCXHlMPjyI9VGpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:0e:cb:96:53:52:3b:dc:b4:f6:f6:ea:34:01:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Validity
Not Before: Nov 4 10:01:00 2025 GMT
Not After : Nov 5 10:01:00 2025 GMT
Subject: CN=0a2c8f02048a05917e21f5fbbab3ceb05e02b953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:8e:62:1c:eb:d0:5b:61:04:c5:08:69:32:
6a:74:19:74:2c:22:8f:8a:ba:7a:d6:cf:9e:b0:65:
8b:85:2f:27:f8:6b:cc:6f:33:27:ef:e1:c0:2c:d1:
83:a8:21:f4:d4:70:f3:90:b0:02:51:33:92:5f:fe:
07:04:9c:b4:47:c7:aa:23:c2:6a:5c:d5:14:4a:80:
45:54:b6:55:ec:74:9d:fe:30:84:43:c6:ca:de:8f:
72:1e:9c:ef:ed:db:e9:61:b7:70:fb:35:ff:72:28:
01:64:95:1c:c4:9c:35:14:2e:ae:3d:22:f8:b9:70:
b7:4e:2c:39:9f:4f:62:ca:37:ef:1a:8c:37:52:11:
21:05:ca:5c:b9:06:b6:e6:33:ef:a3:37:2d:7e:95:
ae:2d:c6:77:fb:ab:fe:2c:fe:c2:1d:95:d7:4b:6e:
44:8d:41:e1:ad:b8:8d:02:3c:bc:60:19:e8:2a:db:
6e:59:d4:92:7f:a0:60:29:10:e5:2d:60:33:42:ad:
a7:db:0d:ba:bb:05:3f:c7:39:b1:1d:51:99:09:8f:
25:6b:97:5a:25:14:de:07:00:39:bc:0a:ce:4a:2c:
a6:75:57:ad:61:75:2f:0c:2b:87:9d:b1:12:45:fd:
47:b1:44:b0:a4:4e:8e:dd:ca:fc:af:c2:89:f7:5b:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2C:8F:02:04:8A:05:91:7E:21:F5:FB:BA:B3:CE:B0:5E:02:B9:53
X509v3 Authority Key Identifier:
keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ae:53:be:1b:e5:1d:f7:09:58:8a:7c:a6:dd:98:e5:bd:ab:
c6:15:79:f4:e8:f0:d7:d1:a0:b0:9c:2c:fb:ae:fa:b0:e3:d0:
ea:24:e7:f2:77:4f:30:26:2d:b2:6e:33:fe:35:1f:de:27:ff:
e7:f2:9d:10:9f:f4:3e:a3:93:7d:66:4b:87:b4:ba:a8:bb:d8:
b2:ea:d8:bb:7f:36:5e:45:03:87:a5:50:ed:fa:77:ba:f5:7c:
df:8b:22:6c:9e:65:1a:3f:1c:b3:b3:3d:19:df:ed:be:60:dc:
1b:95:84:b8:12:c7:2f:b1:9e:d8:1a:ad:f3:61:08:46:9b:73:
ac:8d:53:7e:65:11:d7:19:09:9e:0f:db:bf:0d:eb:53:fb:56:
06:2c:6b:45:8e:a3:17:22:80:88:b8:bb:68:3b:06:a8:df:c0:
f3:3a:78:9e:92:dd:05:dc:9c:37:c5:46:89:73:b2:2f:78:0a:
ed:93:b8:23:81:95:89:14:d1:b1:55:30:13:d7:de:2f:79:a6:
d2:a2:06:82:32:2d:a5:98:67:88:72:80:5f:cf:cf:96:d2:31:
fc:fc:d9:84:46:36:dc:10:51:3d:18:fd:b1:f3:50:7a:85:55:
25:c0:99:ed:1b:fe:9e:9d:94:2f:41:4d:c5:64:5d:76:41:2f:
61:ca:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:29 2025 by rpki-client