Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: OPnBjGNe25f3azNizdWo6VfE/9GDBPZr0Va3/8K9VTs=
Subject key identifier: 42:8F:D1:99:45:A7:07:32:22:53:A6:B3:AF:0B:EC:ED:F3:E8:0B:09
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 019A515065884838113D7A4C340ACC3497C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 0E82
Signing time: Wed 05 Nov 2025 00:00:14 +0000
Manifest this update: Wed 05 Nov 2025 00:00:14 +0000
Manifest next update: Thu 06 Nov 2025 00:00:14 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: 1NAw+CV+yawGmoLBzDmkPZrgeNRGBZpEoihLVuM0IVs=)
2: penXvalgbMBLZqcx96rUayqK3NQ.roa (hash: vb/Iw29Kb6TCjGenAwHcr/Ra62ZOMD3/iU+HDEP/27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:65:88:48:38:11:3d:7a:4c:34:0a:cc:34:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Nov 5 00:00:14 2025 GMT
Not After : Nov 6 00:00:14 2025 GMT
Subject: CN=428fd19945a707322253a6b3af0becedf3e80b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:ec:98:21:81:7c:76:79:84:c8:e8:7e:c3:
fa:62:aa:17:f4:b3:0f:d9:95:e2:10:8e:f2:09:16:
e2:54:93:71:80:a3:70:27:7d:b5:9a:b3:ff:96:c9:
08:ae:a2:f0:bb:1e:a5:2f:fd:11:57:07:65:60:d2:
e8:33:c5:7f:72:fc:05:76:e9:2a:e0:86:aa:48:ff:
8a:7f:45:fa:11:cb:84:8b:ff:8d:a2:13:6d:1a:04:
ce:fc:81:51:16:44:65:b6:e3:6c:1d:05:cb:f1:57:
53:9a:79:1c:9c:ce:0a:be:8d:79:5b:ed:66:3f:6d:
cf:d2:f2:2c:d5:b9:d6:3c:64:9f:d1:46:0d:19:c6:
15:60:9c:9b:d6:21:dd:c9:1b:be:26:31:0b:73:91:
af:46:d3:cc:9d:cd:ef:e5:c8:33:f8:0a:70:58:b7:
65:6d:45:4e:4e:1b:7a:8e:60:0d:fc:09:5f:84:f5:
2e:c1:4f:37:46:f7:c1:72:cc:ce:11:dc:f9:c0:61:
29:25:97:18:75:82:9a:9b:9f:eb:77:ad:ad:ff:9f:
4c:9e:3c:ad:98:cf:09:2e:8d:c4:da:06:3e:ed:e4:
47:f8:b7:b4:09:04:43:af:ba:02:4d:7d:dc:f3:da:
00:ea:b4:e2:29:98:3e:b7:e1:05:25:5c:26:f3:19:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8F:D1:99:45:A7:07:32:22:53:A6:B3:AF:0B:EC:ED:F3:E8:0B:09
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3f:cf:9a:91:f1:d3:38:72:0f:df:92:22:ce:a3:6e:67:7e:
5b:7b:cc:9e:2a:1a:9b:e9:5b:87:cf:1e:ca:c2:89:7e:6d:57:
48:33:ac:49:fd:94:99:de:b8:c0:eb:fb:21:cc:97:7b:f2:cf:
3f:80:6f:49:19:5f:50:20:1a:df:1c:c8:bb:3a:0c:bd:58:61:
10:2f:9d:11:b8:60:30:76:0d:12:db:f6:f8:76:71:0b:32:d9:
d0:8f:2a:88:7c:ce:93:e5:9a:d7:99:34:b0:bd:7d:30:c8:9e:
5b:81:84:81:82:44:cc:8f:49:3e:21:a6:77:62:20:49:43:38:
a0:57:b8:27:59:65:5c:a4:fa:b0:de:ff:4d:e0:0b:ca:98:17:
d9:de:b5:7a:4a:b4:1a:69:a0:55:06:88:4f:30:d3:3c:c5:c7:
92:ee:ec:1e:37:73:b1:48:72:f6:3f:61:75:e7:14:03:fd:c4:
9f:78:e6:9b:a4:eb:3b:fd:19:c9:e8:37:88:cc:b8:de:7f:34:
d3:25:e1:ee:82:ef:f5:37:2f:a1:d7:c0:c3:54:aa:18:37:8e:
3e:66:36:09:b4:0a:20:90:d5:bb:98:48:23:c0:52:c1:88:20:
52:a1:03:34:30:6e:5a:08:4c:19:7a:60:b3:d0:13:a8:18:4c:
0a:c7:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:23 2025 by rpki-client