
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: vJjp4XcytFdKwAR09CpMAQf0U+iR+URLqHeBK7Xvjtc=
Subject key identifier: 75:FE:AF:55:7A:6D:66:05:4C:CE:63:1C:E6:19:E9:09:97:26:C9:B3
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019A1B7528994949793F684F3D269CAD4455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 170B
Signing time: Sat 25 Oct 2025 13:00:54 +0000
Manifest this update: Sat 25 Oct 2025 13:00:54 +0000
Manifest next update: Sun 26 Oct 2025 13:00:54 +0000
Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=)
2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=)
3: Ew5F5AGBJsYmYSBOTzLn8emIPt4.roa (hash: cSAJagq5Djw72JJ+fQ3PJbaQWXRjfxPvkGqzSGEtOiQ=)
4: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=)
5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=)
6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=)
7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: wlgOILUEKuMa+1sFrQ2bCYaLxzQKqR4M2+ddBD80wt8=)
8: qWZ64G_gV6r1a1VTWhYwuR9ilIk.roa (hash: SNBGanOggO8FdGYV/GuiVAQ6b34zKk2VTZJhKLFl+04=)
9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=)
10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:75:28:99:49:49:79:3f:68:4f:3d:26:9c:ad:44:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Oct 25 13:00:54 2025 GMT
Not After : Oct 26 13:00:54 2025 GMT
Subject: CN=75feaf557a6d66054cce631ce619e9099726c9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:56:3a:85:83:4e:6d:2d:d4:df:39:04:07:
5a:6c:d1:a3:ba:d2:b0:6a:47:ab:51:b1:99:73:e4:
94:38:5e:5b:39:af:16:d3:2a:e3:78:e5:1e:37:b4:
bf:10:4a:06:c3:2e:f5:43:ba:9a:9f:46:2b:e3:ab:
d0:bd:bc:3c:5e:07:eb:14:e5:39:1f:72:0b:a4:fe:
7d:3e:37:18:10:39:c2:1e:bf:fe:e7:e3:19:f7:b4:
ea:9b:50:7e:22:28:c0:f6:d5:86:24:83:02:7c:c7:
37:5f:dd:19:2b:2c:21:ac:61:52:fd:8f:a2:7e:84:
03:9a:4b:b8:47:4b:23:8e:1d:a5:d4:60:fb:da:4b:
ef:9d:09:c2:ad:39:3f:1e:ab:e5:d2:21:a6:a0:e2:
c9:fd:57:33:b8:e4:e1:44:e7:01:ac:fe:95:ef:ae:
af:cf:35:27:ca:07:10:15:e5:b8:48:b4:16:91:8b:
92:f5:1d:ae:b1:75:07:9a:af:97:26:4f:9b:ed:70:
66:63:3a:67:71:e2:86:56:52:2c:15:00:0e:f9:e3:
6b:b8:67:8b:51:b8:82:0e:3e:52:07:30:ab:64:ba:
42:ef:cb:39:52:43:f5:a2:17:8f:72:c5:c0:4c:d6:
1f:e2:b4:ba:76:37:b4:72:8c:09:a6:d7:f3:9f:00:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:AF:55:7A:6D:66:05:4C:CE:63:1C:E6:19:E9:09:97:26:C9:B3
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:49:eb:33:57:d9:4f:61:3e:f1:eb:6b:c6:a9:54:f8:b8:7d:
c9:58:c1:4e:8b:45:c9:4d:01:6e:9e:30:db:1f:69:80:a7:29:
ff:32:6d:68:15:cd:7b:ee:c6:ac:53:29:31:ee:54:07:41:97:
69:cb:ea:4c:da:f0:f8:b3:4b:75:6d:c1:fe:e2:35:59:83:75:
81:3d:44:e8:49:7d:89:1a:51:30:8c:b8:2b:27:27:1e:67:f9:
30:95:91:ca:b8:0e:b9:f5:79:9c:c0:b8:34:a9:34:2d:e7:e0:
a4:a0:0b:0a:5c:b5:39:64:ac:cc:36:3a:47:09:25:02:48:d5:
2b:5e:13:ba:57:0b:3b:be:a5:6c:5a:a6:fc:3e:c8:ce:c9:37:
b1:1f:ab:b1:cb:d1:42:81:ac:32:84:df:82:7a:4a:4e:ff:bc:
32:54:a9:9a:0f:0e:f0:c0:c8:76:3d:31:f5:cf:e5:07:ef:70:
af:8c:48:b6:31:d4:35:99:e5:2f:e7:28:c5:b9:8b:f3:d0:3e:
53:52:ba:ea:a6:d7:57:a5:74:7d:6d:59:f4:d5:11:6d:25:49:
33:cd:a4:94:f9:75:ec:db:84:92:db:1f:05:b9:32:c3:e2:ea:
ce:6e:4d:45:b1:f4:e8:6d:5e:2d:56:76:a9:fa:27:59:59:1e:
63:c5:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:33:22 2025 by rpki-client