Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: I44i5j797qsfQwDBj3HQjC1V9dajkNf2NwGNvN31yIY=
Subject key identifier: 43:F6:73:29:6C:B7:1B:D3:95:8E:C0:44:85:68:A2:0F:D2:19:0D:EA
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 0199FD3423D4AF413D51799E4410E803C0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 01E0
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: /PJPwbC+xwZ/gONV0WhpgEIxEZ5JItDYQTu8+tP3AT8=)
2: NQlPiQqa7W0GNwaftmV4zoQEr5Q.roa (hash: 7Wexovgikrxx9ZTPHUKr6dZYJRkqMzA38m1bxMdv2+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:23:d4:af:41:3d:51:79:9e:44:10:e8:03:c0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=43f673296cb71bd3958ec0448568a20fd2190dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:77:6b:91:f9:e6:f3:a3:74:66:96:15:d2:
8d:52:da:de:1b:cf:c9:28:08:b9:b9:59:db:a4:08:
aa:8c:2c:06:37:68:64:88:37:18:85:79:95:b4:93:
97:5d:b7:c9:6c:71:8a:a3:90:f2:38:09:b1:82:bf:
57:9e:82:ce:c2:11:bc:ac:e4:14:f1:fe:fc:b7:57:
cd:26:46:7a:07:5c:b2:f8:93:ab:ae:c7:3a:41:02:
2c:eb:29:23:fb:fb:14:6e:fa:a5:f4:e0:8f:ef:4d:
64:5d:6f:e9:19:4d:98:30:91:ee:7b:b3:89:3a:c7:
f6:7a:ab:b2:37:5b:01:be:04:e3:04:e7:dd:71:9a:
ab:65:4e:42:93:83:5e:bc:d1:d0:68:3f:f7:f6:be:
67:2f:4c:68:9f:24:7c:86:5f:0c:2b:39:6d:89:d8:
33:17:10:95:c3:76:09:48:79:f2:d5:be:e1:2f:bc:
22:c3:33:60:43:fd:0f:8f:12:6a:63:d7:f1:e9:d9:
ad:07:23:00:50:ee:ee:f6:5c:63:57:b2:d4:e6:26:
19:b4:91:ba:b1:8a:f9:4e:15:b2:93:77:75:d9:96:
96:76:c2:c9:f0:aa:f5:06:c3:b8:34:ac:e7:d2:59:
f1:97:69:16:c7:aa:3f:95:18:be:e1:93:59:c3:4c:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F6:73:29:6C:B7:1B:D3:95:8E:C0:44:85:68:A2:0F:D2:19:0D:EA
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1c:e1:c7:6c:c4:d7:53:62:e6:9c:29:b3:81:00:04:d7:d2:
97:e6:f4:02:0a:d4:f5:94:4c:7a:e1:f5:87:0d:4c:54:89:33:
b2:c8:eb:8b:f4:7d:f6:be:9f:79:35:b2:13:25:ec:37:c2:2c:
78:55:6f:9a:48:f1:a4:1e:94:e3:8a:b1:07:a3:bd:c9:26:8e:
d2:d9:62:5c:9d:f2:c4:9a:67:cb:b7:61:9d:b7:60:75:e0:b4:
d0:46:32:5f:18:c3:1f:14:04:d1:26:5c:89:ee:bf:41:89:87:
ea:66:01:bf:f2:8a:aa:b3:1f:f6:c0:ee:9e:75:0d:f7:08:93:
4c:35:65:ec:7b:2c:f2:8c:55:f8:0e:b7:37:2b:08:8a:4e:31:
9b:9a:00:6e:5b:a9:6b:80:20:2a:9f:07:74:79:6d:19:7f:86:
1e:12:79:fd:a0:46:97:ba:ba:9e:08:b2:7d:68:5a:4a:e4:87:
77:7c:57:bb:cd:2b:8c:dc:73:1a:8e:67:3a:a1:e2:94:44:97:
d3:25:9d:8a:0e:4e:12:98:7b:86:90:05:f5:c3:be:c4:30:25:
2a:b9:dc:cf:f4:2c:c8:f7:f2:db:56:83:b7:b4:9e:e1:48:ea:
d3:4e:4a:27:ba:e3:10:f4:69:bd:2a:dc:65:bd:6f:f2:6e:7a:
db:d1:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:44 2025 by rpki-client