Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: 4bp71a8CfkN40DIuGqUh6JWJUISTctNiq4xZIzG9N3E=
Subject key identifier: E4:22:CD:52:6C:FB:56:46:E6:CF:73:48:6B:E5:E9:7C:3B:06:08:65
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019A2B5605B6EDCBF424242E91EDD5D1B0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 07D0
Signing time: Tue 28 Oct 2025 15:00:49 +0000
Manifest this update: Tue 28 Oct 2025 15:00:49 +0000
Manifest next update: Wed 29 Oct 2025 15:00:49 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: KsJVWo3iPvuqPGwAcv85H9LK5HU8g30rAf4505RinqE=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:56:05:b6:ed:cb:f4:24:24:2e:91:ed:d5:d1:b0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Oct 28 15:00:49 2025 GMT
Not After : Oct 29 15:00:49 2025 GMT
Subject: CN=e422cd526cfb5646e6cf73486be5e97c3b060865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:54:ca:13:5d:67:92:08:41:8f:b9:c7:a0:
08:bb:67:99:70:47:b6:65:de:99:6b:33:b0:6e:ad:
d1:43:b2:d3:14:3a:97:e9:bb:ca:4b:dd:7c:f7:e6:
b9:00:8a:49:b1:bb:24:0f:14:0b:d0:9d:cc:4e:da:
02:27:83:22:d3:b8:fd:fa:48:0f:ba:81:6b:cf:e9:
25:54:b8:37:8e:7c:6a:fe:3f:4c:6c:9f:36:f0:0a:
3d:dc:d8:f5:60:d2:0c:16:bb:5e:fa:7a:c1:b2:6b:
fc:62:a4:69:f2:a3:56:b9:61:cb:fd:cd:4b:b8:36:
2f:40:9e:29:ec:bb:ae:c7:a7:52:85:2d:3b:c0:42:
b0:8b:78:59:a3:79:20:9f:ef:f6:00:50:1d:de:1d:
23:6e:a4:da:00:3f:d9:03:c8:b0:fa:65:97:d6:28:
c0:52:5a:60:66:7e:4c:01:77:c0:5e:35:4d:5d:98:
79:bc:9c:f3:c4:58:d9:43:1c:34:96:c9:c5:15:e8:
0f:07:aa:7f:e1:95:20:bc:f9:26:ef:2b:ce:67:ca:
56:40:34:01:b3:86:68:ef:2f:f7:25:cc:ed:5c:27:
ba:71:1e:72:93:ab:e2:ac:70:05:8f:e9:55:32:b8:
f8:14:a7:5d:95:6b:08:b1:b8:b3:c2:24:70:bf:43:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:22:CD:52:6C:FB:56:46:E6:CF:73:48:6B:E5:E9:7C:3B:06:08:65
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d2:f9:72:e0:e5:ba:ac:4f:ac:48:c3:09:62:72:ac:59:a2:
b7:a7:50:eb:fb:b7:e0:e1:3c:94:aa:47:ba:3e:f9:54:9a:e0:
8f:c3:b1:4d:9d:3b:ea:93:d1:00:f7:33:fb:c2:ee:93:da:75:
46:62:c4:f7:33:be:60:4c:36:ad:0f:1c:8b:c8:51:98:fa:b6:
5c:54:e2:fb:b0:c5:bf:42:62:35:aa:a8:02:a6:37:a0:e6:3f:
1a:c7:30:88:97:6d:95:26:81:33:0b:ea:72:bb:72:fe:22:9f:
8b:6f:a3:30:81:29:39:3d:68:9b:5e:9f:63:ea:10:56:bc:71:
0c:4d:73:f5:af:f7:2f:91:28:b0:9e:4c:65:8d:e4:22:9d:f9:
eb:6c:74:2a:79:25:ab:74:56:d4:02:ec:f9:cc:0f:d2:84:bd:
ee:90:e2:59:a7:9e:9c:e5:1b:14:3a:4f:0f:1f:71:bb:cf:62:
f3:f9:e3:fe:ea:3e:da:bf:3f:e0:56:80:c1:82:69:75:ec:c6:
8e:e6:34:db:5a:73:86:45:e6:16:f4:f8:51:b9:0f:18:fd:6b:
8a:66:7f:cb:c4:ee:ca:69:99:e5:cf:10:fe:79:32:d0:80:09:
0f:9c:b3:1b:46:f9:75:1a:18:10:c6:f1:5a:ef:0d:a3:2e:82:
b7:af:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:21:06 2025 by rpki-client