Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: tERy5cZDh/fB3epDVRV4P2TWtonf2FTQmkq7JEoHNUQ=
Subject key identifier: FE:AF:23:85:31:EE:AA:5B:7C:AB:52:98:F7:50:CF:62:1A:BF:96:8A
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 019A51F582F755F52460B2B9E60E9B5E19A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 06B9
Signing time: Wed 05 Nov 2025 03:00:35 +0000
Manifest this update: Wed 05 Nov 2025 03:00:35 +0000
Manifest next update: Thu 06 Nov 2025 03:00:35 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: cmndwYEB+A4jhZn8RXuoOm+ucKDYN6imQbB1UY0KwyM=)
2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:82:f7:55:f5:24:60:b2:b9:e6:0e:9b:5e:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Nov 5 03:00:35 2025 GMT
Not After : Nov 6 03:00:35 2025 GMT
Subject: CN=feaf238531eeaa5b7cab5298f750cf621abf968a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:d9:d1:9b:61:5a:5b:32:f4:2b:87:ce:ab:
58:69:74:ae:ca:55:4a:78:eb:0f:48:30:96:44:4d:
af:5d:40:a5:1f:d7:b6:58:18:91:78:e8:a8:41:a9:
c6:4f:bf:dd:f7:60:90:85:71:fb:70:58:72:46:18:
3f:bf:17:22:24:e3:77:78:3b:51:c0:8f:69:25:f6:
99:46:cd:bb:65:7b:a1:5e:d8:aa:95:8f:f0:7b:3e:
23:81:45:70:b3:f7:9d:57:12:dc:10:3d:85:86:fb:
19:25:e6:3d:f7:0c:a3:d0:50:f7:fb:55:d1:67:36:
58:b5:60:12:84:88:ae:5f:7a:7a:00:83:7c:5a:6f:
a4:07:dc:12:d6:09:b7:db:c8:3b:2a:0f:e4:1b:78:
69:9f:72:7f:2f:de:d6:71:8c:d2:61:f0:85:94:8b:
59:7c:5b:00:4d:98:bf:19:43:48:33:f6:32:00:18:
e6:bd:05:28:2c:3e:f9:21:61:2d:6d:f7:d8:26:16:
94:c2:0f:4e:2f:fc:67:5e:11:16:07:24:42:19:d1:
5f:51:e1:d1:14:11:d0:96:46:41:84:d8:b0:0d:78:
eb:5f:da:06:9f:3b:aa:b2:06:ec:8c:98:66:ef:98:
76:75:0f:ce:63:2d:44:d1:d2:70:9e:fb:92:10:c1:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:23:85:31:EE:AA:5B:7C:AB:52:98:F7:50:CF:62:1A:BF:96:8A
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:12:aa:9a:02:24:09:bf:a9:67:3d:57:10:7c:11:df:3b:78:
88:f3:e4:2f:59:4f:e6:e2:f9:9c:cf:75:c9:a3:c3:d5:b0:f7:
84:01:3a:67:25:6d:ca:18:c3:28:aa:2d:9d:73:fc:c1:4e:c9:
7d:f6:35:41:3b:19:b0:24:c1:7b:b8:07:f0:d9:03:75:5b:a6:
96:f3:ed:6e:b5:c7:97:69:60:61:c5:d1:6e:96:74:40:2c:37:
61:28:a3:db:b9:76:9f:f8:da:81:b4:c2:86:52:30:13:db:f5:
d6:f9:78:fe:5d:45:d5:cd:34:37:e8:45:6d:b7:bd:31:70:39:
08:77:b6:e8:a4:c8:6b:67:93:ba:a0:5d:48:cd:9c:80:a3:6b:
99:99:59:0f:0f:07:5d:e8:9e:36:4a:1c:b5:cf:ba:d8:6e:4c:
a1:c7:a0:68:fe:e9:17:22:a1:dc:16:16:17:0d:32:f1:6f:21:
93:d8:ad:f3:e7:c7:a6:52:b4:1b:ca:cb:57:ce:02:ad:d2:6e:
18:8b:ad:31:c8:fc:d9:77:c2:c4:4f:2b:09:1c:38:78:72:ae:
80:d3:67:01:8e:a3:a3:0e:25:28:e8:df:68:0e:13:da:29:f8:
d4:4f:9e:3f:06:76:2b:c7:16:92:52:61:d2:a1:c0:51:85:9c:
b2:64:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:10:42 2025 by rpki-client