Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: VMI4l85WxfCQN/Qj9YlL6rzhJpmpJYi5xzOUZP09ZpE=
Subject key identifier: E4:32:C8:61:DC:D0:12:9E:18:06:C6:65:9C:E4:2D:E3:A2:7A:D6:4B
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 019A4B85CCC0E742D105B8B000DBD7B59827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 0E7F
Signing time: Mon 03 Nov 2025 21:00:51 +0000
Manifest this update: Mon 03 Nov 2025 21:00:51 +0000
Manifest next update: Tue 04 Nov 2025 21:00:51 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: 5b4ZUdQSWbSj/KHe6a2iYvYOZsoIzb/Jwe3xWTveifg=)
2: penXvalgbMBLZqcx96rUayqK3NQ.roa (hash: vb/Iw29Kb6TCjGenAwHcr/Ra62ZOMD3/iU+HDEP/27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:cc:c0:e7:42:d1:05:b8:b0:00:db:d7:b5:98:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Nov 3 21:00:51 2025 GMT
Not After : Nov 4 21:00:51 2025 GMT
Subject: CN=e432c861dcd0129e1806c6659ce42de3a27ad64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:16:a8:ad:ea:ff:07:79:d5:c5:4e:91:fb:
dc:50:04:34:27:24:c1:73:30:72:ae:14:fd:f2:75:
72:fd:c6:b8:7c:7a:17:c8:5d:d6:f2:3c:47:63:8a:
f2:58:7c:83:72:c2:e3:e2:37:b7:24:ca:8a:02:bf:
1b:4d:f4:52:9f:0e:2b:25:44:77:87:15:c2:e6:37:
b7:a5:d3:fa:50:02:45:03:8b:03:8a:f5:49:04:a2:
37:37:c4:c6:cd:d2:a6:68:91:74:ce:73:7d:51:25:
b7:36:76:82:84:59:66:fc:7a:f1:f1:b9:29:91:64:
5b:9d:6d:f3:b5:91:c8:87:38:b2:22:dd:b1:ce:da:
0b:d2:f5:2f:61:1c:3e:c6:f2:d3:64:43:79:0f:cc:
f8:6a:75:cc:42:c9:66:81:1d:62:6d:b3:71:b6:5c:
e0:28:cf:ef:aa:26:f7:fe:03:ec:a4:52:47:e2:1c:
5a:10:9a:09:75:eb:4d:59:60:0b:8f:9e:95:b5:b3:
5a:33:94:13:e3:0d:58:59:40:65:0b:c5:7b:08:f5:
0a:b1:52:47:a8:8d:73:14:22:98:54:f0:f0:b4:4b:
ad:7a:0b:bc:3b:df:02:9c:58:e3:a7:57:d8:70:36:
74:b1:a4:ae:ec:8a:38:ef:1c:f2:f1:66:1e:8c:59:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:C8:61:DC:D0:12:9E:18:06:C6:65:9C:E4:2D:E3:A2:7A:D6:4B
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:84:44:c7:d1:b1:31:5e:a1:66:a4:53:42:d3:78:05:56:3e:
2f:a4:e5:1e:d8:b1:3e:de:5d:a5:bd:91:44:52:95:e6:02:53:
57:0f:05:b6:05:95:3a:58:ca:eb:0e:b2:85:11:9f:f6:41:3e:
ce:45:2e:35:12:b8:4a:2a:b7:28:b4:1f:7b:cc:cb:c7:cf:1e:
f7:7a:69:c3:83:03:24:08:28:d1:bd:0b:d6:00:40:f0:57:15:
fa:fe:26:fa:66:e0:2a:67:3d:17:da:d9:37:ed:14:86:72:9c:
3a:ff:95:fd:33:5f:70:d0:b0:f3:18:c4:a5:cc:8e:b8:43:b5:
06:cc:5b:cd:09:ca:0f:39:7d:65:d1:e8:70:d4:8f:5c:85:88:
a6:41:1b:9f:ce:d6:69:97:08:39:22:c3:88:de:ad:1d:ca:9a:
2f:91:8f:06:24:ed:73:a5:e4:37:77:86:83:e4:6f:08:11:14:
31:c7:b2:fd:19:83:c7:a9:cf:3d:36:5e:b8:1e:9d:ae:41:86:
da:61:f7:f7:39:19:5a:0a:9e:f2:ee:4e:9d:64:2b:c2:cd:af:
12:8b:22:e7:6e:39:3d:51:a4:69:ce:f8:ba:0e:72:59:e1:e7:
d7:1c:f1:1e:1b:59:b4:3b:e4:bf:70:27:47:cc:09:8a:f2:5b:
0c:91:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:29:17 2025 by rpki-client