Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: WMLzwmCjc6UTHv2VvcFn63kYcxDLrpZ2vRVUI9gcsx4=
Subject key identifier: 69:5F:02:45:39:2F:04:60:E6:22:61:D8:8B:27:B7:82:78:1F:27:DB
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 019A70DC2A8CF668A88A441B0405DABD2368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 06C9
Signing time: Tue 11 Nov 2025 03:01:08 +0000
Manifest this update: Tue 11 Nov 2025 03:01:08 +0000
Manifest next update: Wed 12 Nov 2025 03:01:08 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: 2sLQi9trPKIkD50GY1c9J0bovC3yCEw4kqtFE66LSBc=)
2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2a:8c:f6:68:a8:8a:44:1b:04:05:da:bd:23:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Nov 11 03:01:08 2025 GMT
Not After : Nov 12 03:01:08 2025 GMT
Subject: CN=695f0245392f0460e62261d88b27b782781f27db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:a7:a2:f0:a8:9a:1a:22:e1:16:4d:fc:70:
9d:11:28:91:ff:e7:94:a8:e1:b5:03:80:d9:d0:a4:
32:62:e6:e3:f7:ad:4f:cf:9f:99:a3:82:82:e8:36:
54:60:84:e9:6f:1a:85:61:da:b0:5d:b6:da:20:3e:
df:57:08:e7:5f:92:95:72:2f:bf:5b:b8:00:5a:84:
c4:c6:7e:50:5c:1f:52:77:a0:29:d9:44:f8:0a:d2:
3d:c2:f0:ed:bd:ba:42:84:d4:85:bb:6e:09:8a:b2:
16:1f:5e:e2:14:18:29:cd:de:cc:71:af:a1:e2:c9:
cd:3d:03:ea:66:4e:63:f1:ad:6c:c8:37:e6:49:45:
3f:25:2f:d2:bb:2a:28:0b:cb:47:52:41:67:b9:f6:
66:78:fd:37:cd:b3:43:e5:63:a3:97:e6:00:de:ce:
dd:c3:68:0a:55:30:51:23:39:b2:24:c5:05:5a:99:
13:ee:a3:f0:6c:ff:13:c2:84:35:cb:70:5c:5a:2b:
36:e0:9b:f7:8f:39:d5:39:5c:4b:58:06:a5:e3:5a:
75:0a:d4:f2:4b:1e:5b:f7:54:96:32:c2:da:a0:98:
f6:21:3b:49:33:cb:a2:0c:98:57:ed:cd:7d:4d:e3:
a3:97:00:e0:d1:90:f1:42:8a:8d:c7:82:09:d5:88:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5F:02:45:39:2F:04:60:E6:22:61:D8:8B:27:B7:82:78:1F:27:DB
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:98:67:f5:2c:39:e3:dc:81:a8:4e:eb:e9:9f:7c:a0:3a:f5:
63:36:ff:8d:b2:cc:bf:45:d3:2b:70:df:88:58:dd:72:1f:14:
da:1d:41:68:e4:5d:0f:77:21:45:d2:95:3a:e6:18:50:ef:c2:
44:7b:a7:d5:df:fb:ed:b6:aa:4d:2d:b0:01:74:c5:a3:bc:16:
18:ae:7b:ac:80:96:e6:aa:c6:16:28:db:87:b6:0f:74:b1:08:
b8:93:ca:d5:aa:2f:ed:37:ce:00:08:1d:ad:c2:0a:b6:4d:2e:
25:a9:93:ef:62:d2:c5:71:cc:63:0e:03:71:7d:03:af:a5:62:
ea:47:71:e2:8c:06:16:ce:4a:dc:9a:a5:e4:b9:b1:ae:28:84:
ee:53:6b:1a:4d:17:25:b4:5c:a7:e0:6c:42:31:1e:7b:44:e4:
2d:da:35:80:fc:ee:d4:d5:bc:01:b8:dd:0f:b1:44:28:be:b5:
10:13:45:83:9d:f6:1b:5b:d7:e2:0e:98:d8:49:72:23:0c:88:
65:78:09:09:44:14:d2:2c:19:60:dd:f0:b8:cc:8a:45:ed:67:
0d:00:f3:dc:e5:45:06:fc:53:d1:6e:76:5a:6d:cc:c6:f1:16:
51:01:aa:8e:9d:bb:e8:b1:a1:b4:99:f5:c6:98:ff:e0:5b:ca:
f1:31:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:41 2025 by rpki-client