
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier: nkkI9+zTxJzkLbQx9kbnu++sM23SYPbeIgB/b+dJIGo=
Subject key identifier: D4:43:40:6C:AF:62:00:0B:C1:88:CC:73:B9:26:0C:8F:B9:B1:13:18
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: 019A0290D031E90EE908CFE426E470E8540F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number: 0DC7
Signing time: Mon 20 Oct 2025 17:00:36 +0000
Manifest this update: Mon 20 Oct 2025 17:00:36 +0000
Manifest next update: Tue 21 Oct 2025 17:00:36 +0000
Files and hashes: 1: YErVt-7gu1jQqcup8-GVaaYjMj4.roa (hash: nT1lcrWfw1dtZ1xk/0YupjRA64MYT4KdIF9Y0byNnSM=)
2: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: Lao71qT9BGeNca1dDF9638LdH/dSQPi6B9BubNHhxqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:d0:31:e9:0e:e9:08:cf:e4:26:e4:70:e8:54:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Oct 20 17:00:36 2025 GMT
Not After : Oct 21 17:00:36 2025 GMT
Subject: CN=d443406caf62000bc188cc73b9260c8fb9b11318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:d5:51:0e:b5:36:a1:10:f8:65:be:73:b4:
ed:07:8f:1d:62:d4:61:df:c5:fe:ec:55:6f:ab:a0:
4d:48:d8:32:99:3d:da:31:37:c1:54:5b:ff:22:db:
47:65:b3:e6:81:56:d3:aa:32:75:bc:2a:c2:df:0e:
f7:de:33:1c:05:80:4e:2d:8c:11:e0:a9:e1:e6:9b:
92:03:64:dd:6e:2e:65:c9:4b:af:0d:00:6a:58:9d:
28:3b:a4:66:58:1f:cf:90:4a:20:26:49:36:c9:f0:
d3:3b:ae:75:b6:85:48:c9:26:a3:74:9c:81:bb:02:
92:8a:e3:40:5f:2c:10:40:93:80:05:9e:6c:34:84:
95:e5:2f:5d:95:dd:14:a6:85:65:24:61:3d:fd:fb:
1e:5c:b9:78:cf:09:87:6b:f5:bb:0a:46:b7:2f:a4:
53:9f:df:c3:6c:df:16:a9:92:17:44:c2:c8:82:1d:
97:31:f7:95:11:96:76:49:d1:c0:df:3f:01:ef:bb:
96:76:ca:2f:6c:66:56:b1:f1:0c:0c:af:ec:e7:b6:
84:2e:b6:5f:40:21:eb:f9:9a:dc:dc:ed:81:63:90:
9c:8c:bd:cd:7e:3a:0f:17:f7:5e:6a:f3:33:d3:fa:
b9:89:e8:1b:66:91:99:34:c1:58:13:4d:05:05:b6:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:40:6C:AF:62:00:0B:C1:88:CC:73:B9:26:0C:8F:B9:B1:13:18
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2c:fc:c9:d6:7d:c2:ab:9a:9f:7d:9f:e5:5b:22:0c:0e:a1:
c8:d8:1f:1b:23:58:ec:51:04:5c:80:d9:12:b0:0f:ec:9a:11:
a0:10:2e:27:47:dd:8f:47:37:44:92:ae:fc:9f:26:43:96:81:
67:30:13:66:c7:ba:c0:4c:1a:10:e9:7e:37:95:47:63:d0:9f:
18:f8:53:f2:c4:8a:7e:88:80:af:0e:37:a5:ce:fc:81:8f:99:
29:44:47:9e:76:f7:95:33:dc:2b:d1:f7:0b:40:02:1f:e0:d1:
eb:e7:4c:a1:7b:73:e5:d7:95:9b:0b:d9:55:e9:3c:98:ed:41:
2c:cc:6a:d1:b0:71:bf:ad:7e:cc:82:72:95:2d:73:06:95:46:
ac:34:bd:4d:b4:eb:74:7e:07:e6:43:90:31:d1:ed:ab:1c:73:
f7:10:fd:4a:2b:a3:79:77:ea:0b:24:65:ac:18:a2:13:3c:a2:
20:e6:f1:d3:cd:46:4f:cd:da:9c:a3:f9:f7:fe:ea:42:ec:af:
ed:b9:d5:e9:52:53:20:46:c7:a3:f6:77:de:95:8b:6f:f6:0f:
c3:41:ca:52:03:8c:ff:84:8c:16:44:d6:7f:60:5b:b7:95:27:
79:a3:3c:79:58:9a:33:a2:c3:e2:19:9f:00:2b:66:12:d3:2a:
82:fa:b1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:44 2025 by rpki-client