Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: KNq8S87VR+W4ni0JYP7OwWjjlj7PJV6kcjlvp62FXIY=
Subject key identifier: A0:B2:68:0D:A1:01:26:98:92:18:30:2B:D4:65:71:8D:94:0B:EA:78
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019A4C6150ABFA8C307A848DC5FE625986E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 01:00:37 +0000
Manifest this update: Tue 04 Nov 2025 01:00:37 +0000
Manifest next update: Wed 05 Nov 2025 01:00:37 +0000
Files and hashes: 1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
2: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
3: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: +gOr3RO3SBF3aUAvo6C/A3TBPzy2LloimBI0gP16HHs=)
4: QWLPaj62U4CAYLuNbQSuF8yo9Rg.roa (hash: WelEuZteZjlUXOetnougM0+APhmhxsS7BtV9U+PH3aU=)
5: rAzaD8-4SFX5j-t_AZkG74hcrGo.roa (hash: gUBb80vQa9xzG40VeB1TgYoV9OYlxwRJMp3/2FmSfMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:50:ab:fa:8c:30:7a:84:8d:c5:fe:62:59:86:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Nov 4 01:00:37 2025 GMT
Not After : Nov 5 01:00:37 2025 GMT
Subject: CN=a0b2680da10126989218302bd465718d940bea78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:d0:78:31:70:51:e2:07:b4:45:a9:ba:ff:
91:9b:d2:d5:34:80:85:99:c8:30:3c:eb:99:a5:10:
18:67:83:db:45:57:d8:5d:c5:cc:15:60:50:a6:3f:
9a:b6:80:1c:d7:8c:d8:da:bf:47:1f:28:da:2d:19:
b9:ae:0f:3a:f0:97:7b:98:09:10:41:81:10:12:a0:
d5:53:55:cd:fd:4c:cf:e5:da:5f:2f:56:71:4c:6b:
39:01:e8:6e:e8:06:35:e7:11:b3:0b:58:e5:0c:b5:
c0:ee:22:f2:36:9e:91:32:48:f8:31:81:b1:1a:fc:
7f:be:ca:dc:67:e1:b4:a5:e8:6f:1a:10:66:36:2e:
4c:f3:c1:04:ea:f2:9d:87:86:ba:3d:08:ec:39:1f:
f7:7d:34:5b:3c:40:35:c1:aa:e2:ed:f4:1d:17:27:
97:2c:ba:59:ad:bc:75:db:c2:93:b0:40:e2:b1:4b:
a2:32:ce:2e:3e:32:6d:22:8c:42:da:25:f4:09:d4:
bf:d0:b2:61:d9:55:c1:d2:05:47:b6:3c:6c:55:8c:
08:15:6b:d0:bb:70:60:27:fa:ea:43:5b:cd:39:f0:
6f:1f:c2:e0:9c:28:c3:aa:3a:6d:ea:b1:e0:8d:08:
d6:5b:1e:c7:ee:01:88:a5:2c:82:de:97:2b:0c:43:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:68:0D:A1:01:26:98:92:18:30:2B:D4:65:71:8D:94:0B:EA:78
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:e7:bb:d6:6a:07:65:74:54:13:42:4b:4e:8c:05:4e:4e:a8:
e9:1c:36:4c:ec:75:ce:91:89:de:78:1e:3e:3a:a4:43:8b:45:
ad:e7:36:b9:8e:96:a0:70:17:db:25:8c:05:c2:bb:ab:57:69:
b9:b9:a9:64:89:00:b0:7b:73:44:c1:66:b4:aa:87:58:6e:3c:
46:dd:a2:f0:71:31:d7:2f:13:4e:ae:37:f6:a7:b9:b2:26:98:
c5:53:81:51:9a:2f:25:35:89:20:12:a0:1f:f8:52:2b:57:8f:
95:59:39:55:25:c9:2f:b4:f2:70:3a:f8:d6:f1:54:3a:90:92:
b4:99:2f:91:6a:28:67:09:0e:8d:b0:4a:a9:22:23:0e:57:fb:
d7:c5:8f:6c:e2:03:46:cc:84:21:ef:0e:ec:f5:b4:e0:f5:de:
f8:90:e6:a6:3b:77:cb:38:5f:0b:36:c0:6f:43:e2:4c:51:42:
05:91:16:59:d9:2a:d0:88:67:2b:ed:14:8d:ec:92:41:f3:f3:
a1:37:e6:bf:f8:3a:a7:88:16:d1:79:1b:04:70:41:7e:b8:e6:
1d:d5:77:eb:08:fd:18:13:97:22:87:e8:55:d8:ec:2e:f1:dc:
ec:52:e2:59:31:0c:fd:83:a8:dd:a9:fd:8a:86:4d:54:8c:7e:
79:85:17:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:48 2025 by rpki-client