
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: aUFlZBeL6bn/CgKSV/0P9VIaqAIj8jddSM9BCygFJ5g=
Subject key identifier: AF:E9:E7:B7:B4:AB:A4:D1:29:B1:FB:58:6D:76:E8:F9:D1:C2:36:25
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019A288BC0124023EE659A72D7DFAACF7D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1738
Signing time: Tue 28 Oct 2025 02:00:38 +0000
Manifest this update: Tue 28 Oct 2025 02:00:38 +0000
Manifest next update: Wed 29 Oct 2025 02:00:38 +0000
Files and hashes: 1: 1k1uJi06zFolDKDkLKKvi35k2JM.roa (hash: FlOoYo71s858Sv6ZMqYB1AYn8xpWhGfgkv8prIUZt1k=)
2: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
3: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
4: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=)
5: G9CfAyu7MWqdi5h61nGlF_fsunQ.roa (hash: 30zImJCQoB34kk0fHQV5AKxerW3IST7q3OGUva75Wu0=)
6: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
7: KbQ--oBtSgvSfZVrBwQ6M553Hwk.roa (hash: NJgK04btjY64hOecbKh54mIt3v+Yqupp2O5zCZPtgv0=)
8: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: EPpRouj75+gJcxX/RzyLF1GqAj88i3fn9TWE20u+xsw=)
9: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=)
10: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
11: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
12: zo7mxq2v2o0aNKJKvVs8XzMAoSo.roa (hash: hDK25txovgb427j58Xr748zftbcgjP77JZ1VaXHts3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:c0:12:40:23:ee:65:9a:72:d7:df:aa:cf:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 28 02:00:38 2025 GMT
Not After : Oct 29 02:00:38 2025 GMT
Subject: CN=afe9e7b7b4aba4d129b1fb586d76e8f9d1c23625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:e3:64:e9:9e:32:80:68:7e:e1:46:e4:81:
a1:60:0b:7a:7c:9b:af:31:59:67:e0:4a:25:bd:35:
89:7e:97:18:b4:40:4a:33:75:d1:ae:0b:7d:0b:2a:
5c:20:0d:62:98:e7:85:14:7b:bf:d9:85:d5:e9:4d:
d0:56:94:b1:26:6c:74:b3:d0:67:2b:81:89:71:eb:
4b:03:6f:88:17:b2:e9:d0:8e:38:ac:b5:3d:fe:5c:
57:9c:02:be:5a:06:bd:88:a2:5b:4e:bb:fc:50:25:
0e:4a:e7:39:53:77:ce:ac:e8:e7:2f:18:a8:9b:1c:
e2:ef:e7:0d:7c:3f:cb:6a:e7:70:7b:4c:f1:67:6b:
a6:cb:19:72:ad:cf:d4:05:80:4d:5e:d8:80:ee:5e:
d6:49:a8:a2:99:72:7b:6a:e3:55:99:c1:7d:bb:2b:
ce:82:bd:20:16:bd:68:aa:88:43:7e:01:58:a5:c8:
73:cc:95:9f:58:f8:84:b5:3b:fc:57:73:24:9b:e0:
a6:35:57:7f:cb:2c:2f:5b:cf:26:5f:f7:73:25:3e:
dc:23:26:93:41:01:4e:9a:18:e4:c0:d6:e1:4a:63:
82:92:2c:92:b5:b3:93:89:7f:be:9c:eb:1f:18:5d:
a8:82:6d:4b:ed:96:43:87:ee:f3:f1:ff:af:03:6b:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E9:E7:B7:B4:AB:A4:D1:29:B1:FB:58:6D:76:E8:F9:D1:C2:36:25
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:de:c6:3c:09:92:b6:5a:73:15:c5:10:83:a4:18:36:d7:4c:
2e:05:ba:2c:56:0f:3e:be:11:3e:d7:fd:6e:0a:db:79:63:1e:
13:aa:ad:86:67:29:38:f0:e2:7c:ab:03:98:02:2f:65:a7:c2:
5c:27:5d:d9:7f:86:f8:be:49:74:70:f0:a9:64:78:af:62:b1:
23:c5:9e:08:c2:5a:c1:38:2a:c2:dd:db:75:5a:8f:c6:5f:ea:
ce:f5:53:c7:bd:4a:21:7f:d7:af:7d:53:ab:ad:12:4e:d2:25:
2b:54:f0:38:52:fd:5c:4d:4a:60:aa:9a:d7:e8:a6:f3:9e:67:
e7:6a:54:37:e7:72:70:28:19:8c:8d:71:c5:4f:6d:c7:eb:55:
03:20:f7:72:63:06:9a:93:7b:5e:4d:3c:e2:ad:d8:6a:4f:32:
6a:e2:5a:0c:e1:31:d9:16:87:36:68:0f:2b:3e:7d:84:a7:5a:
f2:e4:1f:49:e0:db:d8:ef:94:2a:53:29:68:8a:a7:4d:dd:db:
16:bc:3a:cd:f1:ce:20:51:68:4d:1c:b4:ef:b5:64:ac:19:15:
cf:cf:05:bb:d3:48:34:54:fd:c7:f4:7c:ee:2c:42:ca:0c:b3:
24:f7:6a:f3:6e:b1:e5:bd:cb:c8:32:8e:8b:c7:42:d3:91:57:
72:6b:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:34:04 2025 by rpki-client