Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: 8EJvlScG57ahNEH2fjp5HW39NEutyX/Eqj789r2izpc=
Subject key identifier: 43:52:D1:4C:BA:C4:1E:51:B4:B6:82:FA:E9:3A:35:29:47:A5:50:DB
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 0199FCFDC0687990E95BAB4C1EAB6F9DAAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0DF7
Signing time: Sun 19 Oct 2025 15:01:52 +0000
Manifest this update: Sun 19 Oct 2025 15:01:52 +0000
Manifest next update: Mon 20 Oct 2025 15:01:52 +0000
Files and hashes: 1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: M784M4/XuuQe836nNAaZZa+SUgzv1oZpxODqZOO/Ngw=)
2: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (hash: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:c0:68:79:90:e9:5b:ab:4c:1e:ab:6f:9d:aa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Oct 19 15:01:52 2025 GMT
Not After : Oct 20 15:01:52 2025 GMT
Subject: CN=4352d14cbac41e51b4b682fae93a352947a550db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:de:2e:4e:5a:42:e3:27:cd:a7:96:09:35:
70:78:5b:7e:fc:65:dd:aa:df:d3:2d:0a:4b:37:08:
99:e0:6e:f7:7b:00:1d:22:1c:c7:17:31:03:66:c4:
07:34:16:ed:01:b0:03:5c:d7:2c:8a:4b:fb:a2:f1:
d0:37:ac:52:8b:f3:0b:aa:25:cd:ec:ba:a2:24:31:
5f:03:41:14:6e:c7:a4:66:18:b4:74:dd:b1:40:d7:
59:20:bb:3e:11:a6:0b:d3:70:58:29:6b:9c:a5:7d:
f5:fe:de:23:47:b1:f5:16:f3:77:3a:92:7d:19:91:
5a:36:99:7a:6a:0e:da:2d:6b:ba:ad:a5:1d:cc:b9:
e7:f1:01:41:dd:e5:8e:9d:e9:34:7a:b7:33:83:d0:
e3:7e:c5:1d:f2:ba:0f:2e:09:9c:ee:6f:dc:22:dd:
91:85:67:21:43:ce:00:63:ab:53:c4:c9:d9:19:c6:
c8:08:83:fd:c4:bb:c8:5c:d4:3b:53:c6:5e:04:d5:
a4:a0:af:e1:51:51:8d:73:92:6c:74:61:75:63:83:
15:f6:27:57:88:7f:ed:3b:06:9f:1e:f6:81:eb:e1:
03:33:8a:2b:55:1e:aa:5f:fd:fa:52:13:46:7b:9a:
5e:0d:fc:8e:27:a6:3b:9c:34:5d:4c:81:27:a0:7f:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:D1:4C:BA:C4:1E:51:B4:B6:82:FA:E9:3A:35:29:47:A5:50:DB
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:4c:9a:0b:11:dd:0f:3d:61:c8:d0:6c:f6:e8:20:aa:28:
f6:98:50:1e:54:87:3f:2f:60:0f:30:5c:67:e7:a5:0e:1a:f9:
fc:fd:47:b2:1d:52:e5:b9:44:de:87:16:7d:e3:92:a2:3a:bf:
b3:86:ea:99:b2:29:71:37:09:a3:73:fa:75:96:d2:d5:9f:bf:
53:5c:51:d4:2c:9d:38:22:d8:38:75:0e:f7:b0:86:ec:c7:52:
0e:7a:5d:0f:7f:e8:69:17:3f:e1:02:8a:6d:9b:d9:d0:7a:28:
18:2e:60:f2:53:9b:49:98:fb:b0:70:d5:3d:88:1d:40:e8:ba:
23:91:fd:96:93:a4:91:3f:d7:1d:08:38:45:db:01:68:df:88:
b5:2e:ee:d3:b8:19:e9:c5:72:d7:bb:e8:86:dd:ef:3c:0d:00:
f3:6c:43:aa:09:f6:74:0e:a3:80:38:be:5d:05:f9:81:8d:8e:
91:28:cf:00:c8:f0:99:f6:1a:5a:7b:53:38:10:df:2c:49:84:
f5:98:e4:18:f5:a2:2f:a9:1f:b6:b0:41:dc:11:3c:b5:fd:c1:
a7:88:a7:64:e3:e2:32:64:27:35:b2:62:6e:c2:84:07:c2:e4:
02:f4:a3:c6:eb:0c:5d:3e:ea:2d:e0:c9:79:4b:bb:fa:88:3d:
2f:6e:94:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:55 2025 by rpki-client