
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
File: MobhKf8m2K3BBxSpHKU9gAsG_iU.mft (raw, json)
Hash identifier: WDySpevkLXjU5lJtXkGRDJSVLwsX5/OgFvTMJYhZX7k=
Subject key identifier: 52:77:4C:1C:0D:F5:C3:31:00:A7:53:86:D4:34:B1:4B:8E:A6:6C:96
Authority key identifier: 32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
Certificate issuer: /CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Certificate serial: 019A73017FAAB0BF62BBC784EAEC416C332B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
Manifest number: 06F4
Signing time: Tue 11 Nov 2025 13:01:09 +0000
Manifest this update: Tue 11 Nov 2025 13:01:09 +0000
Manifest next update: Wed 12 Nov 2025 13:01:09 +0000
Files and hashes: 1: MobhKf8m2K3BBxSpHKU9gAsG_iU.crl (hash: a67FRLeOCsoFlQMTN5VPFvQ0I8VomwqHWKD8582Tuek=)
2: ztFr_-g0BQXlSd44UjlTquqKHlw.roa (hash: ICOrnGo6DEP/QUKA6WPeJcvKMnXrNs1C20UGRkpbiEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:7f:aa:b0:bf:62:bb:c7:84:ea:ec:41:6c:33:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Validity
Not Before: Nov 11 13:01:09 2025 GMT
Not After : Nov 12 13:01:09 2025 GMT
Subject: CN=52774c1c0df5c33100a75386d434b14b8ea66c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:df:62:2f:3e:a5:6e:35:fd:94:d6:de:c9:
89:a5:b5:3e:7f:7c:7d:86:a6:1a:73:55:d1:23:c0:
d6:57:a7:29:eb:22:b8:3f:7e:77:fe:ba:45:96:4f:
0d:e2:54:a3:9d:bf:e8:f1:d3:a0:f2:8c:86:72:f9:
75:86:93:00:77:37:e8:ba:8d:ab:81:9d:fe:33:19:
ef:1a:da:21:2f:30:0e:ab:28:83:41:02:3d:4b:3a:
7a:6e:fc:b7:ce:a1:0c:bb:5f:88:9b:cc:f7:64:d2:
86:ce:c6:70:20:d4:15:0a:d4:6a:6e:21:0f:a7:d5:
5b:e2:19:5a:f9:12:f4:0d:c8:95:d2:93:23:97:69:
33:23:c3:b9:f9:56:bb:4d:27:d5:c1:22:b8:8d:7b:
07:c1:be:e0:93:fe:28:94:70:27:11:35:28:64:a6:
21:ab:0f:6a:2e:06:4c:d7:30:53:2a:36:be:d5:f5:
c7:37:04:ae:85:73:d7:45:15:fc:d2:43:c9:d5:7b:
85:2a:1b:85:11:c5:27:fe:ef:69:ef:bb:7e:ad:26:
f0:ef:06:28:9f:74:60:1a:e4:80:a3:9c:24:5f:8c:
f7:e9:b8:2c:53:b5:9a:84:6b:d1:f7:59:bc:eb:5f:
e8:7f:d8:13:ea:2f:6c:5a:91:57:25:6c:70:b1:23:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:77:4C:1C:0D:F5:C3:31:00:A7:53:86:D4:34:B1:4B:8E:A6:6C:96
X509v3 Authority Key Identifier:
keyid:32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:99:7c:f9:63:ef:5b:9e:2a:2c:65:f1:09:92:61:c5:b6:6d:
79:ab:f6:d4:dc:67:e7:41:ed:ef:bd:50:ae:f6:5f:ab:cb:2e:
dc:3a:1e:91:cd:1c:a4:f7:26:04:66:86:a2:a8:37:31:61:37:
f5:51:35:32:31:b2:2f:57:56:c5:b9:39:35:c3:89:e0:e6:f2:
be:e8:34:c3:1c:3b:c5:64:f7:41:12:03:46:21:b9:c4:80:12:
5d:d6:72:c4:94:c5:50:82:80:ee:a9:45:67:ec:1b:63:d3:b9:
65:a4:d6:09:e2:e1:9a:3c:97:ac:42:54:33:74:d2:70:bf:38:
d1:c3:9b:25:82:71:fa:de:ff:62:47:0d:d1:dd:e1:68:c0:b9:
15:94:4e:cb:c3:5d:4d:6a:05:f7:d5:d0:6f:b5:f3:92:61:91:
df:05:7d:ac:67:e9:9f:e1:09:19:db:af:a0:2b:00:26:c9:5b:
db:b6:39:d0:f5:39:92:ce:76:af:8e:91:a5:2d:78:7f:94:8b:
81:8d:96:ea:a8:18:9f:a7:15:80:bb:90:ea:c0:30:b5:79:70:
fa:35:1e:3c:37:e0:67:7e:5a:c1:fd:8c:ab:7b:be:56:eb:17:
1c:40:64:19:f5:f8:39:51:97:b9:3f:79:57:31:fb:35:49:86:
15:2b:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:16 2025 by rpki-client