Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
File: mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json)
Hash identifier: qvmY9cX8PBX1R8ubUeaSqzyX8ky0PuOi7yuy05C2N9E=
Subject key identifier: 16:24:D1:71:58:30:00:61:27:A7:7E:6C:C1:88:94:32:A3:70:CB:20
Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
Certificate issuer: /CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Certificate serial: 019A4E4F639775355D29FF5141898AB3A1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
Manifest number: 042A
Signing time: Tue 04 Nov 2025 10:00:16 +0000
Manifest this update: Tue 04 Nov 2025 10:00:16 +0000
Manifest next update: Wed 05 Nov 2025 10:00:16 +0000
Files and hashes: 1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: RXTLqS5EfQVZxr76Tly6e1RdUPEiQ+wHlV1uJIlR+FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:63:97:75:35:5d:29:ff:51:41:89:8a:b3:a1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Validity
Not Before: Nov 4 10:00:16 2025 GMT
Not After : Nov 5 10:00:16 2025 GMT
Subject: CN=1624d1715830006127a77e6cc1889432a370cb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:df:99:4d:95:ff:a3:84:0e:c1:06:6b:2f:
b1:d0:2c:f2:88:e0:f0:8c:cd:ce:6e:18:36:6f:a9:
de:77:88:3b:03:be:24:49:3b:e1:2b:13:04:da:c2:
e9:c3:89:1f:7a:77:70:09:04:3a:d6:2a:8c:58:29:
50:39:71:91:18:a3:f1:4d:d3:f9:c9:3d:01:27:ab:
b0:8b:df:41:29:f0:d5:fe:3b:7a:73:72:27:54:6c:
6c:cc:4f:49:98:a9:24:ec:23:2b:be:d6:0f:d1:27:
23:a8:55:ae:62:e2:11:55:55:1b:99:0a:d1:40:a1:
3d:58:72:cf:dc:87:e2:d4:19:0a:3b:38:65:9b:8f:
db:d9:ce:0a:1d:fa:08:3a:bc:f2:a8:b4:db:2e:a4:
05:98:81:13:f7:dd:c3:cd:64:7b:71:55:1a:14:e7:
da:a8:c7:e2:dd:3a:cf:1b:05:79:ec:5d:c9:bb:1d:
e9:67:9f:3b:76:5b:e7:77:59:50:26:7f:21:2d:26:
3e:b2:f9:2a:a1:75:dd:c5:45:80:0d:ee:ec:a9:d6:
31:0e:a7:d5:ec:f7:a3:0d:09:0d:d8:bb:74:47:4e:
cc:8e:8e:9a:f6:39:d5:fc:bc:57:18:5a:97:2f:ec:
e8:22:d9:11:f8:60:8b:5c:0e:40:5b:91:99:df:01:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:24:D1:71:58:30:00:61:27:A7:7E:6C:C1:88:94:32:A3:70:CB:20
X509v3 Authority Key Identifier:
keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c7:a8:54:87:c5:de:1c:a1:56:b2:95:86:90:60:fc:f4:43:
33:ca:eb:2d:6b:31:f2:4b:cc:bb:fd:fb:03:48:a7:87:c7:4a:
6c:f2:a3:97:79:a3:ca:fa:5d:f6:70:d6:34:ce:66:68:56:28:
42:85:48:67:35:b4:ed:36:7c:75:2d:5f:19:07:a5:13:41:92:
e4:f7:8e:3b:a1:5c:ce:9c:95:8d:23:d9:59:32:76:a9:b9:8c:
17:e6:4f:50:4a:a2:93:50:27:cf:8f:06:c9:d3:93:7a:fa:5d:
c3:bb:3c:aa:95:bb:81:95:17:87:a8:e8:df:22:3f:4d:68:f3:
97:ba:b9:1c:de:f6:59:af:74:8e:9c:d1:62:c1:b7:bc:c5:7d:
f3:05:1f:ca:e3:96:ec:c1:74:3a:d3:f8:b1:93:d6:ac:29:38:
d6:fd:37:82:78:bc:b7:d6:45:ef:85:df:4f:d3:b0:62:8f:c3:
bb:91:2c:fa:85:f8:79:dc:2c:90:58:c5:2b:fc:ad:e1:53:1d:
40:36:a1:c2:c6:16:da:02:35:7e:ef:b8:e3:93:72:e9:90:ab:
58:3a:bc:9b:01:b5:eb:80:2b:43:a4:fe:c5:12:fd:70:23:cf:
7b:05:a5:3b:6c:02:1a:a5:74:39:09:c0:a5:75:a0:f9:3f:b2:
bf:98:3b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:31 2025 by rpki-client