Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier: qVIH7LclNyyAcuCiAg8q05jiV9eB26RPAlY2aS407YM=
Subject key identifier: C2:9A:F5:93:27:53:B9:7B:B2:E0:8B:2F:10:8D:AD:9E:4A:1B:5C:77
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 019A71135C7A87ABB3D4DFFDFF87662A8796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number: 0949
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: APcH1ZyR5Y8ptUj6ySnE8mPkJNTIWRwzm7HKz7O14UM=)
2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5c:7a:87:ab:b3:d4:df:fd:ff:87:66:2a:87:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=c29af5932753b97bb2e08b2f108dad9e4a1b5c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:0d:c2:c8:56:13:70:0a:ef:4e:be:a5:5b:
05:cf:68:54:06:1b:e7:87:2c:d3:e1:00:c9:5a:77:
34:15:38:b9:36:40:b8:30:cc:4f:9d:cd:31:76:ba:
c0:9e:f9:3f:27:3d:02:62:40:4a:db:a7:82:f1:8d:
7b:0f:a7:9f:b1:4d:b2:29:c7:03:69:fa:61:69:b0:
6d:d9:84:5c:9d:1f:c4:1d:26:45:57:c9:52:1d:92:
79:8e:7a:98:a1:6c:02:c0:e7:04:0a:04:15:ad:d9:
be:c5:ae:c4:5d:00:c6:d8:a6:4e:f8:e4:5c:ce:2f:
70:f1:53:3e:d9:7d:e3:84:39:6e:96:26:c7:41:62:
f4:08:bd:63:0f:ef:55:cd:2f:15:bb:f7:7d:f2:f6:
ea:e5:a6:38:35:77:01:e9:c7:0c:da:be:64:5d:36:
52:2c:86:27:94:29:bb:84:8c:0e:db:33:10:27:18:
91:7c:65:d2:49:ef:ce:17:3a:5a:d4:cd:4c:96:36:
c9:0e:00:5e:bd:49:ed:33:8c:47:00:ed:0f:93:b1:
6f:c0:fd:3f:d5:aa:25:6d:4d:f9:7d:82:a2:88:7f:
fc:d1:e4:15:9c:a6:e0:70:7e:10:6b:5d:5a:6f:8e:
59:d4:ac:b5:30:f1:0a:4c:ae:6b:7f:3f:e2:2d:83:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9A:F5:93:27:53:B9:7B:B2:E0:8B:2F:10:8D:AD:9E:4A:1B:5C:77
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2a:96:77:55:a1:05:36:38:fc:6f:90:20:3c:b1:9a:da:8f:
78:a7:ed:aa:58:ba:1a:02:ef:45:5c:d7:02:85:ac:33:01:01:
da:0b:6a:6d:e5:ae:63:34:d4:f0:a5:dc:e4:da:c7:2e:b6:88:
81:8a:4d:e2:71:a1:ef:f2:d8:71:f3:00:1b:2d:d3:35:80:9f:
44:51:a5:f6:ee:f0:08:d0:36:04:bb:48:c7:d8:4d:fd:1a:c5:
43:c8:13:04:6f:aa:49:8a:71:b5:ce:65:33:9e:e1:8a:05:f1:
eb:a9:c1:d1:b7:39:2d:77:da:55:3f:43:ba:08:54:e0:40:b2:
21:aa:e8:19:24:b4:0a:e1:8a:c2:8f:36:c6:bf:e3:d5:02:97:
ea:02:5e:ec:8b:d8:00:c6:57:f9:ff:1d:44:57:5f:cd:ee:f0:
aa:7e:1d:1e:f5:2d:f0:34:74:ef:c5:23:6d:cb:1a:eb:00:32:
a1:8f:15:58:4b:63:7d:bd:ff:f2:15:6d:17:64:65:c8:9d:0e:
55:1b:60:65:5c:87:fd:23:dd:c8:84:2a:c5:dc:75:43:52:7c:
cf:64:9c:44:4e:68:93:1f:b0:70:57:fc:ca:27:3f:41:30:bf:
58:de:20:08:19:ff:c5:3e:a6:d2:6d:f6:c6:b3:8e:52:3b:8c:
35:bc:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:20 2025 by rpki-client