Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier: QCzPgskF4Pp+vmSuAdWYyQ+qyUFIYEzAEhO7FczGX1A=
Subject key identifier: C3:E3:B5:EA:68:1D:66:54:E0:F2:A8:CD:EB:98:45:B2:D8:C8:F3:C1
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 019A4EF5249AC9D57962EDF34335722AAD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number: 0561
Signing time: Tue 04 Nov 2025 13:01:19 +0000
Manifest this update: Tue 04 Nov 2025 13:01:19 +0000
Manifest next update: Wed 05 Nov 2025 13:01:19 +0000
Files and hashes: 1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: X4jAWgQkq+UAW93cczkVWjIl1zznSMzRYOhcfyx3eaY=)
2: i6CWENtAdnXqPwuX227uTDykXkg.roa (hash: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=)
3: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (hash: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:24:9a:c9:d5:79:62:ed:f3:43:35:72:2a:ad:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Nov 4 13:01:19 2025 GMT
Not After : Nov 5 13:01:19 2025 GMT
Subject: CN=c3e3b5ea681d6654e0f2a8cdeb9845b2d8c8f3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:be:81:9b:e4:f3:c9:72:fa:c7:a3:aa:04:
34:bf:ce:b0:14:c7:82:c7:be:99:c9:2d:1b:e4:d7:
73:07:b1:79:66:5c:41:15:ce:6c:9a:62:02:5e:e4:
a4:28:d0:b7:3a:02:4d:07:06:bd:11:e5:2b:2d:30:
fa:88:95:77:93:02:89:a9:85:16:14:c7:64:42:43:
f3:f6:75:ee:11:90:ff:14:eb:f6:d3:ee:09:b4:5f:
fb:ba:49:b3:40:cb:78:5a:d2:ab:29:5a:43:5a:45:
46:a7:f1:40:1b:75:9b:63:19:be:12:23:c2:fe:d5:
bc:55:ad:3c:01:29:75:20:65:24:3a:2f:ab:12:20:
ca:31:59:2b:45:8b:40:18:d4:b3:e1:3a:41:f7:53:
54:95:33:a6:1a:af:65:b6:b2:c0:d7:97:9f:27:ae:
51:5f:83:21:07:3f:2c:16:54:b1:fc:7e:ed:f8:63:
3f:0a:88:0e:53:c2:9a:55:50:57:bd:9c:32:45:cc:
71:92:fe:86:b0:d2:b2:86:23:c8:b9:22:11:1e:c1:
df:21:59:28:c9:eb:48:cb:fd:03:ab:fc:6b:ab:cb:
bb:9a:ea:0d:dd:24:6e:49:51:db:82:d3:f0:9e:94:
74:6d:8c:50:d4:b7:b5:3b:13:50:b0:25:96:4c:1e:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:B5:EA:68:1D:66:54:E0:F2:A8:CD:EB:98:45:B2:D8:C8:F3:C1
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:47:cb:a6:8a:5c:21:05:12:81:9a:59:bf:f6:10:a8:12:8b:
10:a1:a9:8e:52:cc:9a:ef:37:da:8d:85:8a:66:b1:52:72:5a:
92:14:04:fa:a0:38:cd:5f:0f:75:ae:83:37:eb:3d:ab:7a:2d:
2f:e1:b9:c0:de:04:de:61:05:63:75:4c:b4:19:08:cc:d8:37:
51:a4:95:ab:61:cf:84:ea:ba:65:8c:a7:39:11:35:8c:7d:77:
70:2c:e2:38:cf:45:1d:3a:d4:10:48:fa:d5:42:31:2b:4e:53:
5e:4f:c1:98:52:15:cf:fc:7c:3a:90:fd:e5:a1:d5:d5:38:b8:
c7:d6:05:5b:bf:58:db:8e:61:82:95:7b:54:39:2a:39:eb:ce:
74:9b:4e:2c:1a:83:8f:a0:5e:78:e0:a3:24:ce:19:48:f9:13:
27:62:d6:b3:88:ce:71:08:91:a2:de:66:46:aa:4d:94:75:e3:
1b:64:d7:58:ca:4c:02:c1:b1:bf:c4:aa:b9:88:1c:7a:ac:b8:
47:be:58:d5:ee:b6:a2:23:8b:f7:e8:3f:d8:07:5f:01:bf:ce:
65:ef:4c:0b:81:41:92:07:99:21:4d:bf:52:8e:aa:b9:a2:02:
6e:d9:c0:25:b7:ae:b9:1f:b0:4a:42:1d:cb:3d:cb:24:71:ed:
98:39:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:06 2025 by rpki-client