Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: QNXq0SqhL2kQ94F5+gpPYQ//M1Yf37xps/mT6wtWZAo=
Subject key identifier: 89:5D:F9:97:8D:A4:7B:7D:FA:E2:D9:D7:EB:8A:FB:E0:B8:63:C0:F4
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 019A7112A37EE95EC91737EE00A14E683D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: Vi3ohiIJJCaDA7zgm3wv2xw1G+7PGv4ZPh6YpVWWNzE=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a3:7e:e9:5e:c9:17:37:ee:00:a1:4e:68:3d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=895df9978da47b7dfae2d9d7eb8afbe0b863c0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:19:99:f2:48:26:2e:40:05:7a:d9:f9:17:
53:ed:e8:87:5f:f0:eb:16:70:b1:1b:e3:95:fc:c5:
ad:2b:24:1e:b0:42:f6:be:a8:14:9b:18:c9:cd:ad:
4d:2a:73:75:64:81:41:c7:04:9a:4b:30:af:8d:0b:
34:61:52:54:06:bb:04:1e:68:5c:0e:b5:db:bd:12:
ee:41:e0:a0:00:a4:f4:b3:ed:0f:a0:8a:92:55:ba:
64:02:5b:23:90:de:1c:5f:c1:ee:28:eb:df:e9:bd:
cd:aa:63:ed:59:36:45:17:94:fb:e7:81:d5:35:7a:
de:4f:27:1d:d3:b3:6a:93:35:93:e1:a3:0a:d1:de:
f6:16:d7:d8:ac:2d:42:ea:6d:c3:26:e5:ba:d4:7a:
46:bc:8e:da:65:fe:44:d7:eb:6a:40:26:40:eb:74:
2d:ce:49:86:bf:7b:6e:44:b8:92:ff:f6:85:d5:d3:
9c:e2:58:a3:33:87:10:1f:bd:09:3c:06:52:51:ae:
e8:7f:97:2d:b8:69:ec:97:74:74:d3:bd:ed:25:70:
1e:45:4b:a0:ec:ed:b1:9a:89:a6:0c:d8:5c:e7:d9:
59:8e:52:79:19:64:45:0f:1b:5c:be:22:bb:28:f5:
72:a3:93:4a:dd:7d:0b:11:ce:49:fa:a4:2e:77:19:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:F9:97:8D:A4:7B:7D:FA:E2:D9:D7:EB:8A:FB:E0:B8:63:C0:F4
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:63:01:d0:e1:c4:5d:3a:29:ed:55:95:cb:77:47:3f:47:10:
a1:7e:22:88:d5:a9:88:f1:d1:08:23:97:bd:49:7e:05:d3:08:
49:9e:52:3d:0b:c4:c4:a3:29:cb:0c:0d:81:39:3a:e6:b7:77:
83:a9:ca:e5:22:30:ee:72:81:dc:4e:02:57:f8:48:3d:95:8f:
30:59:de:ae:bb:5b:ba:cc:58:8d:69:29:29:20:2d:51:d5:1e:
e6:cc:56:d8:9e:cf:a0:67:28:4b:a2:35:e4:74:83:6f:62:9a:
93:92:b7:c7:ad:d1:8b:0f:26:a9:38:a1:4d:b8:bb:8a:6d:2a:
e3:38:b9:37:b9:85:fe:13:e3:67:5c:7d:48:92:14:6e:7b:7f:
47:47:22:08:aa:36:96:b4:7b:23:89:f1:70:e9:8a:4e:fe:a5:
76:bb:e3:e4:c6:6f:1c:6d:46:67:a3:cc:e5:79:d4:14:d0:49:
33:34:8d:21:71:7d:fe:e8:89:4f:a9:75:d1:19:d5:15:76:ae:
14:83:54:ae:5a:35:16:17:bd:e5:59:d6:a9:09:ed:36:96:69:
d3:9c:52:dd:f8:2d:45:6a:e6:5b:bc:65:91:cf:ca:29:46:df:
3b:9f:65:d5:0d:f5:18:9a:13:d1:d2:e3:82:80:97:4f:74:bf:
82:2e:2b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:57 2025 by rpki-client