Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier: 4/DPEjRwDKQ2v8QBC3TVLzBc79wFerWZVAHxNnuGF5Y=
Subject key identifier: A6:AD:9E:31:29:B1:48:DA:71:F9:D3:C3:70:57:94:BD:4B:AA:D5:93
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 019A4D072904808CBB2183D9AC8D40BDABDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number: 08A7
Signing time: Tue 04 Nov 2025 04:01:46 +0000
Manifest this update: Tue 04 Nov 2025 04:01:46 +0000
Manifest next update: Wed 05 Nov 2025 04:01:46 +0000
Files and hashes: 1: iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa (hash: GD3GHNZKL4fdpgdi7l7xwFI/fIJOKFQjsdvcNA8UW4E=)
2: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: xFgqVmRlnNTiGhCemYr2/JJJucf9lPSp5j+jueje+vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:29:04:80:8c:bb:21:83:d9:ac:8d:40:bd:ab:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Nov 4 04:01:46 2025 GMT
Not After : Nov 5 04:01:46 2025 GMT
Subject: CN=a6ad9e3129b148da71f9d3c3705794bd4baad593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:14:f4:d8:82:1c:c0:97:0b:33:36:ed:bf:
23:ea:4f:26:85:cb:64:5e:27:b8:9b:d2:28:8d:e8:
17:7c:ad:d0:62:95:67:81:56:4d:dc:5a:35:71:ec:
fd:0c:a9:80:28:df:1b:3f:dd:0c:7a:d2:2d:7d:17:
eb:20:d5:43:08:1d:1c:e5:90:13:08:d6:53:cd:3e:
ea:2e:2d:5a:51:6f:70:72:9c:72:62:e7:4a:9d:58:
55:cb:99:42:3b:aa:28:c5:10:64:9b:37:7b:62:a4:
a5:b9:26:34:ee:47:ab:6e:a2:5d:ee:12:00:77:30:
11:cf:d3:21:ab:49:38:38:b6:67:2c:43:78:8a:bf:
ac:71:38:03:4e:73:e3:9d:f1:04:65:7e:cf:06:34:
dc:2e:b9:f5:9a:1b:7c:a3:bd:6d:43:4b:2b:0d:82:
fa:11:d1:d6:53:c6:95:af:23:59:4c:aa:ac:64:da:
6c:c6:ba:c4:9d:bd:f3:f9:38:68:e4:2f:76:ab:8d:
ef:20:0e:f9:b7:86:a1:20:a4:94:da:f6:0b:5b:f3:
8f:41:c8:03:4a:f8:50:34:89:9b:8b:15:99:b5:32:
cc:d8:5d:23:ac:8f:b3:a4:61:64:c9:a8:fa:4d:b5:
d3:7d:91:7a:95:dc:87:3a:41:3f:12:09:11:43:16:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AD:9E:31:29:B1:48:DA:71:F9:D3:C3:70:57:94:BD:4B:AA:D5:93
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:4f:a8:fc:41:b4:38:a1:46:28:3e:98:cc:c7:4f:cf:d2:
80:ac:45:5c:4f:cd:5b:a6:a7:1d:92:64:6c:a1:bc:f4:93:7b:
3a:42:d8:15:7f:cc:10:d7:03:41:a5:1e:65:ce:f7:ed:c6:6e:
ee:81:4d:b0:f1:77:54:d8:d5:83:db:6d:ac:36:50:21:3a:b3:
67:47:0b:fc:5f:ec:82:ce:d7:b1:60:7c:f1:de:10:74:49:fe:
ac:ae:d6:92:9e:0a:ac:c7:28:60:26:0b:0d:0a:22:28:1a:c3:
ad:18:fb:1c:5a:ec:38:93:87:ef:24:28:f3:6f:eb:c0:60:0d:
6e:09:df:ab:47:6a:67:27:d8:49:ee:40:06:aa:92:11:99:b1:
5b:de:48:63:da:4e:8d:0e:10:33:d8:46:d0:e2:28:77:e5:9d:
9d:de:d6:f1:24:a2:29:c7:c7:22:00:52:11:b0:f9:79:71:e7:
78:2f:5f:6b:7a:d7:cd:ea:8a:bc:70:24:df:d0:8f:7f:ed:6d:
c0:f7:a4:d7:fa:89:62:2b:71:44:1c:fa:e0:38:68:b9:02:3a:
b3:5f:a9:25:0f:f9:80:92:47:0f:3f:9e:bc:a6:bd:16:a9:9b:
7d:89:35:ad:b0:b8:91:53:dd:c5:b7:c3:13:7b:d4:d8:0d:19:
09:8e:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:22 2025 by rpki-client