Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier: Axr6kCRJkg/1mQNo4xqsDDTFWBoJ6Jiy8DR7kPKTqbQ=
Subject key identifier: E5:B3:03:21:08:21:E0:47:52:F2:DD:48:01:32:58:28:B6:B3:17:DA
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial: 019A4D05CEB550023532A9F910BF84F0D388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number: 03B8
Signing time: Tue 04 Nov 2025 04:00:17 +0000
Manifest this update: Tue 04 Nov 2025 04:00:17 +0000
Manifest next update: Wed 05 Nov 2025 04:00:17 +0000
Files and hashes: 1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: L/9iiJu/98VIHJnuVoNp+2VRa0g7555EUu7MEzWykto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:ce:b5:50:02:35:32:a9:f9:10:bf:84:f0:d3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Validity
Not Before: Nov 4 04:00:17 2025 GMT
Not After : Nov 5 04:00:17 2025 GMT
Subject: CN=e5b303210821e04752f2dd4801325828b6b317da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:05:a3:01:03:9a:9b:7d:07:60:b4:db:a9:
b7:b1:ec:2d:db:40:11:80:b8:e0:ce:eb:89:a2:68:
d7:00:af:f5:b8:f9:2e:1c:44:f1:d2:fd:76:81:85:
fb:94:d9:9e:2b:cb:d5:15:c5:91:f5:ee:3f:55:8f:
77:d7:db:39:0d:91:a7:e8:31:c5:b7:3b:b5:3b:c7:
37:f2:0b:43:62:84:36:35:42:5b:45:0e:f0:0c:3e:
80:be:ff:8b:3f:06:95:ce:2f:c7:1a:67:36:93:e0:
42:ce:a6:6f:f4:c9:62:83:6d:47:a7:21:7f:6e:7a:
24:72:e6:fc:74:bc:e1:df:f8:81:28:06:d8:3e:f5:
db:a8:e4:4c:44:a5:22:1e:ce:7f:30:f5:d3:cc:a7:
8d:6d:a6:9d:76:2d:e8:99:09:d2:23:f8:91:04:2a:
7f:c0:ea:05:c6:5a:25:30:bf:30:a4:89:e9:ae:7f:
82:77:91:26:c2:2d:30:bc:54:34:77:82:8a:b0:0d:
3f:7f:66:7e:37:86:f9:96:12:c9:7a:94:60:4f:54:
52:0b:28:1a:4d:12:09:11:a1:e8:7a:06:12:a4:68:
ff:72:5a:37:cf:db:81:4e:b6:3a:fe:c3:01:01:0f:
45:68:19:c4:4d:c7:35:38:4f:55:e2:a7:e2:3d:8a:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B3:03:21:08:21:E0:47:52:F2:DD:48:01:32:58:28:B6:B3:17:DA
X509v3 Authority Key Identifier:
keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1d:c2:03:c3:a5:0a:73:ca:f6:9d:5a:48:d9:68:c5:85:15:
e4:78:a1:de:78:f8:56:e9:02:c8:06:a3:e0:36:f0:3e:81:78:
81:2b:74:8d:62:fa:73:53:a6:af:25:57:71:ce:15:8d:e0:bd:
23:16:d4:58:ce:a9:51:1d:26:c6:8a:6c:2b:49:ff:69:c9:f9:
82:cf:05:8f:39:c1:74:27:38:b4:9b:a2:4f:b8:d5:f2:84:02:
b5:b6:3a:7d:19:89:15:df:23:5a:21:6d:6b:21:98:c4:d4:a6:
bd:bd:02:cc:1f:39:81:82:a4:77:ae:07:af:c2:e4:a4:c8:5b:
71:c2:3b:36:be:f3:20:7e:bc:eb:fe:6e:44:b5:5f:1d:12:16:
b1:1a:94:98:03:8e:85:dc:3e:a8:dc:91:2a:64:0f:36:7d:93:
3b:f7:65:28:ab:62:36:d5:bc:ad:de:35:33:2a:e3:55:78:48:
c9:98:96:ba:65:50:63:33:40:b7:81:d0:62:04:ba:4e:9d:fa:
2b:13:0b:02:53:15:c8:46:50:5a:4f:62:99:5b:4c:99:85:9f:
3d:08:67:30:6e:c2:3b:29:e3:ee:fe:40:12:4a:69:82:f4:05:
9f:7b:29:0c:67:63:03:7c:a8:b6:7d:18:b1:a1:8b:ca:27:b5:
c8:29:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:23:36 2025 by rpki-client