Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: IzLJxyp7IX/f66YhTVxAVJLll72ncM5d3K1Fg4poBf4=
Subject key identifier: D3:E0:1F:C0:3D:E4:63:60:6E:9F:CD:FA:10:BF:05:0D:64:DE:D5:3C
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 019A5151321C74722E49FD4762E5A3EA65B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 1449
Signing time: Wed 05 Nov 2025 00:01:06 +0000
Manifest this update: Wed 05 Nov 2025 00:01:06 +0000
Manifest next update: Thu 06 Nov 2025 00:01:06 +0000
Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: KT/Tk3wpO4jNJ02PQPw90vPysn0VmLh6dsYe/3XmIVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:32:1c:74:72:2e:49:fd:47:62:e5:a3:ea:65:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Nov 5 00:01:06 2025 GMT
Not After : Nov 6 00:01:06 2025 GMT
Subject: CN=d3e01fc03de463606e9fcdfa10bf050d64ded53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:e7:5d:2e:a4:59:70:40:61:8b:25:0f:85:
30:f0:b6:f4:5f:b8:35:38:9e:0d:25:9a:6e:87:91:
f1:02:73:d1:1b:3f:26:fe:b7:ac:02:cf:cd:6f:5a:
42:83:44:10:65:53:7c:e9:82:3c:9d:36:70:ec:29:
e3:a7:70:97:11:da:04:9b:99:c7:b2:74:d4:87:9a:
2e:e8:84:c7:8b:68:0e:1a:42:c3:e6:79:0e:35:46:
93:ec:da:bf:e4:f7:b1:ea:2c:73:9d:d8:0c:fa:0d:
19:a0:f5:42:7c:1d:f3:e9:d9:36:32:34:65:dc:f5:
a5:71:d1:c7:95:0c:aa:11:11:5a:bc:88:8f:10:af:
08:f2:11:db:62:85:ca:ea:eb:3b:28:14:ab:31:f2:
8e:04:63:d6:22:80:c8:5c:f8:6d:15:b4:f9:c2:79:
42:a5:d4:0f:b0:38:99:f5:c6:de:cd:79:97:56:dc:
e5:7c:62:b7:c2:24:fd:40:5f:38:08:72:82:81:33:
db:68:31:e9:0e:98:97:99:e2:b5:2b:43:4c:12:6a:
e8:48:15:49:18:e6:46:ee:b0:52:4f:37:17:34:e5:
d0:33:59:74:c8:7e:79:65:35:16:8e:94:d1:12:02:
cf:1d:8c:4f:d8:13:43:97:48:3b:d6:17:ca:3d:22:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E0:1F:C0:3D:E4:63:60:6E:9F:CD:FA:10:BF:05:0D:64:DE:D5:3C
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:0b:fe:e7:48:d4:6d:1c:16:77:3d:d8:69:73:a8:e9:54:
7d:0b:74:08:b8:b5:15:28:22:07:6a:fb:24:a7:d4:ee:64:b1:
63:30:10:ba:28:d9:09:91:ef:d4:a0:a7:d0:c8:b6:c5:7f:86:
c9:d8:16:79:2a:c6:2b:26:39:69:b5:95:13:e1:c2:58:9c:10:
c8:60:3d:27:63:e4:73:30:ba:26:d3:e5:87:b6:3f:37:d0:9b:
a3:28:66:66:20:fd:1d:a1:f4:3c:a0:cc:cd:72:8d:08:d3:e5:
36:18:85:df:d2:c5:a5:d0:b0:53:15:43:18:48:7e:b5:5b:c9:
ed:7c:5d:e3:2a:43:70:0c:fc:ce:d0:51:cc:23:b5:c7:3c:1d:
9c:92:55:56:7e:90:1c:8f:ef:28:46:bd:7f:d1:f4:61:6f:13:
4e:7b:40:2f:3c:09:32:00:d5:30:c9:41:c1:06:c3:84:25:7c:
99:21:db:3c:6f:52:d8:e0:ed:e2:18:3f:eb:bd:d1:09:85:43:
c0:27:86:16:ef:d0:e8:68:c5:fd:be:c2:fd:e9:d8:b4:46:60:
b4:9d:15:ff:a9:55:8d:b6:d0:e3:27:7e:18:69:aa:12:b6:94:
8a:1f:4e:18:75:88:32:6c:51:74:90:8f:df:a5:e1:25:02:67:
57:49:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:01:01 2025 by rpki-client