Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: pPe5tCMRI+5NyXHZP1Uj2mdDzBnazfR0RN4rK+7XoOU=
Subject key identifier: EF:39:2B:BB:8E:C4:95:1E:B5:7F:69:E1:66:AE:AA:11:36:4A:D7:A9
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 019A71B929B3D0530993FFCB8EFEE473E4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: K1HQhgolA2y0FCzEKajc1whM0s2pxiAss2q6LLFHppo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:29:b3:d0:53:09:93:ff:cb:8e:fe:e4:73:e4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=ef392bbb8ec4951eb57f69e166aeaa11364ad7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:ba:53:f1:de:33:c9:ac:b6:f3:9a:92:5a:
04:4f:be:d0:ad:65:d6:5b:86:06:83:63:91:c8:e4:
e6:73:4a:66:77:47:2f:4c:ab:e2:32:22:b4:69:0b:
65:fd:b5:6f:49:ec:9d:bb:03:84:34:59:37:fb:51:
4e:6f:80:0a:02:ce:6c:75:f8:72:13:a8:13:b9:6d:
ce:b0:e3:f9:d0:2f:76:1c:12:da:1c:59:f3:71:f0:
01:ff:73:7e:ec:91:0e:5e:d4:0c:4b:71:eb:3f:06:
cf:4d:9c:9d:4a:17:fc:a4:06:b0:4f:b5:c8:a3:15:
75:23:d8:8d:6f:51:c6:22:92:0d:e6:19:98:a3:11:
5f:93:55:04:8b:58:d8:5e:8f:b0:96:cf:1b:f5:72:
0f:02:9e:2a:d2:59:55:45:98:db:fe:bc:9c:01:0c:
c0:4a:d7:da:f1:7b:1e:d3:4f:e0:df:b9:ed:1f:5d:
e8:61:d0:0f:79:af:9f:aa:69:ac:9d:fb:67:9d:d9:
a5:94:d3:88:f2:b7:3f:72:d0:6c:03:c3:4e:87:fc:
57:b7:7c:e3:22:0e:c7:9d:b5:72:6f:12:53:06:4f:
3a:7c:15:4f:0d:18:0e:79:7a:a0:e3:cb:88:ab:2d:
1e:69:49:8f:85:7d:d2:f1:59:00:00:20:a9:34:d8:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:39:2B:BB:8E:C4:95:1E:B5:7F:69:E1:66:AE:AA:11:36:4A:D7:A9
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:41:8a:4e:11:65:3e:91:56:2e:35:86:85:50:cf:87:fa:7b:
b0:7e:3e:2e:2b:98:5f:e5:78:84:c6:8d:40:32:8c:c9:eb:d9:
33:5d:f0:95:37:a9:4c:d0:97:26:54:ae:af:68:b4:b0:01:12:
1c:91:dc:f5:8d:f3:ba:f7:f4:4a:05:54:97:1d:b7:64:bf:17:
13:11:e9:93:f8:11:0e:13:0a:cc:01:cd:78:c6:a7:41:f8:a4:
d5:1d:07:6f:85:56:5f:97:d4:53:14:af:dd:6e:c9:fd:ac:20:
6a:49:fc:bf:65:9e:9b:2a:a9:bf:22:48:ae:c8:3f:a4:19:14:
04:f0:a8:e1:30:35:f1:bf:8c:25:76:2f:b7:90:41:16:4d:3e:
23:b5:1a:86:04:54:09:23:4c:e5:c9:d6:95:32:04:06:4e:38:
3f:32:3c:3e:89:c6:07:25:19:3e:f3:20:4e:53:9b:1e:45:f6:
69:bc:ee:a4:a3:dd:de:f1:a1:88:c5:0e:71:d8:9c:e2:32:0d:
02:05:24:49:ed:da:f4:20:ee:d5:35:27:05:8f:66:16:e2:da:
1d:eb:6d:f7:87:9d:da:36:32:a5:3c:f6:35:1c:b0:e0:2f:af:
73:ce:a7:74:a6:08:be:9b:b6:1f:ea:a6:e2:50:06:7d:51:69:
bf:94:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:57 2025 by rpki-client