Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json)
Hash identifier: kTkdj4+7GsI9Jn4MCVi9PdWHqzsFLwKBWbcSTDjCYko=
Subject key identifier: 85:AB:50:2B:96:65:8D:B4:97:C3:BD:FB:69:0D:F8:2E:FF:F0:90:5A
Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602
Certificate serial: 019A4DE1A7ADBC7EDFB5DADB069A7F4FE7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
Manifest number: 091C
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: IG4GDbazrzN1EYN8+mEgIkERlKqfiWgFewJedfCLgJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a7:ad:bc:7e:df:b5:da:db:06:9a:7f:4f:e7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=85ab502b96658db497c3bdfb690df82efff0905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:6e:bd:58:f4:02:89:60:3a:7f:99:82:ec:
a2:37:71:f3:c7:23:29:2c:92:a6:f9:df:a4:aa:93:
e2:c4:70:4d:f3:c6:7b:26:1a:2d:ea:70:45:7b:11:
21:8a:58:01:cd:c8:b2:c7:aa:64:fd:db:2a:b1:4d:
0d:95:32:92:f9:69:ee:9b:64:5c:2d:5a:2a:a9:21:
5b:73:8d:0a:fc:67:18:73:46:eb:a3:a6:09:27:a7:
a4:d0:55:cb:53:fa:b3:14:8c:7f:17:cc:c2:7b:5f:
13:5b:24:ba:e6:d3:87:17:aa:8c:52:61:51:26:f8:
0c:61:3f:0d:b9:6e:f3:5e:e0:08:61:74:2f:e6:e1:
b6:5c:f2:d2:52:8d:5a:06:5c:da:c9:f9:33:e2:03:
16:c2:12:32:86:ba:39:d3:24:e0:73:ab:14:66:78:
68:26:46:2d:17:c1:3a:7b:a0:1c:26:fc:ca:48:e7:
b7:3c:28:1c:95:ac:76:66:f1:a7:c4:50:c7:94:97:
03:bb:ea:11:4f:e3:88:15:c1:1e:93:a3:96:fc:76:
9f:61:bd:44:10:c8:bc:17:72:cf:75:27:89:99:77:
bd:47:ce:ab:37:05:a4:0a:eb:05:2c:dc:9b:cb:15:
20:91:31:95:fc:02:a8:e8:b7:92:d0:fd:95:80:16:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AB:50:2B:96:65:8D:B4:97:C3:BD:FB:69:0D:F8:2E:FF:F0:90:5A
X509v3 Authority Key Identifier:
keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:18:ad:48:c1:3a:33:99:d9:40:2e:9e:72:e3:13:0e:4c:21:
d6:c2:e5:ac:84:e7:98:a9:02:93:4a:64:48:40:28:22:ab:49:
8f:0e:e6:bd:7b:6d:da:0e:d8:9d:43:c3:1b:56:e4:06:89:2d:
0e:3a:56:cc:f5:f5:5e:2f:7f:ad:49:06:86:f1:c0:30:42:5a:
f9:72:de:ee:05:10:f8:cd:e4:6a:a1:7e:97:93:a2:a8:1b:53:
f0:54:6c:ee:59:3b:01:d6:a7:f8:a5:1a:81:56:b1:2d:58:ee:
6e:22:b8:8f:d7:8f:af:08:f9:d8:a4:fd:13:15:e0:a1:f4:cb:
1e:15:69:9c:00:31:9f:45:1d:af:23:0f:b9:2a:e2:d6:56:76:
d8:4a:65:30:71:37:8b:1b:a8:96:37:f6:ea:4e:c0:ee:b9:bb:
70:7e:16:34:b0:a8:e3:33:3a:1f:cb:01:2d:4c:3b:1d:3b:8f:
79:23:ec:a9:58:9b:d5:5d:99:ba:8c:27:92:67:a9:e8:a4:24:
c5:c0:11:18:91:5a:d7:e2:91:34:9c:d9:a2:63:dc:a4:5c:3c:
14:69:f6:58:a4:80:2d:8f:c7:13:69:ed:c9:0b:65:2d:24:5a:
34:5c:ba:21:3d:a9:77:c3:07:92:fe:26:4d:1e:c1:46:04:4b:
ba:fb:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:47 2025 by rpki-client