Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier: is7s5d4b4I9gW4RyLLYBpOclWnHqB8MiEbZdWr7xnEs=
Subject key identifier: 64:9C:E1:EB:41:B3:AB:90:9C:4A:4D:66:D5:09:48:70:54:D3:9E:D2
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial: 019A70A50621A204315EDD714EFC9ED9504A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 02:00:54 +0000
Manifest this update: Tue 11 Nov 2025 02:00:54 +0000
Manifest next update: Wed 12 Nov 2025 02:00:54 +0000
Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: G/n+R5TG08yh9pDjyIbKlC/S02eTj9emFanDrh7bDXs=)
2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:06:21:a2:04:31:5e:dd:71:4e:fc:9e:d9:50:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Validity
Not Before: Nov 11 02:00:54 2025 GMT
Not After : Nov 12 02:00:54 2025 GMT
Subject: CN=649ce1eb41b3ab909c4a4d66d509487054d39ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:a9:52:8d:52:70:6a:e4:f1:b3:f7:14:73:
f3:3f:07:d0:a3:6c:05:3d:2b:94:df:01:15:35:8c:
a9:f2:7f:b7:64:3d:0f:2e:76:39:d5:68:03:23:39:
47:99:94:b0:f0:9e:10:c5:81:2f:37:a9:26:9c:dc:
cf:11:13:4a:ae:40:ab:66:1e:11:e7:6c:bc:91:b5:
65:a5:2b:82:fb:15:19:8a:01:3f:aa:32:fe:0d:43:
d7:61:98:b2:3d:e2:68:13:80:93:7f:bf:98:9c:4d:
8b:15:87:56:91:3f:c1:f3:43:f1:0e:b8:56:f5:2b:
4a:df:fd:9c:45:e2:16:0c:e4:61:9c:02:39:51:d0:
61:15:23:ce:b6:7b:54:a1:12:41:12:50:04:96:d3:
a8:32:6d:54:2d:9b:99:ce:65:3e:a6:87:d2:16:aa:
f3:37:ac:4a:0d:93:7d:2e:88:c5:cd:46:77:95:1d:
f2:81:9d:60:47:00:c2:39:64:62:08:4f:68:57:c2:
fc:a0:fe:db:0e:9c:0a:f9:63:11:a4:cb:de:7d:a2:
ef:c7:63:56:98:7b:ca:75:15:bf:1a:0a:cc:9e:b3:
64:7d:e2:22:11:e6:c8:8a:74:b5:65:6b:82:f3:b4:
73:8f:b2:d5:a9:26:78:e9:84:0d:e3:8b:5d:46:ae:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:E1:EB:41:B3:AB:90:9C:4A:4D:66:D5:09:48:70:54:D3:9E:D2
X509v3 Authority Key Identifier:
keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:cf:0c:03:2e:b0:26:b6:da:dc:08:ee:36:ae:95:12:5e:3f:
a8:c4:6a:31:ee:3b:ef:d4:9a:46:9f:aa:7c:f0:1c:9c:a6:69:
ff:c6:65:1d:7d:4e:cb:d6:2d:a1:2a:54:f6:b6:58:d3:96:ba:
03:86:87:7a:a9:d9:b7:6c:27:70:85:6c:c5:ef:4d:06:25:fc:
53:c4:74:7c:eb:db:4e:78:55:84:1c:a6:f7:a4:58:f6:a2:72:
71:83:eb:b7:15:8f:35:68:f3:a0:7b:3f:28:6a:b5:b3:39:a4:
ef:aa:4b:0a:e3:b1:a0:89:01:e3:43:34:a8:f8:74:e0:f0:74:
93:ad:94:7a:c2:1d:5e:86:b9:6d:dc:79:39:e9:5c:23:65:53:
a0:e6:8b:22:30:7d:1e:01:ec:a8:98:c4:40:40:8e:6d:1f:97:
a0:80:85:b1:71:4e:77:ba:c4:b1:17:61:4a:60:c4:db:ee:ee:
c0:57:6a:5a:fd:03:ee:f1:ca:c0:7f:89:9d:47:13:6d:e3:ef:
d5:20:b8:11:c3:4b:41:56:fa:03:fa:a0:c2:27:ef:71:a1:59:
f6:59:e4:7c:ed:24:df:28:78:ab:45:4a:bd:36:9a:69:c5:15:
35:49:b1:85:b8:84:da:c8:3f:67:48:5d:a6:61:c8:ae:f7:4f:
46:48:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:40 2025 by rpki-client