Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: C89mdoh4fRJiuha82giqxnGpcWjg8ydvN3Pu6wij0Ac=
Subject key identifier: 77:0F:D7:17:FF:D5:0B:04:78:78:5D:04:DB:E1:62:DE:CF:55:9D:12
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 019A4F627FFAFED2650F22DD261B71B47ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 15:00:46 +0000
Manifest this update: Tue 04 Nov 2025 15:00:46 +0000
Manifest next update: Wed 05 Nov 2025 15:00:46 +0000
Files and hashes: 1: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
2: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: iJ6Ne9ImwhKU+Y9PBGHJWbmEQ5VWn+PGw/SAsclD/Zo=)
3: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
4: mgPiyECi3IMewfduoQECoQO6hW8.roa (hash: FFtqOGC8SNkaXVCBxgLc9ho6RyB8i6aMWoVYlwMrees=)
5: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7f:fa:fe:d2:65:0f:22:dd:26:1b:71:b4:7a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Nov 4 15:00:46 2025 GMT
Not After : Nov 5 15:00:46 2025 GMT
Subject: CN=770fd717ffd50b0478785d04dbe162decf559d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:86:fa:c1:9d:d0:1b:9b:4c:c6:14:76:44:
23:50:d1:0a:11:bf:ee:78:21:aa:09:ec:5c:a9:ef:
23:54:a9:17:18:04:b7:95:50:5b:b7:f6:9b:56:fd:
81:e0:02:c6:23:87:c7:8c:a5:a6:79:a9:f2:8d:bf:
6f:72:7d:41:58:48:97:30:77:06:b6:a7:15:68:07:
7e:31:04:32:a2:16:5c:e6:03:03:fe:6b:97:06:79:
f3:cf:9d:7b:68:e9:5c:ba:b6:05:d6:ab:f2:98:aa:
54:74:14:bd:3c:b5:32:0f:af:34:27:e4:44:0e:70:
86:b7:68:0e:e6:4b:20:52:bd:11:44:ba:11:37:cb:
84:93:fd:2f:0f:d1:1a:87:51:de:e4:4c:08:cd:2e:
55:68:9e:4f:66:11:30:d2:9a:45:98:08:ba:68:bd:
e7:3e:85:12:3d:51:da:47:73:25:a7:76:4c:ef:a7:
5d:47:06:0d:4e:d2:48:fe:5c:da:cd:38:8f:a4:d3:
35:36:7c:f7:4b:86:58:1e:ec:93:ef:5c:c6:99:46:
1d:77:04:5c:b5:2b:19:74:7d:5b:90:66:b5:22:37:
34:a6:22:dd:d1:e2:50:ac:89:a4:7f:5a:1b:6e:70:
2e:03:a4:68:5f:c2:b1:69:df:37:d6:0d:67:17:be:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:D7:17:FF:D5:0B:04:78:78:5D:04:DB:E1:62:DE:CF:55:9D:12
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3a:b7:b5:09:bd:c3:54:0b:82:2a:15:58:29:3d:a8:de:d9:
e2:83:ea:d2:e2:08:e5:6c:0f:f0:52:6c:9d:85:43:62:7c:20:
c7:9d:cf:a6:de:8f:3a:8f:6d:eb:94:09:b8:25:8e:cf:5c:2a:
a0:6b:63:38:b0:d8:52:fe:dd:49:50:dd:6b:1f:9e:69:f0:42:
53:4a:5b:08:43:4f:9b:85:ed:82:59:10:8b:1c:06:a3:3d:fa:
28:19:9b:0a:ce:de:c5:18:07:f5:fd:7a:67:ee:81:c4:8b:8f:
30:0c:10:1a:11:84:95:ba:94:0f:e2:a3:85:1e:c5:9e:66:84:
74:b5:21:ed:c0:62:ee:7f:8c:f5:7f:c5:5e:24:29:3f:43:26:
02:33:47:31:7f:aa:bb:6f:f7:7f:c0:92:80:43:99:f9:46:c4:
b3:96:90:24:40:e8:d9:57:93:46:a0:5e:ca:7f:b2:9d:d2:a3:
22:5c:a7:54:cc:7d:aa:b7:1f:fe:8b:5a:72:f3:31:cd:e0:0c:
79:e3:99:b6:06:36:1c:be:20:c3:65:a5:36:ad:0f:a3:71:8c:
7b:15:be:1d:50:08:9b:23:9d:6c:23:c5:32:5b:3c:99:82:da:
67:a6:bf:18:08:f2:ed:b9:48:ff:d2:7e:01:8a:fa:a7:65:19:
7a:9a:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:15 2025 by rpki-client