Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
File: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json)
Hash identifier: TY4eaCcGex4pi8cwlz0D/4E+zSMZ4fnp8sKnfnYIxnk=
Subject key identifier: C3:B5:BC:9D:36:9F:B6:67:12:57:CB:A7:C0:6B:C2:20:62:37:46:41
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial: 019A72263E6823A55C07EB6CA7884D859E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
Manifest number: 0172
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: B7eYL74OeH/F5PR/Ul3LgR2D4gzPEOUvSWyCQv3KUMM=)
2: oidQOFv_T3t4hgPCm6h_UreADsw.roa (hash: y9QfSR0j2NSF/2jSZyP0tv3TDh1rVPF+ZeadaUNAaYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3e:68:23:a5:5c:07:eb:6c:a7:88:4d:85:9e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=c3b5bc9d369fb6671257cba7c06bc22062374641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:fa:52:10:fa:e1:6b:21:be:9c:21:c3:e6:
d6:be:cf:d7:1b:56:11:c0:69:f3:d0:17:f9:7c:6e:
f7:7b:28:48:86:b0:8c:d6:dc:fd:b8:3e:15:bb:71:
89:16:21:e5:40:43:be:e3:4b:0f:ca:2a:36:dc:4c:
05:c3:b8:10:92:15:e9:f9:9d:2a:22:f3:5c:34:9c:
bd:ca:5c:09:2a:6b:28:c4:66:76:0f:41:bb:1b:64:
ae:00:b7:5f:d1:b4:bd:21:fa:b6:53:61:f6:fd:9f:
d2:cc:b1:02:90:b1:bf:cb:93:37:ce:c9:4a:b5:46:
47:9a:8f:6e:de:68:8e:c3:b9:80:35:a6:85:45:ee:
a8:4c:7c:b3:4d:da:cb:47:9e:c1:68:15:43:1f:8c:
0a:2a:1b:31:b3:b1:3e:01:08:0e:ab:9a:45:26:12:
68:58:40:f1:c8:b6:f1:a5:aa:d8:3b:67:c7:6f:00:
17:70:9a:fb:7b:56:d3:2a:2d:cc:cf:e5:84:21:e3:
b7:94:77:39:77:25:b8:8d:ba:c6:c7:42:e9:a4:c5:
d5:c0:15:d0:c9:e9:5c:62:3d:96:80:f1:14:3a:0c:
8d:5f:25:07:47:fc:b0:d7:9d:03:6c:38:2d:b2:e9:
85:67:25:7c:05:a5:a9:c9:12:0c:28:cc:6e:4a:51:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:BC:9D:36:9F:B6:67:12:57:CB:A7:C0:6B:C2:20:62:37:46:41
X509v3 Authority Key Identifier:
keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:65:67:05:82:0c:9a:15:2d:45:c2:93:11:98:61:8a:92:d3:
3f:c6:2f:7e:3e:1d:43:ed:b6:7b:6a:53:fc:db:dd:fd:3c:6e:
83:c4:88:3a:fb:f0:34:6e:10:d4:6e:30:83:22:18:94:61:fa:
45:de:6a:f8:9b:69:3a:64:f9:c7:19:6d:7a:9e:a5:56:0b:3f:
e6:38:eb:c0:20:74:4d:55:9c:af:34:fc:06:99:0e:0e:1d:dc:
54:25:ce:86:9d:f9:39:19:86:e2:e1:83:52:d2:f2:b1:37:b8:
72:54:73:f4:4b:ba:fc:39:83:74:dc:bf:40:b6:90:df:56:8c:
dc:86:3a:8e:1f:b8:d3:cd:71:5b:25:91:30:b9:12:17:41:0c:
7e:fd:73:8b:5c:24:30:c5:84:04:49:b5:22:7b:81:fc:ef:4c:
7e:fa:a7:3c:b3:22:41:c7:94:28:d0:52:03:7a:81:22:2b:d2:
92:ca:66:10:59:b8:f4:f9:ee:bc:b6:a1:8d:f3:0e:69:77:03:
92:c4:d4:32:97:61:50:97:4d:f2:eb:4e:b5:32:1a:c6:14:41:
6f:d7:4a:62:d4:7b:63:f7:82:fc:21:8f:35:ca:7c:1f:91:ed:
74:dc:d2:da:fb:3d:e1:3d:88:26:c8:31:60:e2:98:d5:4a:2c:
8e:a4:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:36 2025 by rpki-client