Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier: RmFSg9HHHXN7gxGq8iPdaNQfnG8WlGU/xvUs+d+pLi4=
Subject key identifier: 56:E4:45:66:65:7C:43:61:29:62:6D:9C:E1:34:BA:9B:F9:FD:BF:B4
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 019A725CAE09D663F1E4E79A0CD34BA7FD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: FQez5ofMOckMNEramTS/81fzMQ4r7CyEQLi1mgDq2aQ=)
2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ae:09:d6:63:f1:e4:e7:9a:0c:d3:4b:a7:fd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=56e44566657c436129626d9ce134ba9bf9fdbfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:15:24:77:0d:76:c4:43:51:dc:9c:92:4e:
ec:3b:3d:54:da:7e:1d:15:09:92:ac:44:3b:da:5a:
27:53:11:13:96:cd:4d:41:f0:f0:53:06:1c:31:d8:
81:b8:a9:89:10:a2:81:86:45:aa:46:0e:2d:78:12:
5b:14:d7:db:8f:a6:8d:91:cb:53:3c:ea:96:cc:1a:
c5:28:bc:aa:ef:2d:fe:d5:4f:0c:d5:6c:32:17:be:
38:55:1b:bd:e7:a9:66:a7:72:cb:83:db:3d:38:59:
42:62:f6:8a:03:0d:cc:23:9a:34:ee:d2:22:8e:f4:
f8:eb:03:cf:98:04:ce:4d:c4:f0:7d:e5:08:8a:3b:
8b:1c:4a:ec:96:55:7b:44:07:17:ec:cc:bc:75:a2:
1c:d5:62:f2:b7:f1:15:4e:03:b5:cf:10:84:3f:71:
02:c9:4b:56:c4:5b:33:72:a6:e8:c8:36:77:5c:1f:
a1:12:67:67:18:a3:4a:b3:1d:e6:de:ce:83:29:ac:
d0:a9:62:31:0e:4a:70:c0:27:75:7e:af:f4:72:3e:
a9:ca:c9:ac:72:60:b6:8a:00:4a:08:a6:14:a1:d3:
7a:00:34:76:61:0b:30:8a:80:88:db:b7:73:2d:71:
4a:1e:19:d7:91:16:b1:db:c6:24:b9:9a:84:69:26:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:45:66:65:7C:43:61:29:62:6D:9C:E1:34:BA:9B:F9:FD:BF:B4
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:db:f4:83:aa:aa:ab:84:fb:6d:19:42:f5:de:88:2c:c0:13:
b6:97:c3:fb:fa:3c:92:2f:4f:1b:48:a6:dd:bc:e9:9c:80:af:
51:8d:e1:c0:20:31:d0:54:97:15:9a:0f:85:e0:a5:5f:0e:1b:
6e:d6:4b:88:18:40:fe:40:a7:36:2e:e9:dc:ec:af:92:16:82:
2d:7b:52:09:23:01:da:e1:f1:52:3f:89:d5:3b:21:21:12:59:
fc:81:66:be:12:8a:61:40:a7:74:3a:ab:a4:92:b4:4f:b4:a3:
4d:11:25:e0:67:77:81:8e:47:a2:fd:f6:8b:b3:32:7f:84:b9:
8d:d9:5b:84:61:03:ea:64:3b:ee:bb:49:e1:9b:c9:72:2c:d8:
26:f1:cd:a8:21:0a:da:b5:eb:5a:52:49:9c:a1:63:ed:3b:f9:
b0:58:a9:41:da:68:e8:6d:2f:a4:ab:f6:d8:e6:e6:fa:3d:c0:
cb:e0:ed:6f:68:bd:f1:bb:a6:31:7f:10:48:ca:7b:1a:cf:eb:
f5:59:63:f8:6a:2e:95:a2:56:0d:14:be:26:03:11:fb:9b:e8:
d5:ce:91:4f:03:35:b6:19:39:81:c9:b1:6b:ef:81:b8:ea:23:
71:02:ff:9e:3f:47:f3:7c:02:cb:f7:d8:0b:95:03:1c:c4:a2:
2c:bc:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:40 2025 by rpki-client