Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: J/TkjIeGecvrdJM49V998w75EmPB5ecguDnTm4q8sHo=
Subject key identifier: 3E:C1:C8:64:3E:A3:FE:A3:8B:09:3F:EC:D0:A5:DD:6C:CA:E3:FE:4C
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 019A51F5672F4C764117FFDC531EFC9A672C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 03:00:28 +0000
Manifest this update: Wed 05 Nov 2025 03:00:28 +0000
Manifest next update: Thu 06 Nov 2025 03:00:28 +0000
Files and hashes: 1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: eqtooZjZxuUR9g9a7jVdhz7DRewKpikI8YiwsWVQBQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:67:2f:4c:76:41:17:ff:dc:53:1e:fc:9a:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Nov 5 03:00:28 2025 GMT
Not After : Nov 6 03:00:28 2025 GMT
Subject: CN=3ec1c8643ea3fea38b093fecd0a5dd6ccae3fe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bf:32:6f:66:76:d5:f4:75:95:e7:69:5a:b5:
ad:11:a1:3d:a6:2a:14:06:57:8a:96:6d:8c:af:d3:
29:3d:18:85:9d:78:a7:41:a2:20:6a:7d:d6:f2:36:
45:94:a1:b6:9f:65:26:e1:05:e2:ed:59:30:ed:56:
d5:5e:db:6c:39:63:0b:fe:82:3d:df:dd:50:24:72:
38:79:a5:55:75:43:62:8b:37:e4:73:99:01:96:ac:
c1:8a:45:88:2c:64:d1:e6:c3:c5:71:e8:84:ce:25:
60:57:36:a9:af:c5:13:ca:27:44:81:48:08:64:fa:
a5:58:1f:0b:e0:4c:bb:d0:99:33:8b:22:82:cf:0d:
b3:58:54:d6:7a:17:78:00:e2:14:25:c9:c6:04:99:
b1:a5:65:82:19:cd:f1:ad:5b:ca:fa:82:23:be:17:
bb:3a:22:67:b5:d8:ec:a1:93:e9:2f:8f:c9:fe:37:
53:ad:3c:9b:4f:6d:0b:dc:21:64:90:e1:ad:19:8c:
dc:96:6c:b3:0c:23:82:2f:86:29:63:5a:f8:e5:a6:
b4:1e:90:44:5e:fc:61:15:c8:04:10:34:4e:c6:a5:
8e:e4:ab:b6:17:68:27:bf:33:5d:e3:c7:d0:03:76:
fe:a9:5f:66:01:12:fa:57:5b:0d:2d:6f:d1:68:76:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C1:C8:64:3E:A3:FE:A3:8B:09:3F:EC:D0:A5:DD:6C:CA:E3:FE:4C
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:44:a7:c2:81:6e:51:9e:ab:97:1f:d0:fd:c1:6b:dd:8e:a5:
2d:8b:fd:f6:05:69:a9:ba:72:37:dd:52:22:12:e2:18:5c:a6:
cd:df:a5:63:e0:90:f6:b5:3c:f1:24:5a:8a:6a:64:49:4d:af:
ef:54:35:bf:28:20:8f:fb:0b:70:39:14:d4:24:d1:73:6e:0c:
ee:6d:39:cc:a7:5d:b9:e2:61:77:d5:45:de:85:a9:48:48:a1:
21:30:8f:52:4a:f9:28:f2:73:cd:55:43:bc:d8:cd:24:bf:96:
c4:d5:84:05:93:60:c9:55:c8:72:3d:87:3e:f3:95:88:72:71:
de:4b:8f:b7:9c:ad:09:dd:4e:de:cf:ec:76:07:d4:97:ff:2d:
bb:62:e0:db:05:60:f3:70:46:b3:15:a6:cb:a3:db:09:52:2a:
5a:bc:fb:32:ab:62:c7:77:94:92:41:50:f1:fd:55:8f:ea:65:
d3:d8:15:fd:c5:f8:80:a4:e8:41:55:72:62:77:4d:d3:f7:fb:
0b:5c:7c:bd:ab:92:c6:c7:43:66:57:74:6c:a6:2d:4a:f5:25:
45:33:ab:13:3d:c6:ab:f6:ff:b0:1b:e4:bd:ba:b3:02:15:1a:
b6:74:f0:28:22:7b:52:0f:93:be:af:0e:bd:fe:ee:1c:67:70:
84:39:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:15:34 2025 by rpki-client