Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
File: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json)
Hash identifier: Z7cJ/aRMswN4vzKhV6uXh9FmyOt7yOa/OZdOSJknfQw=
Subject key identifier: 67:CE:7F:E0:A5:4E:05:C4:1C:FE:FB:24:C2:4F:97:84:0C:FF:F2:B1
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Certificate issuer: /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial: 019A4F6223EB63AA55330F5E22F9290A9630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
Manifest number: 0C3E
Signing time: Tue 04 Nov 2025 15:00:23 +0000
Manifest this update: Tue 04 Nov 2025 15:00:23 +0000
Manifest next update: Wed 05 Nov 2025 15:00:23 +0000
Files and hashes: 1: LB9yxSJR9ouxobcPst7y075Gi24.roa (hash: 9cHQrj6vkKZZg+caaJv03RON5UELRQ6rlqWUQeFM15Y=)
2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: OchL+xNWInrOaqKvbG2yGyvliuOtrUp5nfDdqvk2Ylo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:23:eb:63:aa:55:33:0f:5e:22:f9:29:0a:96:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
Validity
Not Before: Nov 4 15:00:23 2025 GMT
Not After : Nov 5 15:00:23 2025 GMT
Subject: CN=67ce7fe0a54e05c41cfefb24c24f97840cfff2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:49:84:a1:76:cb:15:6f:b6:87:8b:16:e1:
8e:cb:07:8b:4f:2e:22:a4:4c:e5:1b:1f:f5:cd:e1:
a3:e0:11:97:5f:02:1c:c3:21:a0:8d:96:46:78:11:
91:a8:4b:ad:d0:4b:94:a3:ad:ed:2a:ca:91:18:70:
9b:60:12:79:24:f3:39:7c:3d:98:88:6e:76:a8:a0:
22:0f:96:1e:ea:17:c8:70:14:5e:ee:f6:f9:f4:4c:
fc:55:e4:c5:a8:4e:60:30:17:95:b0:35:26:b2:4b:
dc:41:f5:f0:03:bb:d6:50:6e:cf:48:e4:94:c0:9f:
22:ed:57:b4:b7:ab:14:e9:69:26:b1:90:9e:24:42:
7b:64:5f:6f:4c:88:db:73:e8:0d:89:a0:d9:6b:64:
27:f6:0c:2a:0e:e8:6a:f3:b5:31:d5:17:ed:8f:3a:
19:2b:82:24:4b:26:e1:28:95:16:4f:21:0f:70:c3:
4f:b7:23:47:49:f0:b6:e3:45:c0:d8:a8:e3:14:dd:
10:ea:ad:cc:2f:42:86:82:67:6a:d9:ca:1e:83:3b:
58:2d:0d:67:f8:06:1c:c7:a6:ca:e4:9b:a4:ad:a7:
da:aa:67:31:6f:64:6f:73:01:d3:45:51:14:75:1b:
ed:9f:c5:52:71:a1:6c:46:f8:7e:e4:cf:78:37:a5:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CE:7F:E0:A5:4E:05:C4:1C:FE:FB:24:C2:4F:97:84:0C:FF:F2:B1
X509v3 Authority Key Identifier:
keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c7:9b:2c:f0:c5:5a:a2:48:2d:23:26:49:4e:30:ba:00:ef:
ea:68:99:20:61:56:e4:f7:49:f2:18:d9:b5:26:92:01:9c:2b:
ef:32:19:be:00:ca:96:1f:50:2c:6f:b6:60:7c:1a:b6:f3:f3:
bf:23:98:75:80:f9:8f:71:6d:df:bd:7b:28:3f:5f:69:77:68:
23:5e:6a:f6:8b:6f:6c:75:2f:68:61:1a:51:c4:75:fe:db:aa:
05:b9:93:01:ec:32:45:aa:60:40:19:44:4d:bb:ad:c3:9f:73:
d6:96:89:bd:b8:fd:b5:f8:5e:fe:63:a9:62:3a:57:1a:b7:e5:
dc:3b:5a:e3:60:21:8d:48:5c:35:76:b8:65:9b:40:5a:f3:4b:
cf:51:ca:9b:e8:2a:be:eb:87:9f:ee:32:c0:2f:5a:e1:9f:f8:
c4:48:b0:02:2d:9a:60:3f:76:d3:3a:e0:86:06:a1:55:84:b9:
3f:06:34:39:48:5a:52:22:36:03:5a:de:2a:94:1c:2f:e1:7c:
ff:8e:bd:b0:30:09:a2:ef:ea:85:df:3a:7d:14:a4:70:70:58:
5e:d5:88:5d:aa:64:7d:83:a3:a2:19:57:b5:80:17:d3:76:90:
e8:0f:5f:58:cc:c0:3d:ed:c3:70:60:9e:ec:d8:35:ea:df:21:
b0:8a:17:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:56 2025 by rpki-client