Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: j2BA/VOGdN9PDP3mxWyeOY7cFUVx135+roouWIBb5wc=
Subject key identifier: 53:C7:82:88:D7:C8:64:FE:A3:8D:17:2B:7D:28:36:51:7B:9B:7C:5D
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019A714A296CC9527374CF0DFC8692A62326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:16 +0000
Manifest this update: Tue 11 Nov 2025 05:01:16 +0000
Manifest next update: Wed 12 Nov 2025 05:01:16 +0000
Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: bi6Oq+PX1vlnrkGlDEYr34GaUNA1PyBKhkpnsJdMJr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:29:6c:c9:52:73:74:cf:0d:fc:86:92:a6:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Nov 11 05:01:16 2025 GMT
Not After : Nov 12 05:01:16 2025 GMT
Subject: CN=53c78288d7c864fea38d172b7d2836517b9b7c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:16:48:4a:e5:b5:cc:9b:94:22:37:5c:31:
4c:4c:a6:93:47:3f:ad:e4:e0:4a:62:80:34:11:26:
e9:21:1b:94:a6:04:34:f2:27:50:e8:e6:23:f7:74:
8f:15:85:11:c5:f4:96:cc:b9:5b:19:0f:72:44:e5:
67:f5:63:59:c9:e7:8d:b3:87:91:bd:9e:36:a0:d2:
9a:38:da:39:4d:5a:fb:bf:59:a9:fe:b4:9c:1b:96:
f0:d3:48:a6:0d:6d:c1:e0:0f:8e:84:0d:68:a0:c9:
6a:c5:7d:37:fa:0c:ca:45:1b:df:ca:5e:e9:a5:f4:
31:61:04:b6:07:79:5b:d2:5a:c8:17:41:3f:fd:27:
0c:83:6c:8f:99:98:65:0d:6a:14:28:a8:b7:63:7c:
f2:64:c0:2e:56:99:1b:82:de:03:73:26:89:a9:1a:
03:71:da:fd:4b:4b:36:ee:98:23:f7:b6:4f:16:5a:
69:95:dd:2a:f5:8f:64:a4:10:e4:53:c7:ea:cf:90:
7e:a0:25:ad:05:2d:d5:3f:09:f2:00:18:21:e0:ed:
9c:aa:96:38:84:2f:be:3d:b4:dc:f3:a7:05:e2:b9:
23:91:0b:61:77:ab:e4:48:e6:29:3e:16:20:dd:33:
5a:09:3a:b7:6b:e0:a9:ee:1a:e1:e5:9b:4a:37:60:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:82:88:D7:C8:64:FE:A3:8D:17:2B:7D:28:36:51:7B:9B:7C:5D
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f3:90:23:46:3b:74:c9:b9:f6:5e:0f:d3:aa:2c:7f:fb:ba:
e1:70:84:9f:2f:f5:5d:77:31:c5:7a:78:09:e9:70:0a:15:68:
24:f2:f6:bb:b5:24:0f:9e:a6:3f:b4:19:89:bf:b9:cc:b1:fd:
d7:fc:c1:df:6f:7c:67:48:af:df:16:50:74:37:1c:f5:73:f1:
af:2f:c6:27:e9:a0:3b:65:bc:5e:ec:aa:f5:b9:0b:ed:42:cb:
cb:40:32:bc:01:0a:73:c2:c5:e4:d1:03:d5:8c:2e:9d:51:84:
fd:23:92:f3:f0:c9:55:2a:90:a0:23:23:79:54:b2:ce:3a:26:
4a:0e:5e:fb:d4:db:cb:13:b6:32:4b:41:16:7b:ad:aa:f2:3f:
c4:92:01:d1:90:2b:31:db:78:ef:8e:df:f7:0f:5c:9f:cd:51:
3f:c6:a4:b4:5d:b3:f5:94:79:53:8b:bb:8e:ff:eb:82:15:67:
d2:75:ba:56:2a:67:d5:7b:bb:eb:15:5a:5d:77:fd:20:96:93:
7d:83:56:ac:1f:1e:da:6b:b0:54:a2:aa:17:97:83:6a:a2:6a:
b7:74:64:53:11:f6:c1:f0:9f:d5:7c:19:1d:e3:04:fa:9d:a8:
2e:c2:c3:e3:3b:6f:31:db:27:72:fb:9e:31:aa:5c:b4:c6:4f:
51:f3:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:37 2025 by rpki-client