Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: 0b2lj1fNl0JBCP60qBM2h3OzyiF3GTR93PAAB4QEakA=
Subject key identifier: 54:4D:C0:38:EA:62:F3:F1:A4:D2:C0:AC:E1:C9:D8:B4:7E:6C:4F:D2
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 019A711378659609CCFB73620F8E0B124CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 095A
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=)
2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: DDGIW4/i2SsFMrSxGa1cogOd3gh4rqUwa9w3gp0scPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:78:65:96:09:cc:fb:73:62:0f:8e:0b:12:4c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=544dc038ea62f3f1a4d2c0ace1c9d8b47e6c4fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:86:a0:b4:4e:75:47:f1:41:e7:ea:3f:03:
a2:04:e3:a9:b6:b0:bc:c0:e4:4e:4f:10:62:43:56:
5d:68:d4:72:62:77:76:88:6c:62:70:0b:d4:1a:7b:
86:7a:12:91:a6:6a:4c:ce:7d:80:6f:81:91:7f:7c:
d2:6b:2a:4e:46:51:e9:df:3a:a2:94:da:4f:83:75:
b3:ba:3d:0e:37:8a:5b:6d:f6:19:ce:c2:02:67:a8:
24:8a:77:fc:90:20:ae:1f:5b:88:b2:69:3a:9e:ab:
53:17:e8:b6:fb:fe:2d:a7:d8:3c:fa:42:81:ba:1e:
27:b1:dc:3a:ba:c5:43:c4:f7:34:be:42:2b:e8:92:
bc:42:46:37:27:67:13:b4:41:77:82:fb:b0:80:29:
bf:2f:14:80:cd:aa:7c:34:f5:11:61:bb:1d:59:35:
d5:5c:5b:07:56:26:df:50:ec:5d:b8:35:9b:01:5d:
b5:01:47:7d:45:b4:99:17:92:46:c5:7d:9a:ba:34:
c5:c6:1a:31:38:77:40:fa:19:b5:d7:22:b2:e1:3f:
72:d4:cf:ba:12:79:f5:fc:05:a7:9f:b8:bd:7b:1d:
ad:d6:d7:48:c3:80:d1:6c:e4:e3:4d:fc:66:9d:b6:
88:75:7d:52:d6:7d:3e:2b:ea:41:12:ff:f6:b6:26:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:C0:38:EA:62:F3:F1:A4:D2:C0:AC:E1:C9:D8:B4:7E:6C:4F:D2
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ec:52:f5:bb:dc:4f:b8:46:f5:c6:54:12:76:b9:d7:dc:4c:
19:b5:05:b8:91:88:07:35:9d:77:7f:ad:80:de:e6:02:89:e3:
6c:b9:23:cb:26:b6:c0:1f:b8:6f:e4:85:53:4d:87:f4:ee:1d:
85:a0:8c:80:47:40:f9:2a:67:70:12:a9:93:db:c3:da:f2:b8:
db:5b:7e:06:e7:23:04:36:d5:4b:06:0a:9c:e4:df:4f:2a:9e:
e6:db:f6:c7:21:e7:e7:21:26:cf:ca:81:e3:80:a5:55:5c:83:
23:dd:f5:72:75:8b:63:63:65:e4:ed:61:04:df:c8:52:ac:de:
d5:db:f1:f8:42:39:f3:d1:85:7a:18:b7:ef:ed:c0:0e:5e:4f:
f8:fe:c8:19:cf:08:78:4b:76:59:cf:74:93:4d:8e:6b:86:1d:
6d:53:8e:01:fd:4d:45:dc:b8:fe:dd:62:72:8e:be:b2:ff:55:
39:57:42:cb:07:87:dc:81:7b:96:3a:95:91:7d:95:78:45:11:
5f:bc:df:a3:df:c4:be:8b:96:b4:3d:8c:a4:5c:e6:04:ec:9d:
3a:31:f4:73:11:6e:2d:90:89:65:0c:ae:71:18:bf:d7:2b:7b:
68:84:8a:8f:9a:4f:78:03:43:61:b7:86:c4:c4:85:71:aa:2a:
a5:9b:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:43 2025 by rpki-client