Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: p8Zmsn1kxhIrqwpEW/xWeKYewMMCeXGpFXlrggFcOEo=
Subject key identifier: 6A:C7:09:82:91:DC:94:68:9C:0D:A2:97:14:5C:D3:EA:1C:AB:25:88
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 019A4C60D4134CFF0238FD66F2515E5BA97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 0EAF
Signing time: Tue 04 Nov 2025 01:00:05 +0000
Manifest this update: Tue 04 Nov 2025 01:00:05 +0000
Manifest next update: Wed 05 Nov 2025 01:00:05 +0000
Files and hashes: 1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: gniWtsRn5hT6czuVvkK5U8KRQLa0VPsx4fJMYg0wSUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:d4:13:4c:ff:02:38:fd:66:f2:51:5e:5b:a9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Nov 4 01:00:05 2025 GMT
Not After : Nov 5 01:00:05 2025 GMT
Subject: CN=6ac7098291dc94689c0da297145cd3ea1cab2588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:99:a5:c9:7f:e4:bd:be:89:e9:64:c3:a3:07:
4c:d1:b8:62:ab:a7:8d:56:21:3b:26:51:21:20:c1:
52:ae:0d:d1:e0:47:ab:a5:42:2e:d8:d3:be:0a:cd:
62:39:8c:d2:fe:f6:2e:89:4b:cb:9f:8a:7e:1d:dc:
e3:8f:bd:1d:e6:be:f2:47:6b:65:aa:7f:84:d3:00:
39:ac:92:3b:4d:8e:b5:fe:d0:20:b4:74:46:95:d6:
f3:34:18:57:4f:26:17:59:e6:9f:45:22:37:27:37:
f0:a8:63:d3:7d:cb:34:13:c6:a8:b2:9c:00:34:c6:
6b:f3:9a:71:b5:8a:7a:9e:02:8f:6a:f7:a7:1b:86:
45:50:6a:44:61:45:d5:bd:36:fa:49:ed:24:89:a1:
9e:5c:5d:47:9a:3a:f6:25:c7:27:96:e3:70:37:a6:
52:1d:2e:aa:b9:38:cc:3a:00:b6:5c:1c:8e:5a:8b:
42:38:dc:3e:9a:32:b2:30:97:ce:fa:c8:fa:28:19:
02:84:36:85:dd:2d:67:96:97:4a:25:ab:9b:69:8d:
1e:1a:1c:d8:90:b5:32:5f:bf:60:5b:7d:ea:99:50:
9b:b6:99:f6:50:30:18:44:46:33:b0:6d:e5:0c:92:
81:0b:00:48:af:32:30:fc:a4:31:d3:e7:89:5b:20:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:09:82:91:DC:94:68:9C:0D:A2:97:14:5C:D3:EA:1C:AB:25:88
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b5:1e:1c:24:9b:35:a6:c3:91:09:91:32:0a:03:49:19:5c:
ad:cd:d9:5b:69:32:2c:d2:e8:d3:a9:f6:e5:06:af:b9:ff:f5:
fb:64:18:1b:87:d0:dd:67:14:7d:59:6c:ee:e7:59:6d:37:ce:
6b:e4:33:d4:57:87:0d:03:bf:29:a1:88:6e:8e:c6:35:e0:73:
77:45:a0:26:63:cb:95:82:b2:e5:1d:6f:59:e3:84:42:15:df:
63:94:65:66:08:56:ec:4f:c5:de:ae:f4:de:ed:23:1a:d0:1e:
b4:6d:1a:bc:4e:7b:74:35:a8:e8:91:5f:e5:49:3d:e3:a9:e3:
f1:cd:ff:98:20:e3:a9:3e:f3:f6:a0:e8:df:e8:7c:d0:c6:57:
35:5c:7f:9a:fd:ca:96:fd:b0:3d:be:d6:1a:30:ea:a0:bb:42:
fd:ca:9f:a0:6f:1d:de:e3:f1:d4:2a:5f:b1:ee:83:89:06:04:
66:72:0c:f9:a0:06:dd:29:7c:e1:57:ca:8a:9a:c0:c7:98:7d:
3f:48:f7:1b:9e:70:c2:d5:d5:64:b1:45:d5:e8:ac:80:68:fd:
e7:e1:66:52:56:d2:b3:66:9b:fc:4b:3c:e9:75:04:86:06:08:
f2:45:03:ee:e0:b7:5e:15:79:21:39:1e:f3:55:2d:94:96:e0:
5d:68:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:01 2025 by rpki-client