Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: y2q9kGf7MfTo6zmdrSkd+RaYrSAWuaPLj/51rp4Zdv4=
Subject key identifier: 56:FF:55:B6:24:DF:9D:D7:BA:FC:95:62:BD:F9:B5:8E:69:B5:3C:26
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019A4EF5B6F6CFB4FEDE01B073E5E2FF5802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:57 +0000
Manifest this update: Tue 04 Nov 2025 13:01:57 +0000
Manifest next update: Wed 05 Nov 2025 13:01:57 +0000
Files and hashes: 1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: MpdOh03OaZPPJNHUIBJAG6p60xxcC9fcy41RAX2o+uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b6:f6:cf:b4:fe:de:01:b0:73:e5:e2:ff:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Nov 4 13:01:57 2025 GMT
Not After : Nov 5 13:01:57 2025 GMT
Subject: CN=56ff55b624df9dd7bafc9562bdf9b58e69b53c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:18:b8:f7:64:8c:d9:27:7f:15:18:19:6c:
63:5c:8d:11:6b:e0:01:b7:b6:5a:aa:0c:48:59:95:
d4:87:97:12:1d:ec:b1:56:16:9b:cc:b8:92:d7:bc:
77:ab:3d:6d:30:94:c1:2b:a4:64:5a:e4:c7:39:38:
ba:aa:39:85:b0:92:27:9e:c8:a6:8f:66:44:76:1b:
67:91:ad:7d:b9:d8:b9:32:0a:a7:cb:31:58:7c:b9:
6d:dd:1e:b7:a3:ec:08:3a:b2:f8:ab:4a:48:0b:50:
8e:8f:47:ac:17:67:68:33:b0:1b:80:d0:5d:5e:b9:
23:02:35:2b:d2:63:66:b1:d5:ac:a2:31:19:de:44:
9f:21:b7:f7:38:0b:3a:b3:5e:ea:7c:38:7d:60:87:
7a:cf:de:14:b3:b6:fb:16:8e:3a:b3:ff:bd:3a:29:
14:53:d3:ab:68:87:c7:61:18:d0:a4:97:1b:d3:37:
ae:e2:fa:d6:ad:f5:0c:31:91:29:07:ad:6e:5a:6c:
1f:18:e1:09:02:37:0f:99:86:42:d2:19:f2:4b:ec:
2d:b3:10:82:d7:b4:fb:c3:f1:03:91:e3:8e:75:3b:
48:e0:32:92:2f:06:98:d0:19:c8:53:62:63:c2:5a:
a4:12:b8:5b:2a:ae:8b:ef:6b:ad:67:73:be:17:8e:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FF:55:B6:24:DF:9D:D7:BA:FC:95:62:BD:F9:B5:8E:69:B5:3C:26
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:f2:b3:64:0a:53:34:5a:72:bb:41:1b:4d:02:0d:37:6a:46:
43:da:26:e5:bd:4c:13:d6:d6:fb:32:e4:38:e0:5d:fb:f3:ab:
b7:a0:bd:ca:0c:1e:64:0d:61:0b:9b:1b:94:6f:78:bf:7f:0a:
8c:30:5c:c6:06:bc:6d:a7:d0:b8:9c:7f:32:f7:c8:22:32:bd:
98:80:8c:cc:bc:a7:f5:44:c0:7c:b2:fc:df:fa:0c:84:de:77:
8b:91:08:9c:54:2b:0f:fb:d8:2d:35:1b:d3:04:d8:82:a1:4a:
b0:f2:3d:d2:e2:12:94:9b:99:10:37:41:8f:34:c4:8c:2d:e4:
56:30:bf:5a:5b:1c:29:f1:4c:c9:bf:72:d5:a9:8d:b0:73:75:
2d:08:ed:36:b5:35:8e:48:8d:fa:4a:49:85:7e:54:7d:37:d1:
d8:32:b2:85:74:14:d2:fc:0b:cc:cb:4a:07:e0:f5:d0:64:7c:
6a:49:04:27:18:b9:47:28:4a:50:06:dc:10:a5:3d:2b:78:be:
a1:1f:07:85:9a:cf:be:72:0f:ca:99:c7:c6:16:a2:23:13:73:
0c:dd:bb:a2:29:5e:0a:eb:7a:6e:5e:90:18:3c:ae:52:cc:71:
78:18:37:e3:d7:64:01:df:4a:53:cc:60:49:21:f5:50:6e:2f:
ba:1c:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:15 2025 by rpki-client