Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: MftMKdYLYGZOoRMVQ1VBWXL+CDC+8HnICFtYt0ZeVzs=
Subject key identifier: FE:A3:FD:09:44:37:48:AA:D7:A7:9D:19:07:A9:4D:40:C2:C1:3F:CD
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 019A7149B46905FB3584F46687F6CF401E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 1450
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: 53LxO8m4HtbZUZWV7NHRgQMsJlkv/2KNNLNvq04iFH0=)
2: sv4EXNYI7McAyTz9VxEmavOg_ZI.roa (hash: pthqg1S6F7UF6pnwC1X+wqv/djtBaR5pS3UCBYsUWnw=)
3: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b4:69:05:fb:35:84:f4:66:87:f6:cf:40:1e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=fea3fd09443748aad7a79d1907a94d40c2c13fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:d6:2f:7f:2f:8d:b1:3c:28:da:7e:6e:61:
ec:a1:2f:f1:5d:eb:a9:81:45:b7:a7:82:56:dc:a3:
4a:1d:0d:67:6c:95:96:39:d2:e3:06:c2:97:e5:9c:
30:ac:e2:ad:9b:43:74:9a:c2:8a:8e:dc:98:00:d3:
24:42:7d:80:9c:d7:4d:fd:2f:32:f6:19:ba:91:c5:
57:de:4c:f7:b6:2d:4c:99:5c:3c:17:27:10:5e:68:
41:0d:ec:40:ce:26:9a:e6:15:20:72:41:91:30:78:
68:7f:bb:26:dd:61:c6:23:ef:b9:33:bc:c3:40:4a:
3e:18:cf:2a:16:30:64:f2:15:94:77:b1:54:c8:b6:
c6:42:4f:6d:ef:ba:d9:a5:23:84:cd:a1:50:2b:23:
cf:f7:08:a0:47:8b:e8:65:3c:b2:4a:63:94:2d:ab:
c6:5c:e6:09:d6:40:1f:97:5a:d2:9d:f7:e2:89:31:
c9:e1:0e:db:9e:4f:71:f4:c2:e8:72:c7:b4:57:78:
7b:c2:c2:b2:aa:10:60:c1:cb:e4:26:05:a1:f6:ff:
7c:56:e9:8b:29:c9:00:7d:ab:1b:9b:95:f0:eb:25:
f6:de:ee:02:0a:d3:e3:61:55:ff:37:e1:30:08:d6:
34:a1:cd:2b:31:0a:81:10:11:41:ff:dd:06:41:f3:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A3:FD:09:44:37:48:AA:D7:A7:9D:19:07:A9:4D:40:C2:C1:3F:CD
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0d:de:18:16:d5:11:cc:6a:0f:fa:14:de:ed:b5:91:0f:c0:
dd:fb:d1:d2:9b:c2:bf:74:f7:c1:26:49:b8:f0:36:47:ab:11:
c5:bb:e5:b9:0e:f4:af:cd:e7:15:cf:14:d9:a0:27:e8:bf:49:
f9:12:23:a6:0f:88:5b:82:36:37:6f:ff:08:25:ac:ad:d5:3e:
cb:65:19:2b:fa:54:01:b0:75:4a:c7:1a:6c:09:5f:92:0a:bd:
b2:50:c0:73:87:59:01:38:98:79:c9:f1:f1:b7:9a:f2:15:18:
d8:c0:af:55:d6:25:1c:ba:48:71:48:db:7c:3f:7e:55:21:a1:
62:25:52:de:7e:c0:70:33:d2:d8:af:8f:b2:14:2d:81:c8:d4:
c4:33:61:dd:43:90:85:6f:9d:2f:87:71:dc:0c:54:64:b9:c4:
c5:04:41:58:b8:cf:b6:f7:84:e0:e2:23:35:ff:8e:f2:36:86:
1e:64:11:01:fe:30:1a:4f:85:94:60:06:5b:87:1e:5c:94:84:
9d:88:6c:1e:57:b4:a1:f0:b5:39:c6:06:3c:6f:04:3e:1a:39:
86:43:b1:b3:11:69:0d:05:8b:a2:e5:eb:c6:5e:89:98:d1:eb:
8c:89:ca:6c:4c:75:ec:c2:ef:f3:1f:5e:7e:8b:64:f1:08:67:
f5:d6:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:17 2025 by rpki-client