Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
File: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft (raw, json)
Hash identifier: HcRZmaUEpYvtE2ty9xUVA4wQFG/eDG6MpF8Q3s36mno=
Subject key identifier: 5A:49:F9:48:FF:FD:14:DD:4C:83:0D:E6:5F:9D:3B:BD:F3:8A:FB:E1
Authority key identifier: 31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
Certificate issuer: /CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Certificate serial: 019A4F62DA4607CA36F9B64B962B43BF1620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
Manifest number: 09FE
Signing time: Tue 04 Nov 2025 15:01:09 +0000
Manifest this update: Tue 04 Nov 2025 15:01:09 +0000
Manifest next update: Wed 05 Nov 2025 15:01:09 +0000
Files and hashes: 1: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl (hash: 134MJUBBY9XU1bxl8uREwSMmJZq1Qse0qHjP6zV3weM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:da:46:07:ca:36:f9:b6:4b:96:2b:43:bf:16:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Validity
Not Before: Nov 4 15:01:09 2025 GMT
Not After : Nov 5 15:01:09 2025 GMT
Subject: CN=5a49f948fffd14dd4c830de65f9d3bbdf38afbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:dd:bf:0c:b9:a8:44:d6:e6:d4:b4:59:4f:
1c:80:4a:be:61:f5:de:32:16:f2:a7:6c:27:f9:9a:
97:81:b6:9a:99:0c:1a:84:58:90:c3:ee:d2:14:18:
db:15:82:04:07:29:d2:88:52:d7:62:6b:9e:2e:90:
1b:94:c3:13:64:0c:69:85:f1:f9:3b:0a:5f:91:74:
ef:1b:94:65:9a:09:0e:8a:ac:c2:a2:9a:24:06:c2:
f3:93:5a:b1:cf:ca:6f:4b:89:53:32:fe:6a:33:b3:
84:47:06:ce:2f:0c:03:2f:9f:c9:86:a4:cf:dd:ba:
da:ca:12:c9:00:9f:bd:b8:96:4a:6d:37:09:75:f7:
6b:32:b9:af:1c:8f:c5:17:92:06:50:67:01:37:78:
0a:66:40:3e:3a:ce:0d:4d:46:4f:76:03:cf:a5:25:
06:5b:7a:ae:90:50:8d:26:3b:eb:dd:17:97:50:6f:
83:74:1e:40:6e:b5:46:47:51:3c:74:a1:fd:17:b2:
a8:20:72:d1:9d:d5:fb:4d:b6:db:8d:90:c7:d4:7d:
4d:db:7d:d2:b4:1d:95:a0:99:87:a8:a7:9c:e6:19:
7b:86:65:a1:a0:47:b4:64:7e:d1:84:aa:0c:b5:77:
e7:2f:e7:76:5c:34:7d:1d:f8:35:54:9a:56:65:22:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:49:F9:48:FF:FD:14:DD:4C:83:0D:E6:5F:9D:3B:BD:F3:8A:FB:E1
X509v3 Authority Key Identifier:
keyid:31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:76:c1:4d:ff:b4:45:cc:b8:80:3f:22:49:de:e8:02:66:
db:1c:1c:72:2b:57:14:80:db:04:fb:e9:df:c7:62:75:1d:81:
03:1d:3d:8b:88:6c:db:49:b8:71:29:17:e1:b1:f1:fd:34:e7:
29:79:a9:6b:62:e8:c0:68:23:a2:d3:36:46:c9:88:9c:7d:84:
05:d0:52:97:e7:d2:5f:a7:8d:19:2b:0a:59:d0:42:f2:15:df:
35:b6:d5:3c:29:2a:68:d5:81:d0:de:dc:46:cd:ac:73:97:4e:
0f:9b:9a:da:60:39:1a:23:6b:c6:47:7f:08:ac:86:5b:96:f3:
0f:dd:ef:64:36:98:74:c9:92:2a:d9:ed:c7:db:89:64:d1:33:
7c:ed:ed:f1:7b:73:f0:cd:5a:55:56:29:6a:49:f2:16:83:8e:
94:ca:3c:de:6f:de:65:ab:ee:1d:cf:26:ad:b5:a3:02:40:40:
93:18:b0:98:ad:5e:67:64:aa:5d:8a:a5:1b:49:77:0b:03:88:
86:47:7f:d3:f2:be:8a:9e:40:b1:4d:22:47:37:68:0e:a0:c1:
de:a6:5f:a3:cf:b6:a1:88:86:6c:ed:1f:f0:e1:da:26:99:25:
a2:23:7f:5f:c2:0a:9a:69:8d:3a:eb:31:6f:36:39:ac:ff:a5:
24:99:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:55 2025 by rpki-client