Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: EfRsl1tkBpMEnb+2RrqcyN3EaRQbGfGGtD3U5YGXf68=
Subject key identifier: 56:2D:1A:B4:83:5D:1A:55:3C:51:EE:CD:B5:53:E3:B2:79:C9:84:E5
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 0199FC591266472444E0BEE7D20FAB86B696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 1067
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: DJ1HtJthpYVGjIveCNZUOBL/3gg/1FvIX+YvnCX3JP4=)
2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=)
3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=)
4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:12:66:47:24:44:e0:be:e7:d2:0f:ab:86:b6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=562d1ab4835d1a553c51eecdb553e3b279c984e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:cb:47:a2:a9:8a:e2:5c:e1:8a:c1:a2:eb:
b0:f4:57:b0:30:19:7b:7a:95:b6:9a:7a:b5:f0:ef:
a0:d6:7e:11:96:47:b3:24:9a:e8:ba:1c:ef:02:c5:
d8:15:cb:19:ae:20:45:df:82:99:4e:33:48:39:e5:
f1:9f:c7:a7:33:b2:6e:67:0f:11:4a:ac:96:2c:78:
48:14:d2:42:53:e9:b4:55:6b:e0:28:b2:7a:f5:89:
4a:ce:0f:00:25:6e:f3:80:3a:a1:a3:85:bf:a0:78:
18:de:0d:74:37:93:a2:31:e5:bb:b5:70:13:da:b9:
99:d4:fa:57:ab:fd:ad:8b:90:fd:44:ab:6b:e8:12:
f3:7c:78:b2:2d:5f:41:59:ab:bb:d9:d5:f2:d1:64:
04:a7:22:9e:76:9c:a6:08:ed:99:b2:bc:1e:2e:92:
1a:e7:78:0d:9d:dd:40:b6:10:cf:98:64:9a:db:b2:
70:69:35:32:7b:6e:d7:b3:bf:3d:c0:7d:b4:88:82:
ee:9d:12:e8:17:dd:56:b3:df:e5:cf:d2:82:3e:2e:
cd:aa:dc:89:33:fc:a3:9a:bd:72:d1:2d:c1:57:52:
05:81:f5:95:6a:bb:d9:11:be:92:39:c2:a7:d5:95:
57:40:e8:92:d6:c8:fd:79:ff:f2:71:7f:e5:c1:2c:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2D:1A:B4:83:5D:1A:55:3C:51:EE:CD:B5:53:E3:B2:79:C9:84:E5
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c7:e9:88:05:57:89:ea:9e:67:84:98:06:b1:2c:8d:06:40:
20:c8:8c:74:85:8a:d1:5d:59:e2:8e:b1:a8:89:8d:15:d6:23:
ed:a4:44:c5:3b:82:ac:13:86:e8:1c:01:55:25:8b:0e:cf:b8:
92:81:96:d2:f7:59:4e:91:5c:d1:e0:6a:26:5f:11:ee:5e:07:
3c:86:29:b9:c5:ac:31:1f:4d:fa:c9:8e:48:b7:8d:7a:46:ce:
84:9a:65:8b:e5:3e:85:e5:7c:38:8e:6f:1d:84:51:c0:3e:0b:
88:1b:5c:34:40:07:37:6d:44:46:0b:42:76:25:5b:49:7c:e5:
e7:91:46:93:d2:92:0d:92:d9:04:20:38:3e:f2:4f:77:6f:c1:
7c:53:1b:9a:d0:e5:6c:85:b9:c8:66:bb:99:e1:51:04:5b:02:
d9:af:66:d9:7b:48:34:0e:bd:4c:c2:66:cf:9d:26:1e:61:a2:
58:d5:60:ce:e8:68:8d:b3:b9:ae:18:87:4c:f8:49:d2:3f:d7:
14:46:93:70:18:ba:eb:af:08:39:de:38:6e:ce:96:69:4c:64:
56:40:c7:a4:47:62:f8:55:36:b2:61:1a:8a:f1:e7:a7:90:5a:
9e:5f:8f:fa:1a:9b:6e:81:24:5e:d4:22:06:10:fd:af:50:a7:
48:19:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:54 2025 by rpki-client