Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: KdTGdL517P2vIFxnBl1xfnuDzmAw5Pcjbofk/FTyBvA=
Subject key identifier: 31:91:4C:7B:5C:ED:DC:26:B2:4A:02:ED:3C:30:41:80:78:B6:1F:D7
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 019A4E866B3FEE849AAD35522286C9EB260E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 0521
Signing time: Tue 04 Nov 2025 11:00:23 +0000
Manifest this update: Tue 04 Nov 2025 11:00:23 +0000
Manifest next update: Wed 05 Nov 2025 11:00:23 +0000
Files and hashes: 1: ZpEam4JrA75W3vKeb-kb3n0W0y0.roa (hash: kYGb95Bh9aZOERP/x6nIdXNnyuRNyDQM9q/MQE4pooE=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: ccP8kVwg8u8W7u0F1gV/95t9ea1ELBDc8tP+oZzpLcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6b:3f:ee:84:9a:ad:35:52:22:86:c9:eb:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: Nov 4 11:00:23 2025 GMT
Not After : Nov 5 11:00:23 2025 GMT
Subject: CN=31914c7b5ceddc26b24a02ed3c30418078b61fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:03:48:47:1a:f9:a3:2a:63:da:dc:e8:3b:
26:dc:4f:71:60:c8:75:61:c4:53:91:64:0a:c0:5d:
bb:1a:ec:00:9c:5d:f4:8a:64:63:a7:b7:81:f7:d2:
18:c0:2b:39:29:b7:7d:b8:2f:3c:71:8e:84:b3:77:
a3:61:c9:ae:43:cb:58:94:04:1d:43:ce:f9:e7:c8:
ef:9e:1a:c7:9d:80:3b:eb:01:d5:60:8c:21:25:cb:
55:fc:29:e3:e3:67:cc:a0:75:6a:76:8c:6e:ab:e6:
91:62:6a:71:58:83:a8:56:87:57:da:b7:ca:51:f1:
78:61:fc:02:78:15:1b:60:a5:18:c6:3c:69:1a:64:
80:55:43:f3:68:a9:57:50:26:23:2d:b9:bf:19:b4:
4c:e9:d7:f4:1b:a8:3c:f6:7d:91:90:f7:68:4f:96:
65:63:d9:5b:05:1b:c4:06:15:aa:fd:a3:26:ca:59:
b6:cb:c0:5d:8e:18:9f:23:35:ee:94:bd:ac:f3:c6:
3b:9a:31:ec:85:82:ea:af:40:f5:49:56:e0:c7:65:
ba:b3:3d:a8:f5:35:fd:09:8a:e1:13:43:0a:3d:2f:
15:2d:d8:08:e1:70:42:14:5b:ba:d9:a6:d9:3a:a2:
4d:ae:c5:d7:4b:7e:f5:fb:a9:ab:01:e1:2f:32:66:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:4C:7B:5C:ED:DC:26:B2:4A:02:ED:3C:30:41:80:78:B6:1F:D7
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3e:40:b1:10:ea:7b:23:35:2d:93:5d:44:9f:2f:6c:8b:32:
21:5f:47:12:c8:fb:2e:22:c6:d1:52:8f:ac:ac:be:60:8f:b5:
81:df:e5:9d:48:05:8d:de:f7:69:a1:1e:15:9b:88:7f:40:0a:
b6:47:57:84:1d:58:ce:d4:f0:8d:49:e3:a5:03:bd:2f:7e:e4:
18:2d:6e:0f:f2:7a:d5:c5:b3:92:56:79:30:cf:6d:7a:c5:04:
42:2e:46:9b:40:72:a1:fe:b7:f5:60:cc:68:66:30:a9:22:4e:
52:2d:d9:76:ca:20:c2:09:a8:92:d2:10:2f:c2:65:6b:98:01:
ca:df:06:2b:7e:32:01:14:42:a6:ba:bb:c8:71:ec:c4:d8:81:
93:9c:28:ac:b1:f5:b3:77:ce:62:92:58:f1:32:13:5b:08:89:
60:e2:bf:f2:8a:f3:66:93:58:51:22:30:f2:aa:09:b3:86:0a:
88:72:03:f3:e0:8d:f7:4d:06:47:75:42:c2:fb:b2:cf:80:1b:
8f:80:d7:7f:cc:a8:60:88:3a:be:8f:55:48:59:bf:54:ff:46:
40:aa:13:d6:5f:53:9c:be:f0:f3:cc:87:55:84:ed:21:0d:34:
bd:ad:9a:64:75:35:2d:90:37:a4:90:e5:8a:0e:be:25:25:2d:
07:02:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:59 2025 by rpki-client