Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File: cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier: EkM+jmL2XX7bH2hrfMVbFD65PILZu0Sbpkr6kUq0i2o=
Subject key identifier: B1:88:0F:09:B4:5E:14:5A:FD:73:C9:B6:5D:1F:8D:A6:DC:45:47:9C
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial: 019A70A56C70391B6B2CFB7E1B46AC8DDBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number: 0BB3
Signing time: Tue 11 Nov 2025 02:01:20 +0000
Manifest this update: Tue 11 Nov 2025 02:01:20 +0000
Manifest next update: Wed 12 Nov 2025 02:01:20 +0000
Files and hashes: 1: 8anvDKitwmoS5b1R9CoiYAIvV4s.roa (hash: sK8EhnVxeI2sQ1OgOLzF1LkVF8lOtqG5DcBtonQ6uEM=)
2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: dn+sQ9iwx2zK3nmWBQM0X9oKKJEv/cJ+Vv46aN8tlIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6c:70:39:1b:6b:2c:fb:7e:1b:46:ac:8d:db:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Validity
Not Before: Nov 11 02:01:20 2025 GMT
Not After : Nov 12 02:01:20 2025 GMT
Subject: CN=b1880f09b45e145afd73c9b65d1f8da6dc45479c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:d9:45:37:c1:f4:23:bb:4f:54:ff:86:a6:
b8:57:2a:23:8b:8c:ec:ca:d5:05:8f:52:6d:13:fc:
1e:eb:04:c3:87:08:1e:79:c3:72:b5:23:1b:85:98:
6e:2b:f8:e3:77:f2:5e:71:a9:15:6c:e3:78:b4:11:
b0:ad:7b:47:92:9c:cd:8c:11:26:1b:22:cf:54:e9:
e1:a6:1a:ed:7a:41:ca:ec:bd:ce:0d:4a:22:ad:57:
90:6b:d3:2a:93:66:90:ca:9c:bd:44:6f:93:f4:93:
43:af:7d:7e:96:61:fc:6f:85:35:a8:ce:2e:23:9f:
14:ef:e4:84:ae:b9:96:80:f0:85:1e:d1:bd:bd:5d:
1b:b5:32:0c:e7:b7:ad:3a:33:94:c2:5c:bf:07:a4:
76:92:cf:d5:61:72:4f:1a:69:bf:6e:2a:ac:61:ce:
db:4d:78:ad:b9:fd:ac:32:81:6a:ea:d4:e5:18:f2:
f4:64:4e:97:9c:40:d2:61:83:dd:a7:df:60:33:5e:
a1:90:46:ff:64:28:20:34:05:e3:a9:0a:4d:9e:ed:
1d:00:c7:1b:94:06:2d:49:85:27:5d:74:03:a3:2d:
6c:97:86:86:ae:dc:c1:9f:0a:20:18:c6:a4:24:7b:
0e:29:f8:17:20:c4:ff:c7:60:be:0d:34:be:5d:89:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:88:0F:09:B4:5E:14:5A:FD:73:C9:B6:5D:1F:8D:A6:DC:45:47:9C
X509v3 Authority Key Identifier:
keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:47:b7:68:19:2d:f2:d6:bd:f4:3a:60:79:93:ab:ef:16:
90:1c:15:05:34:21:ca:d3:7b:6f:0c:1a:dd:9d:9a:f5:88:bf:
d8:25:5e:d5:52:54:d8:20:c5:ad:f1:5d:69:c2:4d:53:8d:fa:
21:57:9f:60:7c:88:1f:7f:70:6a:b9:d0:3d:b8:e8:46:a2:56:
95:e5:7f:89:64:6e:40:c2:6d:16:89:06:1b:45:53:e8:f5:00:
c8:12:89:b7:d8:b6:bc:70:18:10:ab:db:a7:81:f5:92:21:71:
96:61:7b:cd:54:ca:f9:da:09:8c:e7:d3:5b:46:a6:ff:0e:ad:
6c:d3:1d:50:ee:9a:39:b3:ce:92:44:1d:1b:bb:f5:74:53:50:
af:51:fd:0a:60:22:eb:ab:64:09:d6:72:ab:4c:44:f3:a2:3d:
e7:d1:16:af:69:a9:b9:c1:6c:d5:eb:cb:ef:16:4d:41:dc:3c:
ad:75:c9:3c:9b:05:22:c7:a6:bc:db:70:4e:fc:e8:b6:1f:3e:
90:10:c9:bb:42:22:94:5e:2f:7e:78:f3:85:c6:bd:0d:e5:f9:
2d:8a:ad:5a:ee:1d:6f:54:32:d4:33:fb:c5:e5:cb:67:10:80:
50:c0:14:83:57:5d:c2:2d:e0:dd:87:bd:92:44:e6:a8:0e:a4:
66:05:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:31 2025 by rpki-client