Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: XNnNlUDvIwQtvIPRtAk7meuQOXwSLdvVcF+knCu2JTY=
Subject key identifier: 54:87:09:CE:91:62:72:E9:BD:83:19:90:50:51:C3:9B:67:8E:21:F9
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 019A50E3E1530635D15C565496886AB438AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0DF4
Signing time: Tue 04 Nov 2025 22:01:42 +0000
Manifest this update: Tue 04 Nov 2025 22:01:42 +0000
Manifest next update: Wed 05 Nov 2025 22:01:42 +0000
Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: 476DnW7jRn6Qqx+HtTZ7FkCV52dCkO6s4BKahJqU2dg=)
2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:e1:53:06:35:d1:5c:56:54:96:88:6a:b4:38:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Nov 4 22:01:42 2025 GMT
Not After : Nov 5 22:01:42 2025 GMT
Subject: CN=548709ce916272e9bd8319905051c39b678e21f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:f3:40:e2:0e:d3:16:68:b7:98:40:17:5e:
7c:a8:3c:c5:d9:f2:aa:7a:7b:b6:65:f5:a6:29:bb:
e1:01:1d:9a:b8:1d:77:f5:ca:8b:26:fa:58:e2:99:
31:70:40:79:17:3b:5a:d5:ba:41:da:ce:2e:29:51:
02:a2:4c:d2:39:2b:12:2b:f5:4b:4e:bd:ce:26:52:
29:5d:27:11:46:ce:4e:8f:02:d4:54:43:2b:3b:5b:
b8:44:26:98:c6:67:70:f7:89:ca:c9:1b:d2:ea:32:
6e:0f:7b:4b:90:be:52:24:21:7a:bd:bd:ec:97:88:
0a:72:99:c4:57:6d:3a:0e:e5:b4:b6:04:7b:90:95:
8d:69:ff:61:66:f4:ea:1b:c4:5b:01:80:6d:68:a0:
85:f1:2a:82:2e:05:d9:7f:7d:88:d3:e5:81:bf:aa:
c5:5b:39:ca:19:16:5f:77:ef:be:51:c3:27:b3:90:
9a:25:10:2f:08:39:ac:f4:6a:ad:22:62:64:a0:05:
27:f5:93:8e:7a:87:16:65:b4:ff:3f:0d:b1:a7:2e:
4e:f9:62:a7:30:fa:82:57:d0:4b:f2:22:e9:35:e4:
31:3b:d3:f9:ea:a5:6c:fa:be:d3:03:e2:34:ff:45:
60:66:0b:bf:16:47:75:08:0e:8e:ce:c6:54:87:64:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:87:09:CE:91:62:72:E9:BD:83:19:90:50:51:C3:9B:67:8E:21:F9
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:16:39:77:48:de:ad:97:ee:ee:27:1e:b2:5b:6b:d3:79:8b:
f7:38:93:64:c6:4c:aa:2d:41:6b:52:a8:24:59:4e:af:7a:97:
ba:33:b2:3a:e1:2b:54:6e:46:c0:ee:3b:e6:7b:bc:b0:c9:5c:
f9:01:7b:dd:40:1b:9c:45:8a:f8:ef:49:e8:10:4a:07:1e:02:
4c:61:52:ee:5a:75:d3:ba:86:12:50:34:fb:d5:2c:a9:6f:77:
7f:fe:07:48:14:07:fb:7f:93:34:b3:6e:0f:6e:8b:b5:8d:b7:
fd:b1:d4:e5:20:5a:85:a5:41:c5:66:e1:93:85:a4:e7:86:ba:
2b:f0:33:ec:98:5b:9f:7b:89:c0:8a:8b:a9:45:4e:23:59:ea:
e6:db:ee:fb:a2:9d:0e:f5:ce:a9:63:d4:02:2f:ab:0b:16:a0:
e0:eb:50:59:a7:c7:65:7c:cf:ce:24:5c:03:58:85:4e:dc:4a:
27:58:c8:bf:9b:d2:33:af:d7:31:56:a1:d4:3b:e6:5c:57:3d:
8a:10:de:6f:15:7f:d7:40:8f:f9:a4:5f:ca:24:14:54:6e:eb:
8c:eb:9a:7e:5d:6d:4c:b0:44:09:81:3f:86:55:ae:9a:3a:eb:
31:6f:c8:0e:f8:67:d6:03:68:ef:6c:10:eb:ef:93:ad:a9:25:
1f:b3:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:25 2025 by rpki-client