Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier: V4eDEniy2qxaa7t4ZLdhaE1F6s/HpgGiwOBH3dzQKoc=
Subject key identifier: 03:9A:1F:6D:87:63:70:3E:45:5F:F7:D8:58:8D:93:DF:4F:09:B7:B6
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 019A706E3D5495E250FE208950C6E10539C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number: 0E7B
Signing time: Tue 11 Nov 2025 01:01:04 +0000
Manifest this update: Tue 11 Nov 2025 01:01:04 +0000
Manifest next update: Wed 12 Nov 2025 01:01:04 +0000
Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: +BdutH7BvIYXCBGWdBxeNUjIsOCZViQXIt+Wm5kLjaw=)
2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:3d:54:95:e2:50:fe:20:89:50:c6:e1:05:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Nov 11 01:01:04 2025 GMT
Not After : Nov 12 01:01:04 2025 GMT
Subject: CN=039a1f6d8763703e455ff7d8588d93df4f09b7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:30:92:49:47:06:38:90:4e:a1:de:57:bb:
3a:8e:6e:34:0f:5b:97:f0:95:de:e7:fc:a2:8d:55:
10:b9:93:86:44:66:83:a0:63:d3:d9:c0:79:50:ca:
4c:b5:4a:8e:e1:53:76:cc:33:f4:21:57:83:d8:12:
d3:39:fc:e2:4a:c1:e1:e1:95:44:79:d8:a2:1b:56:
8a:2f:96:3c:18:c1:dc:a7:ba:fe:10:55:66:b9:c1:
2a:e0:18:d6:ba:4c:99:67:4b:ff:90:26:d7:05:27:
ac:e7:06:a9:1b:10:61:17:b2:fe:35:47:0b:e9:d0:
db:65:37:17:4a:73:bb:2b:c8:ae:ae:4c:0d:4f:fc:
61:76:cd:1d:fd:da:dd:06:26:5b:91:7b:3b:b6:58:
99:60:0e:2d:96:5d:e0:a5:54:32:5b:49:b6:73:61:
18:47:33:d6:a4:50:cb:bd:16:32:7e:06:80:f6:61:
2f:5a:54:0b:83:31:1d:97:99:4e:2a:83:f2:1c:0a:
ec:e5:15:c3:f7:49:92:22:52:c2:5c:8b:26:73:d9:
9f:dc:b1:c1:81:60:b8:43:de:2a:9e:e6:ff:46:49:
11:cb:6e:93:bd:c8:50:9b:9c:2b:cf:b3:f8:05:9b:
8f:f4:4b:0b:d4:b7:cc:a2:2f:b1:9b:23:70:f7:a7:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:1F:6D:87:63:70:3E:45:5F:F7:D8:58:8D:93:DF:4F:09:B7:B6
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:16:e4:95:11:00:5a:f4:77:33:cf:83:c7:f6:bf:9e:dc:5c:
c9:8c:27:66:03:0b:33:01:a8:fb:e1:cb:cd:24:6b:3e:b5:af:
11:ae:25:94:68:13:a0:0d:55:95:e8:9c:fa:e9:26:38:0a:de:
66:06:ff:e7:7e:1a:59:a2:16:26:a9:b6:65:fd:79:1e:06:0d:
12:8d:69:9b:3e:db:65:82:04:fb:ed:36:5c:fa:c1:13:a5:79:
a4:57:f8:bd:b6:3e:89:a7:4e:b2:f1:d4:fd:fc:b8:a0:c2:ad:
4c:9a:9d:7a:11:1f:60:be:cf:f1:d6:b5:2e:cf:8c:75:b2:fd:
d7:ec:02:ec:ba:14:d8:2e:cb:4d:34:90:7f:cb:12:27:1a:0f:
4c:c0:01:dc:d5:b9:a8:3b:42:3a:98:bc:70:4d:2a:32:ba:a2:
ce:69:fb:69:50:45:5a:41:5e:de:0e:f4:86:3c:93:1f:5b:d5:
18:61:71:40:45:6a:57:35:f3:4f:6b:a3:24:11:4d:7d:e2:52:
1d:77:a3:bb:f3:4b:4a:0b:70:f3:60:8f:04:8d:3d:cf:c2:57:
cb:21:bd:ec:a1:91:a3:e5:bf:7f:bf:32:6e:aa:00:b4:31:5d:
53:93:9b:50:ec:28:c1:4a:c7:2d:16:cb:b1:34:2c:45:1a:1f:
a8:c7:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:38 2025 by rpki-client