Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: 49QnbiiNgbSli56cp02UkTtRWy0EsOIXYGhAmWEjDzc=
Subject key identifier: 1C:1B:40:38:92:EE:2E:3D:D5:7B:95:19:86:DF:9E:35:B5:89:B2:3D
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 019A71EEC5B7398D43AC30DAA03B1C47BE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 096D
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: XDl38s1mFR9yyUzVuSHa1Ghd0Y/Rhgu+wUcpodsRTMo=)
2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c5:b7:39:8d:43:ac:30:da:a0:3b:1c:47:be:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=1c1b403892ee2e3dd57b951986df9e35b589b23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c5:4d:43:7d:c1:0f:f1:f2:d7:9b:b0:96:59:
2a:ef:55:86:15:aa:8f:ee:f5:dd:51:54:49:3d:69:
f0:46:08:68:c6:7f:b6:82:c3:95:7e:f7:23:bb:e9:
61:38:eb:cd:a5:8f:ce:9f:a7:62:72:c5:84:d6:9e:
26:63:85:de:f2:86:a4:fd:aa:c7:eb:5f:9f:f6:a2:
55:23:56:48:8f:14:cd:28:c1:f8:45:fd:71:cb:5e:
32:c4:85:80:f4:83:42:c1:78:56:65:16:53:93:80:
43:89:bf:ed:02:aa:11:4c:7a:f4:07:0d:53:ac:70:
5c:7a:78:be:26:08:df:4a:d2:19:93:91:ee:17:5d:
a2:3c:7f:33:38:d0:fd:8e:f5:90:87:1b:75:41:e6:
3c:77:45:65:19:53:35:42:d6:db:a5:8b:39:ea:91:
4b:b9:1b:1e:7a:7d:63:9f:f3:7e:d0:66:22:fc:ac:
9b:c3:53:f2:c4:5c:59:b7:0f:c8:fc:da:04:72:0d:
b4:30:00:db:0f:f9:5c:a2:9c:6e:bf:d5:7f:b7:e0:
c8:07:b6:d8:e5:25:f0:c8:31:e4:b8:c7:a1:6e:61:
e7:3e:07:75:c1:19:1d:37:56:eb:9a:0d:c7:0c:79:
30:6e:0c:ef:b2:86:11:c4:38:f3:c4:eb:7d:85:d6:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1B:40:38:92:EE:2E:3D:D5:7B:95:19:86:DF:9E:35:B5:89:B2:3D
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:73:71:84:6b:b8:02:7b:41:5d:39:ab:00:63:bb:99:93:89:
19:0a:9c:ae:04:bc:9f:6b:6b:1b:f8:e3:13:80:70:0c:bb:11:
5e:a5:c6:9a:eb:af:a1:fc:34:1f:c5:69:6a:6f:a1:1a:16:05:
7c:85:c0:59:38:71:86:cd:04:33:c4:81:f1:dc:27:9f:ee:06:
a7:23:a1:6c:af:23:15:fd:79:70:6b:b6:e2:5f:c3:e3:cb:b1:
b6:51:3e:c8:16:ac:c1:b7:71:68:14:a1:0f:91:94:b2:4e:e1:
b1:63:5e:ab:39:28:71:63:2e:30:b3:02:b5:d2:f2:e6:e1:bc:
30:f9:55:56:78:de:e1:2f:66:3a:fb:3b:22:f0:e5:5a:77:93:
ef:eb:ff:c5:12:7a:39:c8:f8:22:5e:aa:91:c5:b5:de:b8:d1:
50:19:00:f6:3e:30:a8:92:62:96:48:02:08:63:12:c5:97:4f:
01:00:04:30:0f:21:be:c6:ac:03:73:d4:b0:0e:fe:ee:4c:f3:
df:6a:bf:b6:d6:a9:f1:f2:a2:b6:d8:ad:52:e6:ef:0b:4e:dd:
85:7b:8b:1d:d2:51:ba:ef:0a:9f:39:44:16:e8:3b:eb:15:15:
85:31:9d:4c:fe:a6:3e:00:f9:b4:54:34:9b:d8:a1:fa:cf:20:
28:38:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client