Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: o7ZOOyKWdFYBqZVvs0nNZ1Gg18HA8KwCUx0+MJiYz8M=
Subject key identifier: BA:AA:9B:8C:E6:40:6C:29:FD:D1:BF:A3:BC:9A:62:78:F8:E4:4B:3F
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 019A507502C718D8B3CBC206FCADB92761C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:36 +0000
Manifest this update: Tue 04 Nov 2025 20:00:36 +0000
Manifest next update: Wed 05 Nov 2025 20:00:36 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: fNDwU2Rvs38lr+Mhf0an/Zb2eeuyKNooDjQ5tAawuEg=)
2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:02:c7:18:d8:b3:cb:c2:06:fc:ad:b9:27:61:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Nov 4 20:00:36 2025 GMT
Not After : Nov 5 20:00:36 2025 GMT
Subject: CN=baaa9b8ce6406c29fdd1bfa3bc9a6278f8e44b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:67:55:11:31:1c:7d:da:13:a9:b9:a9:f6:
7f:9e:ae:e3:f0:2b:ea:8c:e6:4a:2b:73:66:ec:f3:
15:a3:e1:6d:1d:cd:5f:1e:37:e9:2d:87:cc:83:3b:
a1:a7:0a:39:50:1d:dc:03:02:cc:7d:f9:75:d9:c1:
06:aa:fe:ab:3e:fd:39:60:30:61:26:f3:c1:22:7e:
27:53:0d:e3:73:b9:ef:35:11:2f:49:6c:5f:aa:a0:
b9:b7:62:44:a2:24:f0:f0:61:09:45:9a:a2:6f:19:
2e:82:74:9f:cc:c8:91:34:f3:a8:b0:e5:0e:7d:32:
3e:2d:a0:71:28:c6:3b:8f:ce:7a:33:ed:5a:87:0f:
91:9a:52:b7:fa:2f:0b:2e:da:61:74:ba:5e:8d:28:
fd:b3:e8:55:cd:7c:f9:ac:15:f1:a9:b1:0f:87:99:
ed:ea:e9:e7:9b:1f:66:df:3a:e2:df:95:da:65:ec:
08:3d:01:37:1f:42:7e:dc:f6:61:5f:1d:a6:d1:de:
c4:ba:19:ab:ea:4b:85:8b:8b:d5:0f:5c:c4:3d:96:
e1:09:75:42:b4:14:7e:2f:ee:2e:5b:da:b9:db:83:
f5:29:eb:a2:82:fb:82:3b:71:a8:be:00:4e:38:ec:
50:09:8c:9a:c6:7e:24:13:99:31:c9:9b:1e:48:f7:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:9B:8C:E6:40:6C:29:FD:D1:BF:A3:BC:9A:62:78:F8:E4:4B:3F
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b3:41:b8:eb:9f:29:60:0b:d5:cf:09:68:72:4a:ab:65:56:
30:13:79:90:91:28:45:0b:e9:0f:04:b9:a2:e2:c1:78:3d:8b:
df:af:0f:b3:4e:99:f1:4f:05:d9:ce:ca:4a:10:b1:b3:c1:2e:
62:74:bd:74:97:43:63:fd:73:2c:5d:97:02:34:41:34:c5:1e:
b3:82:e2:7f:b0:54:fd:4b:bc:de:74:3c:56:ac:1b:a3:d2:66:
6e:19:06:85:fe:ef:7e:de:25:1a:ac:3c:8e:e9:d4:a0:59:11:
d6:d0:44:5f:8a:1a:88:c6:8e:92:6e:a6:f7:f0:45:1f:b6:b9:
6a:cd:46:c3:66:f6:26:07:ea:6f:f6:dd:7a:6a:93:43:98:53:
4b:31:ec:16:00:56:62:ca:ea:57:e3:9f:0c:4c:6b:54:2d:ec:
f5:93:81:50:8a:1d:d4:89:88:cf:a3:ae:49:6f:44:58:ca:7d:
d1:c1:59:ad:67:3e:86:f6:8e:b7:19:c7:27:34:7a:cb:00:4c:
2d:09:0a:ec:05:51:34:93:08:f9:56:45:e4:05:3c:b1:c1:89:
04:89:e2:8a:d7:be:5d:b2:2e:d6:2e:d0:05:b0:aa:e8:e2:9b:
3c:33:e8:bf:3e:3f:ac:a1:13:bc:c3:4c:6d:4e:c9:19:04:e2:
15:dc:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:18:43 2025 by rpki-client