Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json)
Hash identifier: MoRlWLAhF2Z4AowaeJzwz7BVxOuVxO7NVqIxe/NP0eg=
Subject key identifier: E1:5D:71:A6:D9:09:A9:A5:72:B9:93:34:50:6E:E1:69:A5:C6:FE:4E
Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Certificate serial: 019A70DC44130CF57FE4B4F71BA4D4E40800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
Manifest number: 0563
Signing time: Tue 11 Nov 2025 03:01:14 +0000
Manifest this update: Tue 11 Nov 2025 03:01:14 +0000
Manifest next update: Wed 12 Nov 2025 03:01:14 +0000
Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: XOmylTzGDYS2RoVVyuo97t72PjS5dyQ0oBXUrp0FnDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:44:13:0c:f5:7f:e4:b4:f7:1b:a4:d4:e4:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Validity
Not Before: Nov 11 03:01:14 2025 GMT
Not After : Nov 12 03:01:14 2025 GMT
Subject: CN=e15d71a6d909a9a572b99334506ee169a5c6fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:14:e7:e3:ed:21:e2:d5:82:d0:a4:01:b3:
c1:ec:51:84:4c:56:1b:66:88:cd:59:42:c2:a4:ed:
29:c6:b3:d8:a9:06:8a:48:c8:df:4c:97:c2:e1:f8:
a3:64:9f:e5:31:72:a9:76:4e:5e:92:44:d0:65:f5:
93:f1:7e:f1:6e:fa:f0:15:f5:83:0b:3f:67:cd:e7:
6d:41:f0:5e:fb:04:38:07:98:c2:3c:6e:35:62:09:
5e:5e:8d:67:37:eb:3e:16:34:e9:02:08:b2:14:4f:
80:8e:46:1c:f7:da:ab:94:f0:bc:03:bb:3a:82:87:
11:54:88:aa:fa:e5:71:4b:55:f7:08:84:85:c5:c7:
89:d1:05:74:46:cc:d5:c4:85:f9:b7:0a:d7:67:be:
23:d8:e8:a7:a8:e7:76:79:49:09:21:07:9a:e5:47:
28:51:16:20:cc:56:96:68:20:d0:ea:e4:ae:0f:d6:
48:fb:16:8d:76:88:07:e1:54:c3:1b:f9:50:e0:e5:
3d:c2:bd:3a:68:9e:1f:80:ce:58:25:2d:b2:cd:10:
2c:07:76:cf:29:88:e9:8a:59:71:5e:53:76:a1:9c:
3b:6e:f7:46:dd:85:25:c6:b1:69:c0:ba:66:19:9d:
52:76:1a:fc:b4:57:e0:b1:c0:3f:77:bf:87:c7:46:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5D:71:A6:D9:09:A9:A5:72:B9:93:34:50:6E:E1:69:A5:C6:FE:4E
X509v3 Authority Key Identifier:
keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bf:a6:d9:a6:16:ed:c4:4b:80:de:1f:13:c3:15:74:65:8e:
59:2b:15:bf:62:15:28:3f:6b:30:75:ad:8b:c6:12:b1:f5:29:
b8:87:7e:b2:85:f3:3a:4d:43:aa:ea:c2:32:93:2c:fb:fa:69:
9b:62:76:d3:30:d3:ac:eb:94:d7:bd:6b:ec:3d:aa:ad:83:1e:
e1:4d:df:08:39:5c:86:26:2f:a4:74:92:de:13:ad:71:3e:41:
b7:19:92:31:dc:4f:14:9a:82:a7:2e:3b:80:ce:7b:be:d5:72:
e3:b6:4e:aa:ce:d8:78:01:3d:7b:6b:8d:c5:09:4b:b4:94:26:
a4:4c:c3:e3:56:bb:32:62:39:6c:13:7b:22:ba:1a:94:86:a1:
83:8d:8b:fd:6f:2a:68:e9:33:e9:67:37:16:b6:df:e3:b7:c2:
bf:4b:ba:45:10:07:0e:b9:e8:39:6b:cc:6d:b4:fa:0f:34:0e:
c5:9b:6f:58:da:f0:27:af:28:ef:19:6f:f0:af:da:90:eb:ab:
4b:ed:89:64:56:3c:3d:ac:10:59:63:fe:b6:dd:36:f3:4b:3e:
85:9d:fc:bc:ff:2f:43:2f:57:bb:23:65:de:86:70:b4:49:b0:
23:53:f9:45:22:db:e9:fc:45:84:5f:d8:26:b3:37:d2:fe:c1:
e6:08:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:13 2025 by rpki-client