Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
File: _mraoZRFOXtBXvSivmTq_PNbcpA.mft (raw, json)
Hash identifier: hi4kCe1mGEsswIPoalTebjTumetkp6ZuUPWKTQ3e7tY=
Subject key identifier: BE:0A:41:17:BB:F8:C3:24:88:3C:94:95:78:3C:F2:79:ED:F8:FC:70
Authority key identifier: FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90
Certificate issuer: /CN=fe6adaa19445397b415ef4a2be64eafcf35b7290
Certificate serial: 019A70DC141E9DBFB41FB520C7432AFCFB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
Manifest number: 1E
Signing time: Tue 11 Nov 2025 03:01:02 +0000
Manifest this update: Tue 11 Nov 2025 03:01:02 +0000
Manifest next update: Wed 12 Nov 2025 03:01:02 +0000
Files and hashes: 1: _mraoZRFOXtBXvSivmTq_PNbcpA.crl (hash: pMV7wHUm0TcrJzZTL5S0++4rgZSFgbDZbpDBoeyTMzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:14:1e:9d:bf:b4:1f:b5:20:c7:43:2a:fc:fb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6adaa19445397b415ef4a2be64eafcf35b7290
Validity
Not Before: Nov 11 03:01:02 2025 GMT
Not After : Nov 12 03:01:02 2025 GMT
Subject: CN=be0a4117bbf8c324883c9495783cf279edf8fc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:15:6f:5b:de:aa:8f:69:73:6c:c1:68:05:
6f:6b:aa:48:b2:e6:9e:9b:8f:05:cd:e2:34:d6:b1:
4e:38:33:c7:6d:d7:69:41:33:65:6b:31:c8:3c:f1:
4b:66:58:e8:ca:d9:7d:0f:be:a0:fe:ae:c9:1c:9d:
8c:de:00:66:64:56:c1:dc:ab:34:25:23:6b:7b:ca:
7c:7a:13:4c:fd:3d:19:52:33:5c:12:ad:15:7d:08:
42:e5:42:0f:e3:74:ab:f0:ad:0e:a5:03:5c:86:32:
03:e8:dc:85:9d:7a:ac:b9:57:3c:f6:a7:76:19:bf:
8f:7a:23:85:a6:46:74:d8:ba:86:fb:da:77:c2:01:
d7:a5:02:7a:3d:84:9d:d9:eb:81:47:d4:69:5d:e4:
5d:88:84:cb:ac:cf:ba:6f:86:75:75:25:c6:9c:14:
06:9a:6d:c3:bc:11:e6:5d:fe:87:43:7f:fc:e7:96:
25:4d:ad:dc:6a:48:14:ab:d8:b1:75:97:ad:3b:95:
c6:2c:42:20:b4:69:8e:17:5e:b3:9d:b6:22:e9:b1:
7c:f5:e5:79:d7:e3:f3:a3:fb:d0:b5:4c:13:01:cf:
ab:77:db:de:dd:b7:8e:8d:25:c8:d9:ca:d7:df:46:
a8:a9:3c:3e:ff:e3:4f:0f:6a:e5:3e:5b:53:1b:7c:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:41:17:BB:F8:C3:24:88:3C:94:95:78:3C:F2:79:ED:F8:FC:70
X509v3 Authority Key Identifier:
keyid:FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bc:56:5a:9b:4b:8f:25:83:ee:ce:4a:2f:7a:e4:dd:fd:cc:
65:c9:01:b4:a3:16:8e:bc:ba:74:47:ba:04:b7:60:bf:08:c1:
26:0d:75:8b:12:7b:63:40:c5:47:56:1a:98:f1:15:7a:c2:2b:
2c:4c:09:fd:7a:78:b0:38:1d:c6:7f:a6:b8:0a:d8:88:68:1f:
21:5d:7a:bd:d7:d9:ac:9a:7a:27:e5:58:dc:4b:33:d6:f4:c5:
d2:f8:bd:c2:61:6c:bf:d3:17:5d:e0:97:92:47:bb:bf:e0:d7:
08:f4:19:9f:43:13:dc:17:3c:4f:4b:26:12:64:64:e9:cd:05:
88:2c:23:89:88:fd:e3:9b:2d:e6:6a:ec:4b:5e:95:b7:f2:7a:
d3:4a:82:f9:eb:7a:1f:44:a9:ae:b3:6e:2f:52:69:85:6d:52:
04:02:1b:79:19:a6:98:f5:9a:91:7a:d7:90:6b:53:ad:9c:12:
55:ed:f0:3c:9c:31:70:56:06:1a:8d:b3:af:c6:7c:97:90:19:
0a:73:27:13:55:48:1b:0a:7e:18:f7:d8:b7:63:ca:65:75:8c:
21:40:73:c7:a2:c8:6f:62:21:31:75:1e:f3:d1:00:0e:a8:c8:
0f:d8:a2:d1:6d:ac:e2:90:4d:2b:1f:92:9b:91:f5:d8:0f:74:
3a:d5:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:28 2025 by rpki-client