Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
File: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft (raw, json)
Hash identifier: u7THfXIVvqH7IBBY285HIuUu9RRkONAqbP+N54v4F5Y=
Subject key identifier: F6:AD:CA:43:93:BB:48:F6:70:68:B1:EA:91:9D:98:48:94:5F:D3:B3
Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Certificate issuer: /CN=31533690ab184f433f1760f3feaa184c443e70f9
Certificate serial: 019A1D62F3C523DB5319D967EFD52ECBE241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
Manifest number: 06A1
Signing time: Sat 25 Oct 2025 22:00:15 +0000
Manifest this update: Sat 25 Oct 2025 22:00:15 +0000
Manifest next update: Sun 26 Oct 2025 22:00:15 +0000
Files and hashes: 1: 4H5f4KMuGUdiq20v6X15FIvWPCg.roa (hash: 1oOS4e7SC894+hZZBmJUAEBGgPQQh1AJU8M/EeMAfmg=)
2: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl (hash: lKC8AlPyYEF8HWPs5EnrFVM/POrBG1KLMtc5ANYv6to=)
3: oWYw73o0XVlV6OpLKF4dF1YQeis.roa (hash: 5U7LFltASNwuXUP6x/MbRpxou9KC14KfkL67az3+D4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:62:f3:c5:23:db:53:19:d9:67:ef:d5:2e:cb:e2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9
Validity
Not Before: Oct 25 22:00:15 2025 GMT
Not After : Oct 26 22:00:15 2025 GMT
Subject: CN=f6adca4393bb48f67068b1ea919d9848945fd3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:00:ad:d6:9d:e0:a9:8d:52:79:09:51:02:
e7:b0:2e:55:52:7f:fa:65:db:34:8b:8e:c7:50:05:
a2:d8:e5:69:0d:2b:e5:42:73:e6:0e:a1:98:c7:06:
f7:f1:f6:f0:cc:53:f3:08:16:5b:00:aa:3b:b9:eb:
e5:d0:f3:a5:d4:b8:f1:38:50:70:af:90:c8:e5:d1:
1f:11:a9:d5:bf:be:86:7d:a7:95:64:22:d0:f1:e3:
1f:17:a2:a6:1e:a1:15:80:06:71:de:59:41:c9:b2:
bc:42:3d:f3:a2:11:18:39:84:b1:39:4a:0b:08:ed:
1e:fb:a8:1f:f0:8e:c2:f4:39:79:73:8d:de:61:25:
99:3f:ac:bb:35:17:19:2d:8b:72:cf:08:ed:18:c6:
f7:4b:25:1d:91:12:4b:a7:28:a0:4a:a1:04:47:71:
59:dd:8a:80:34:75:97:65:dd:15:d9:4e:69:e8:ad:
25:a0:69:e8:1b:1a:b7:27:46:02:91:71:2d:59:87:
7f:d9:a1:ac:ac:5a:b7:13:ae:e2:69:83:47:a8:dd:
87:43:36:ed:14:45:73:dc:a5:49:8f:ca:59:8e:e5:
92:e5:ed:2d:a3:4e:4d:85:7b:0f:d0:c1:e8:01:b9:
fe:8b:36:34:04:8d:cd:b8:dc:9e:7b:d8:a8:a1:57:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AD:CA:43:93:BB:48:F6:70:68:B1:EA:91:9D:98:48:94:5F:D3:B3
X509v3 Authority Key Identifier:
keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:99:0b:82:52:62:bc:32:ab:73:03:a1:93:d8:d8:e0:c2:67:
d0:b5:46:8e:dc:db:5c:b7:63:1c:3b:aa:03:68:7f:3f:2f:b6:
20:99:3e:9b:83:88:88:c5:08:34:0c:37:51:c6:84:b7:d5:38:
d9:be:86:a0:a6:d9:f6:1d:c9:fc:ee:ac:2d:eb:c8:d5:c5:58:
04:cb:d4:c3:3c:9a:19:95:5e:fe:60:25:e2:c9:84:de:93:fc:
e1:b3:d4:c8:c9:97:c2:ad:7d:4e:4e:13:11:3b:96:be:f8:52:
a4:f3:34:79:3f:f1:d3:36:ab:0a:58:35:03:f9:1a:60:1a:96:
0e:ce:dc:29:ac:e3:43:cc:46:1a:ba:c2:f2:c7:ca:dc:82:1e:
da:1d:96:26:dc:06:be:20:a0:f4:79:92:b2:ae:4a:b9:cd:21:
8c:ef:b4:ce:bb:ac:2c:a2:21:70:75:75:39:64:49:54:4f:ed:
19:02:93:b8:f5:1c:49:53:44:d5:8e:7d:17:04:6d:1f:c7:3a:
ed:7e:bf:08:a6:c8:99:3f:dc:18:16:e1:7e:62:20:23:0d:29:
96:f7:3b:dc:9d:65:5f:e9:42:3d:26:7f:ce:5f:87:91:1e:f1:
1f:6d:0b:8e:dc:d7:18:20:8d:ae:3a:eb:4e:23:da:b3:4c:a4:
f2:38:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:07:11 2025 by rpki-client