Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: 3vaXMH1DZjhir7t9yJLoDNaY0sMO/YaBGuuGeE1omiA=
Subject key identifier: 27:AB:AB:14:67:87:D8:B9:F9:4B:6D:35:B0:BB:30:1B:68:8B:2D:7A
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 0199FDA1D039F373A8F3730AB668E7A2A5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: B3
Signing time: Sun 19 Oct 2025 18:01:04 +0000
Manifest this update: Sun 19 Oct 2025 18:01:04 +0000
Manifest next update: Mon 20 Oct 2025 18:01:04 +0000
Files and hashes: 1: LNE0MuZMavkklT_2pqrHqhF84rY.roa (hash: ZYqhRbVzdQKSF9ZEirdkyB29pkjWB2pzYX8b2N86rj0=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: +b/iZusidcK4eEpgNaZS6RbeLF9AV/2NANBpz8+C0zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:d0:39:f3:73:a8:f3:73:0a:b6:68:e7:a2:a5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Oct 19 18:01:04 2025 GMT
Not After : Oct 20 18:01:04 2025 GMT
Subject: CN=27abab146787d8b9f94b6d35b0bb301b688b2d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:0e:f5:9f:42:ac:50:f4:73:3e:77:b4:a8:
a3:53:dd:94:3d:0a:60:c3:d8:06:95:3e:30:d9:cb:
ad:a9:9f:56:b3:76:54:a3:b8:95:3d:32:61:a7:fc:
c4:9b:10:fd:0e:25:af:5d:8d:c6:c4:ea:9c:b3:55:
bc:cf:7b:86:56:f4:df:c7:06:ed:6f:e4:cc:7f:61:
a7:66:26:90:22:db:26:46:1a:bf:c9:51:3b:a2:c0:
be:fd:8f:b2:50:f8:86:07:0c:63:40:a3:7f:62:03:
60:fa:22:56:d3:fe:a1:b0:b9:c1:c5:ec:aa:b9:2e:
8f:f4:35:c7:5c:cb:7a:1b:47:e1:94:8b:aa:cf:0c:
d1:96:20:f1:ee:d1:4e:87:45:15:1d:54:85:0f:73:
40:30:7f:8f:32:cf:c5:77:35:39:ba:27:82:99:c3:
11:dc:fa:04:76:40:6a:cb:d1:96:60:d3:18:9f:3d:
72:3b:e5:a0:bb:89:8e:ff:ce:8d:b5:67:29:ba:76:
da:74:ab:ae:0f:ac:98:06:01:2f:20:15:31:43:15:
6f:a9:46:15:73:3f:d1:6b:11:e9:2f:64:cb:79:b1:
4d:62:80:33:b0:1f:3b:d5:e1:c7:89:bc:df:4b:60:
4e:d5:f9:c5:34:62:ca:09:35:79:c4:ab:2b:9d:16:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AB:AB:14:67:87:D8:B9:F9:4B:6D:35:B0:BB:30:1B:68:8B:2D:7A
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7a:e6:08:3a:e7:b5:1f:bf:d9:f9:d5:49:2c:1a:58:ac:bd:
f6:10:f3:73:48:a5:c5:d7:de:1d:cc:bc:8f:57:28:3a:00:00:
02:c5:5c:68:33:8d:96:58:f2:fd:f6:4d:47:94:86:fb:28:ff:
51:81:78:32:4d:1d:92:e3:26:af:2c:a5:bd:13:92:c9:1c:ad:
07:9a:ac:7c:30:f5:b8:68:9c:a6:a8:d5:e2:9a:ff:66:be:fe:
0f:02:c9:62:0b:86:68:39:e4:e9:0f:83:35:b5:af:93:be:1f:
a6:14:03:44:01:19:2e:7a:4a:ca:36:14:36:87:aa:7e:02:e0:
5d:38:7a:8a:ac:a9:39:11:49:46:07:b9:3d:db:b9:73:c2:49:
25:33:5a:da:09:eb:1f:df:d2:96:e7:8a:aa:0a:3d:c6:db:46:
66:4a:ee:90:06:06:68:ea:1e:59:0d:ea:f3:d0:68:21:2e:db:
bc:cb:b2:a2:b6:02:4d:84:ae:07:9b:f2:92:0a:60:8d:04:9f:
65:85:8d:09:01:bc:ee:2a:3d:31:fe:56:29:7f:a4:4d:c9:ec:
b1:43:f4:a6:3c:96:d6:5b:73:29:58:d5:fc:a2:6e:dc:06:68:
a9:75:27:87:6e:e4:a8:fc:3b:5a:5a:75:2d:25:eb:7c:8a:01:
5a:3c:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:32 2025 by rpki-client