Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File: mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier: Td6jnllM8eY99D6LGc7JPTgEdzwKJVQByAt/gN4QCU0=
Subject key identifier: 66:FA:34:02:FB:9B:15:A1:DD:65:76:DE:6A:2B:A0:49:91:53:99:4A
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer: /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial: 019A71B83BA775D5A8D20D919528D8522087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number: 0611
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: cE7pdZD2pVSsDMYp0o6GZf8Fa569H89bwqWMM5Re4jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3b:a7:75:d5:a8:d2:0d:91:95:28:d8:52:20:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=66fa3402fb9b15a1dd6576de6a2ba0499153994a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:e3:46:90:5e:a6:ee:f3:f1:9c:bf:42:92:
5f:0b:31:25:60:f2:76:c7:98:37:ab:0a:81:6c:13:
35:64:7b:c7:dd:a2:f0:ab:17:0f:74:81:df:8f:53:
3d:56:92:38:02:f3:37:86:13:54:20:6c:71:d7:53:
a0:01:26:d6:12:96:e4:4f:67:80:3e:66:a7:dd:6a:
07:89:c6:09:8c:a3:cd:fe:0c:99:40:06:da:fc:17:
37:d7:0d:f8:bf:75:a3:c9:ea:1c:64:7a:29:f6:ce:
eb:94:6b:ea:41:b2:29:19:70:2c:cd:fb:e4:22:80:
e6:b2:73:d4:04:69:04:43:36:ac:6e:8f:25:84:12:
11:e1:ad:e0:8e:80:00:a9:81:64:4d:c3:af:26:82:
bc:c7:9e:03:f7:6b:3a:4a:13:97:6d:8d:02:ca:4e:
5f:4e:a2:80:82:fa:01:de:f5:32:d8:d2:09:f7:ea:
0c:8e:50:e6:b2:6a:d3:71:e9:7e:9c:bb:76:bb:ca:
4f:c7:a3:4e:17:cb:f2:f3:3b:71:89:3a:27:92:83:
c6:b5:6b:72:8b:c5:a3:cc:2b:4e:dd:24:d3:3a:e1:
52:6c:a7:fd:43:a8:56:c0:6e:8d:28:50:a9:86:68:
bf:57:ed:40:19:31:9d:61:44:47:57:82:a2:e7:dc:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:34:02:FB:9B:15:A1:DD:65:76:DE:6A:2B:A0:49:91:53:99:4A
X509v3 Authority Key Identifier:
keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cb:63:56:db:f6:a8:dc:d7:ee:40:16:4a:32:96:6b:19:54:
2e:03:9b:91:19:e5:73:07:f1:a8:b2:c1:83:0a:0d:bf:c0:01:
06:ec:c3:a3:8c:77:d0:eb:e5:e7:57:ab:c7:54:28:68:b1:38:
98:0e:f9:fd:a7:35:93:87:34:43:89:a1:ac:95:fb:6f:3b:da:
c8:6d:7b:ba:d7:b0:89:d4:ea:f8:10:75:d5:fc:77:1b:88:f3:
d9:fb:06:04:a0:5a:b3:c3:04:64:5f:d3:d3:79:19:be:d0:9d:
1e:61:05:2f:90:f8:49:9a:ce:3e:71:29:d3:39:f3:85:31:d8:
8b:2b:34:ea:9d:bb:2a:eb:96:a0:b1:51:b4:ac:8b:7e:b2:b8:
5a:29:a5:ab:88:32:3f:b9:f1:a6:9d:20:b7:ba:b1:18:44:07:
bd:40:59:3e:c0:98:84:03:2f:69:17:7f:55:5c:89:de:97:60:
ef:9e:1d:41:42:e2:1a:2d:ed:c3:b6:82:aa:cc:55:49:e7:ff:
90:3a:87:5d:e0:be:1e:1c:fa:da:16:2e:79:9a:e8:89:45:01:
be:00:61:f2:16:34:f2:91:40:41:57:71:bf:ce:c0:93:5f:38:
93:97:4a:86:64:e4:f0:e7:ca:ae:40:32:73:1b:f5:1d:7f:0a:
8f:1e:59:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:25 2025 by rpki-client