Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: jVVfwGBGa5cU+/kjZu6skcUhK1GBP3ZidcrvmlH3t/I=
Subject key identifier: C6:0E:9A:73:0C:20:AC:6C:92:AB:93:4E:FC:EB:39:DC:31:8B:EC:9E
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 019A56096DD00801632E11545F1B68E6FBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 020E
Signing time: Wed 05 Nov 2025 22:00:49 +0000
Manifest this update: Wed 05 Nov 2025 22:00:49 +0000
Manifest next update: Thu 06 Nov 2025 22:00:49 +0000
Files and hashes: 1: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: 04x0mHXGZ0qhbFSOOH2+PMTFxTXHN6f5hJcA8xwenv0=)
2: NQlPiQqa7W0GNwaftmV4zoQEr5Q.roa (hash: 7Wexovgikrxx9ZTPHUKr6dZYJRkqMzA38m1bxMdv2+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:09:6d:d0:08:01:63:2e:11:54:5f:1b:68:e6:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Nov 5 22:00:49 2025 GMT
Not After : Nov 6 22:00:49 2025 GMT
Subject: CN=c60e9a730c20ac6c92ab934efceb39dc318bec9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:22:a6:a0:e2:20:b8:62:cc:e1:1b:9d:f8:
8f:07:86:18:3b:e1:2c:88:10:4c:b9:a6:0d:f5:1a:
52:82:75:04:0f:0a:17:14:62:7e:66:4e:37:d1:67:
93:aa:ad:9a:27:f3:86:88:54:dd:a4:fa:c6:b1:da:
07:ca:b2:86:eb:66:20:60:54:59:ba:b0:eb:32:6d:
ce:1e:5f:0d:25:00:ba:41:5a:08:7f:2a:42:e2:9c:
2d:79:bc:aa:13:c5:84:ec:17:e9:3c:3c:ec:41:6e:
12:60:34:8f:d4:d2:a6:92:69:d8:4f:97:60:9c:07:
7d:3a:b5:1b:e3:cc:8b:05:c1:e5:59:81:02:d4:b4:
55:03:cd:69:66:60:4d:21:f2:42:4a:6a:dc:be:9f:
1f:95:ac:e2:82:e7:a3:16:b2:b1:9c:1a:1f:dd:4d:
85:a0:3f:30:01:07:98:fe:7f:80:e7:84:95:2c:77:
f9:ad:07:c3:dd:c3:f5:34:90:9d:ce:6b:02:10:58:
75:6d:17:47:76:a5:59:60:f6:0a:35:7d:c6:ef:00:
45:57:5d:05:bb:c8:1a:11:89:fc:0f:db:92:2a:5a:
db:2f:84:21:b1:b2:97:32:8d:6a:35:f5:ad:ad:4f:
1b:ef:2d:b9:c8:17:ee:50:c1:88:b6:02:05:06:d5:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0E:9A:73:0C:20:AC:6C:92:AB:93:4E:FC:EB:39:DC:31:8B:EC:9E
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1c:0a:47:ab:6f:31:ae:2e:6e:e1:8c:05:b0:b1:0f:56:56:
9b:11:d3:e8:28:34:c3:61:53:e2:b0:aa:0e:63:65:8e:8c:6d:
4c:f4:6d:5e:54:cc:ab:e5:53:49:fb:37:9e:df:ee:a6:5c:58:
2b:0c:7a:e0:00:10:10:b4:76:91:ec:ab:29:f0:11:f8:94:2c:
76:78:08:24:27:cb:de:96:94:3c:21:2a:0b:55:3e:a4:07:c1:
6b:12:9e:78:a0:42:f2:c2:82:e4:8e:02:2b:e4:1c:99:e0:b1:
5d:dc:d5:40:81:ce:c3:10:4d:b6:3e:7a:9c:a0:68:d7:32:e6:
66:1f:72:59:0f:4c:01:b7:00:f3:63:fa:84:2f:51:69:73:a1:
e3:22:a8:0a:46:fc:8b:dc:15:62:69:61:c9:0a:ee:84:9f:1b:
2e:a1:29:29:0d:db:a6:76:eb:6a:05:50:0d:b5:97:49:0b:96:
fc:5a:6c:8c:3d:e0:5d:3d:0c:31:e7:54:7d:94:91:ad:30:94:
c1:9c:01:72:9b:0b:90:96:86:3e:a5:08:05:c2:96:99:c9:bf:
71:57:75:12:10:10:04:73:7b:1f:0e:8f:e0:af:c3:39:56:35:
76:81:0f:8e:b0:dd:a6:5a:85:46:9a:89:ff:c2:cb:26:78:f7:
13:fa:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:35:01 2025 by rpki-client