Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
File: MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json)
Hash identifier: luiXde/h1wpd/JEEFL7m4ZWWNpvkKC8pDYlTAC8odT8=
Subject key identifier: 7F:E7:61:DC:52:68:41:4C:B9:3F:06:17:E9:C6:28:D5:43:7C:C3:D6
Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3
Certificate issuer: /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
Certificate serial: 019A72262A861BA90C89A2F433201BA62DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: kJ2Dgiu+Vp5V+jNRf3J8nKkB8PRwhuEZI2sgHVlfx6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2a:86:1b:a9:0c:89:a2:f4:33:20:1b:a6:2d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=7fe761dc5268414cb93f0617e9c628d5437cc3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2c:36:72:05:51:68:99:39:80:1a:e6:51:fa:
3e:ed:6a:73:7b:2f:b9:31:d8:4c:a7:8e:03:73:c1:
0e:94:1c:c0:a8:5e:5f:07:8c:d8:78:81:6a:2b:32:
ef:ce:09:53:31:e0:6c:da:6c:90:6a:d1:2a:67:c8:
5d:3a:23:0a:40:6e:f6:11:3b:4c:62:bf:9b:b3:a2:
10:23:b3:a9:4a:ae:f5:00:2b:c7:73:a6:8c:57:8d:
ed:ee:9f:0f:5c:c1:9c:40:1a:8a:a5:df:da:0c:b9:
a9:98:8d:5e:86:61:ca:ad:31:6c:45:57:0a:d3:20:
f2:02:23:22:5d:b3:c8:86:2f:4b:3b:01:91:9a:ac:
73:3a:66:67:18:74:c0:78:1c:de:b1:d7:4d:94:79:
3e:e8:f5:68:cb:7a:6c:3e:64:b7:a0:2c:43:d1:81:
26:a1:23:7f:93:8b:13:03:14:75:42:dd:73:4c:9d:
e4:ca:e9:f9:b7:3f:b3:30:59:f2:8f:a5:48:2b:58:
d0:f1:fd:ae:0e:de:03:d3:7b:fb:93:0f:4f:08:0c:
6e:41:c2:08:43:30:03:0d:21:42:0c:56:38:cd:3a:
ac:be:73:bd:f4:41:5d:b7:a4:df:40:11:60:e0:ea:
7f:8d:60:6f:e7:4f:a8:51:df:f0:dd:de:69:52:22:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:61:DC:52:68:41:4C:B9:3F:06:17:E9:C6:28:D5:43:7C:C3:D6
X509v3 Authority Key Identifier:
keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fe:14:94:98:f6:f4:30:1f:53:d9:30:86:8d:93:11:64:e2:
36:33:4b:c0:8b:bf:5c:e2:bf:9f:8a:53:b4:5d:3f:7f:fe:2c:
e7:92:e4:b1:5d:58:cc:40:ec:f0:62:5e:31:9f:40:ba:2f:7d:
fc:20:9e:05:bf:c9:e5:15:e9:79:35:fe:7a:8c:42:25:ad:69:
a2:eb:b7:85:d0:8c:b4:c9:87:39:2c:3b:19:b8:2f:b6:0c:f7:
e6:e6:3c:63:8c:51:ec:bf:c0:39:44:bb:49:2e:2d:fb:bf:53:
9e:7a:1c:1d:71:55:99:3d:78:07:56:78:61:1e:c7:51:78:fe:
c2:e9:5c:74:9b:c1:be:2f:dd:ce:a5:52:bc:7f:5c:ad:21:ea:
6f:53:6f:04:05:bf:d8:10:a2:bd:ea:8f:0a:de:b3:dd:17:65:
a9:24:aa:05:6a:29:60:b7:70:64:2c:9e:93:8c:70:5c:dc:d1:
71:29:3c:5e:93:2a:24:e1:d3:f7:81:cb:19:5e:da:65:81:03:
04:27:db:7b:cc:f6:ef:40:ad:4b:59:0b:72:f2:c4:e7:5e:82:
d9:49:60:e8:9a:fb:4f:36:ab:d6:11:e9:b2:fc:a5:39:e8:c2:
a0:c2:dc:1e:b7:67:b4:29:7e:38:4d:65:1f:b5:d2:21:b8:5c:
45:4f:6a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:59 2025 by rpki-client