Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: o+oyNG0ce57WeDpB2dN9VzxkZxYidOfM04BhJk6TJRc=
Subject key identifier: BB:D8:3B:36:CA:62:43:30:A0:FB:5D:23:91:6B:5E:5B:92:78:DE:FA
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 019A71B8254E17AE9073FD127C819EBA145A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 0D3C
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: w3rLgi2VCNcDWMJU7OZxPildMr6HAAdX7gHppsAYGxU=)
3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=)
4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:25:4e:17:ae:90:73:fd:12:7c:81:9e:ba:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=bbd83b36ca624330a0fb5d23916b5e5b9278defa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:14:d1:3b:4b:d5:7d:ed:c2:44:e3:50:b9:32:
c8:93:53:a6:3f:61:d7:82:af:22:2d:c2:78:ae:37:
e7:f2:04:f6:61:90:b0:01:f7:80:51:80:bb:82:00:
48:08:c1:bb:13:27:41:89:0f:ca:d4:0d:62:86:bc:
76:76:9f:5d:89:44:89:18:90:f8:31:87:bc:49:5d:
71:72:74:bb:80:a2:22:36:78:cb:b4:b9:9c:e6:79:
03:99:e9:ea:63:29:2f:e0:64:c1:56:f6:66:be:79:
90:ba:1d:ea:f1:f3:48:98:7b:37:3a:67:3a:d1:65:
fd:e7:4e:95:7f:80:34:77:45:a7:e0:11:27:46:f5:
7c:2f:38:80:92:72:ee:ac:ea:2c:b5:03:c8:8d:c2:
0f:bd:92:29:37:18:56:5a:d5:2a:c0:35:91:7c:e0:
7d:95:6f:3e:cc:22:38:15:75:2a:d0:56:5c:ce:32:
d6:f4:21:7e:dc:da:42:3c:d8:dc:6c:7c:30:2b:b2:
4d:2b:15:52:40:70:b6:6b:6f:8b:6a:d9:77:d0:74:
ed:da:e1:a0:bf:e8:71:8d:5c:ae:09:ca:1d:cd:0c:
80:01:1e:c7:59:78:fa:ad:da:ff:66:43:e9:2a:77:
42:aa:78:b3:ff:48:7b:db:5c:c8:ff:fe:56:0a:42:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D8:3B:36:CA:62:43:30:A0:FB:5D:23:91:6B:5E:5B:92:78:DE:FA
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:3a:c3:ae:c2:98:b5:9a:02:b8:27:b8:a8:f8:3c:1f:4f:81:
82:fc:30:04:11:c8:5e:04:8f:ab:c5:48:40:7b:56:92:80:e1:
82:5c:bc:97:dc:a3:71:46:0e:6d:56:3b:4e:52:d6:5f:58:63:
b1:23:0e:3c:f4:95:b7:cc:cb:54:8c:fe:f1:57:98:e5:67:14:
ec:f0:42:70:f3:46:b1:e4:30:f6:b8:cf:dd:75:45:17:7b:c2:
30:c3:e8:a7:22:33:44:60:2c:e0:46:ef:3e:01:17:7c:3e:6b:
39:52:cd:c5:51:79:af:4f:78:ce:44:ac:33:bb:52:7e:29:20:
6d:ea:b9:4b:61:d0:90:54:e0:3e:e2:17:cf:ff:f4:22:cf:a9:
2f:21:f2:c6:4f:0a:f8:b8:c6:d5:db:75:db:b1:d0:ee:0e:ef:
bc:54:57:ba:cc:4d:db:56:49:da:8e:bc:83:1b:ee:05:07:73:
85:3a:87:02:d3:ac:11:67:da:80:b4:b5:17:04:56:f1:90:f9:
1b:89:a8:ae:f3:19:76:13:64:6f:8a:14:db:07:b3:fa:ef:11:
27:f9:8b:6b:10:d0:90:f2:a8:ae:88:ef:2a:68:57:7c:3f:db:
e2:19:16:ef:a6:26:ef:2c:27:50:4e:67:32:c0:05:a1:ba:70:
df:ff:41:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:45 2025 by rpki-client