Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier: s2zS9aGgQR/fgI+Xsr62KjIVstVQK/jLxw8yartARic=
Subject key identifier: B7:D8:77:97:A6:46:1A:2F:F2:10:A7:1F:C7:2C:22:12:33:73:5B:65
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial: 019A71EE997CF4B3869DCD4A756BA6585B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number: 142D
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: uSf9Fk/Ob7bqmSC0sn6sgdtgg9T4yc2OKjX3gwTc8sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:99:7c:f4:b3:86:9d:cd:4a:75:6b:a6:58:5b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=b7d87797a6461a2ff210a71fc72c221233735b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:f0:c8:47:68:55:d8:b4:27:8a:d2:08:c9:
6a:13:c0:dc:ad:78:2e:1a:7c:d8:23:32:a1:5b:48:
cc:d8:d6:5e:9c:aa:de:d6:7d:54:59:1e:2b:22:c2:
56:67:f0:cb:32:41:8f:b9:f5:94:38:cd:59:59:f7:
b8:14:6c:63:9d:95:ac:05:34:45:d3:df:2b:da:b1:
bb:30:08:98:1a:44:78:1d:87:4a:aa:2a:e5:69:aa:
18:9c:66:f2:9f:44:54:dd:6e:f3:5d:5c:75:3d:6f:
e4:a1:e9:d6:4f:cc:6b:d9:a0:0a:32:21:63:96:43:
a2:4f:bb:32:9e:c9:f7:dd:a4:cc:39:fb:cb:10:36:
42:aa:ea:01:65:47:f1:d8:3b:d5:8e:13:24:fd:cd:
e7:35:3d:9f:e3:3b:57:42:0d:3a:1f:7e:a6:91:f6:
7c:82:72:7f:95:12:a2:28:2a:1a:21:e1:62:d9:b1:
be:dc:82:9d:24:be:13:e3:8d:0c:ba:5c:63:ea:70:
25:10:ad:c7:72:53:40:12:b7:8c:bd:7b:ad:13:5b:
f3:5b:c1:7f:0a:94:d4:09:34:e0:d8:42:0c:59:b9:
0a:c1:36:fd:36:d6:b9:3b:5b:d3:c4:e9:db:e6:7a:
4c:cc:93:5a:cb:9e:20:ba:a3:23:b5:59:7f:50:9e:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:77:97:A6:46:1A:2F:F2:10:A7:1F:C7:2C:22:12:33:73:5B:65
X509v3 Authority Key Identifier:
keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7e:91:66:10:68:8f:c5:02:d3:26:3b:3b:bd:e1:15:92:af:
89:85:ce:18:eb:eb:12:28:8c:91:31:dd:85:c6:78:70:e4:01:
50:b0:45:85:bb:82:c0:e2:12:50:e2:73:67:f6:61:e6:7b:8a:
f9:2d:6f:af:f5:7f:bc:88:58:03:95:fe:08:4d:76:7c:16:5a:
c3:55:dc:cb:85:ec:91:28:29:be:ae:a0:e4:88:f4:39:00:2b:
de:60:ab:48:1d:17:e8:60:90:ce:3f:db:3c:08:18:47:20:0c:
20:3a:f5:9e:91:28:91:f1:f5:05:61:f4:f6:17:6e:0b:19:16:
d6:a8:c6:a1:91:e0:bc:f7:7c:d7:f3:b0:72:3c:c4:50:b5:36:
66:db:b9:3c:40:b8:06:e3:bd:a2:9b:01:1f:6d:85:e0:0a:aa:
f0:3d:53:46:65:da:03:4c:cc:29:5c:8f:c6:c3:ab:37:de:ee:
75:24:f0:83:61:b9:d6:af:ff:b6:b9:82:0d:0e:79:d4:41:d9:
90:ca:d9:81:ec:65:59:d5:e8:80:0b:d7:bf:20:01:a9:4b:12:
bf:d2:97:a5:41:68:65:7b:40:bb:25:68:ad:dc:3a:92:b9:6c:
0e:f2:b3:ef:89:b0:20:8b:76:cf:5b:23:ea:fb:82:4d:a5:7a:
8e:98:84:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:37 2025 by rpki-client