Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: TyQw1meDoGjyRKuYLzBK2HnoZga4DhuvoF+7FWzWhBg=
Subject key identifier: 22:E5:31:7A:E9:89:DE:70:4F:82:AB:E3:82:C5:76:0D:AB:D3:B9:8B
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 019A7293615787697828516ADB60A38E5F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 13F0
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: xUaWDgRri6XN5V1Vdp01bKcSoNSt+RIe2Aoa9zLDX/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:61:57:87:69:78:28:51:6a:db:60:a3:8e:5f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=22e5317ae989de704f82abe382c5760dabd3b98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:bb:72:d4:88:01:cb:b8:f7:5d:e2:27:a3:
50:8f:d4:a4:c1:f2:7b:20:73:09:18:b8:08:a5:51:
a5:55:ad:a0:e3:ac:cb:80:56:31:2a:2c:22:88:d5:
c0:6b:da:27:c5:08:cb:f8:0a:b0:83:60:66:43:9b:
51:d4:20:b7:68:ba:d3:f3:96:42:73:2a:4e:55:08:
c2:78:0b:c5:ce:71:eb:7a:15:b7:4e:d1:9c:77:ae:
aa:9e:8b:d2:5c:f6:1e:a7:f7:ad:18:b6:21:5a:8f:
66:99:c4:b4:bf:c1:7a:db:24:c7:42:79:f6:a3:58:
4e:5f:cb:0c:94:11:76:ae:82:c5:f0:73:8c:c5:19:
64:14:fe:65:88:f8:fc:fa:1e:eb:32:32:b5:4a:82:
57:cc:9c:34:d0:7f:48:c1:9a:84:09:5d:6a:59:64:
f9:91:88:70:6f:84:95:fa:4b:c6:b6:87:83:5a:24:
a5:a7:03:17:a5:e8:5a:db:58:4b:da:99:a7:5d:3d:
48:7a:48:fa:60:12:38:39:6b:8d:e8:04:48:63:a4:
06:cb:ca:08:00:99:13:19:89:0e:48:c1:69:e8:d4:
58:f8:bf:41:d5:af:85:89:39:0b:3b:82:e6:f6:e3:
ca:8e:3a:cc:d0:30:c1:a9:0a:22:71:cc:0b:b8:ff:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E5:31:7A:E9:89:DE:70:4F:82:AB:E3:82:C5:76:0D:AB:D3:B9:8B
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b1:14:53:7b:9b:fa:2c:7c:93:b1:df:b0:82:62:80:b4:54:
df:78:3c:1a:e6:73:cf:ac:c3:4c:a3:b9:c7:cd:74:27:79:e5:
64:73:08:a8:fe:34:73:23:4e:af:12:b7:d3:c1:07:ed:fa:89:
3d:6f:14:1e:5a:c7:aa:e8:c9:f8:a6:f5:c8:4b:e2:3b:e2:36:
66:fc:5c:b4:2b:22:2d:a2:57:3d:46:be:e5:d0:40:6e:53:c9:
86:15:11:3e:46:7f:ff:b3:6d:5b:47:33:78:e1:14:6e:f1:d8:
04:be:29:08:3e:a9:8b:a5:d0:56:d9:09:fd:b9:f0:59:6a:71:
f0:ad:fa:68:2b:66:f5:f8:7b:ce:18:f1:e7:59:28:d0:7c:1f:
07:1c:90:36:e6:17:14:40:98:73:87:aa:a3:ea:30:78:91:16:
ab:1a:6b:4d:ae:61:83:1a:01:81:39:7b:79:15:bf:b2:fd:8d:
ad:9a:c6:78:1e:06:18:39:f4:7f:dd:a3:7c:0e:28:e4:b9:69:
fd:ff:25:78:50:17:c5:c9:d1:c7:f7:f3:1e:0c:1b:4f:6e:db:
ac:25:98:1d:18:ff:8b:81:14:07:81:46:e6:1c:4f:00:6a:18:
73:88:11:32:a8:6b:ca:aa:eb:b1:30:5f:b6:30:2c:04:e6:e9:
bb:7e:1c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:06 2025 by rpki-client