Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: c9e6iDVVI3NGOcyYsEzjNls/6QjPXWiZSLRP2Kke8zM=
Subject key identifier: 4A:03:3A:25:B8:26:61:3D:BA:FB:53:61:AE:40:87:EF:D9:AF:E0:E6
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 019A71B84C638C9757D118F7E7AB8A36A7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 091A
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: lzfiO/AWWz0eYYwxKY8y7I7HdbpBK9ceCLKUxzMOkOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4c:63:8c:97:57:d1:18:f7:e7:ab:8a:36:a7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=4a033a25b826613dbafb5361ae4087efd9afe0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:83:e0:a7:f1:88:a7:41:36:7a:1b:f3:16:
e6:80:e2:37:57:3c:dd:ad:3a:3b:6b:34:bb:d8:e8:
5e:99:b5:6d:79:12:13:3b:6a:bf:1a:c8:1c:28:57:
3d:90:02:29:57:bd:2a:78:5a:81:65:41:50:2b:df:
c0:37:a7:e6:40:a8:d7:8b:ab:6f:13:30:56:31:ad:
8c:c2:f2:d7:55:54:74:ad:d4:d3:8b:a1:57:bb:01:
42:8e:eb:db:fc:63:5d:d0:a9:b5:a9:78:78:11:5c:
ca:7e:31:e1:16:ff:b4:c4:cc:2c:b6:13:6b:2a:9f:
67:23:ea:e3:e9:a8:14:8c:74:49:e3:40:a4:5f:fd:
b0:92:1c:b3:88:17:42:18:0a:5e:6d:a0:49:39:e2:
fb:2d:7b:33:f7:f2:72:95:39:e5:61:a0:eb:5e:ec:
9b:b8:c3:39:48:84:f7:ac:6f:34:34:da:68:2d:10:
79:a6:36:2c:2e:98:25:0c:fd:76:3e:cf:3b:1f:f6:
83:49:42:a0:76:5e:2f:e6:db:93:c6:d3:d9:f0:10:
cf:05:2d:24:a8:da:a1:44:80:b6:8c:c9:62:92:e6:
7d:56:92:b5:77:bd:27:aa:95:0d:70:5a:44:89:2a:
0f:cf:3b:6d:b8:97:eb:47:a0:56:e6:09:23:18:69:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:3A:25:B8:26:61:3D:BA:FB:53:61:AE:40:87:EF:D9:AF:E0:E6
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7c:b9:80:82:a5:f3:1c:6d:39:f2:01:bc:3c:52:5b:5e:3e:
52:7c:a2:1e:51:eb:d0:bb:d3:10:26:6d:d3:ed:5f:8b:f9:ca:
47:0a:ac:48:29:85:0a:a8:4b:3f:f8:7b:49:59:da:36:e0:65:
09:59:c9:7d:2a:eb:c7:96:65:81:9e:2e:fd:c2:7c:40:cf:6a:
13:ab:81:42:72:48:61:14:7e:5c:ee:a2:80:be:a5:f8:f5:20:
48:88:4e:da:aa:3a:a1:8a:5d:73:18:b0:39:a1:10:69:a6:f6:
00:ca:a3:4a:28:09:cf:ed:3e:e9:a0:63:85:f4:b0:60:ee:f9:
6a:b1:da:6a:18:e9:21:68:d5:cd:06:e2:fd:69:63:ed:5b:d9:
c7:5a:b7:0f:fe:60:d0:c7:0d:0c:99:a3:0a:1e:24:07:71:eb:
49:b3:11:77:7b:95:05:4b:09:ae:a1:9b:61:0c:bd:31:6c:0d:
cc:e8:3d:c1:5d:92:40:7f:35:1a:c2:29:61:bd:e3:fa:c4:59:
c2:64:c2:34:3a:98:6e:75:ea:38:c3:cd:fa:63:80:23:5c:55:
e7:a1:07:08:92:41:de:b7:18:aa:8c:9c:af:04:5c:d9:46:a2:
ab:2b:81:fe:b0:60:3f:06:24:0a:61:fb:66:5c:80:fc:86:49:
48:39:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:00 2025 by rpki-client