Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier: 8eDSngURegyjqk1LF27+GxCQsHnmCuavcq/oHhc5qO4=
Subject key identifier: 3F:FE:B7:B1:B5:D9:D3:04:84:21:5F:3D:88:8B:3C:AB:AB:AB:69:FD
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 019A4DAA74B9FD2230B3EB8F2CA12A2C6465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 07:00:07 +0000
Manifest this update: Tue 04 Nov 2025 07:00:07 +0000
Manifest next update: Wed 05 Nov 2025 07:00:07 +0000
Files and hashes: 1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: ygW3otBNfGrR4bxup51c9rN9SASP4R2MYS0l0dSVpRE=)
2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:74:b9:fd:22:30:b3:eb:8f:2c:a1:2a:2c:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Nov 4 07:00:07 2025 GMT
Not After : Nov 5 07:00:07 2025 GMT
Subject: CN=3ffeb7b1b5d9d30484215f3d888b3cababab69fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:fc:a9:b3:29:c0:a8:21:8f:14:95:6b:4c:
34:9e:c7:80:32:6e:21:11:b9:20:43:88:6d:48:69:
75:ab:cd:02:e0:c2:5f:be:0c:18:72:0b:26:db:5f:
9a:e9:87:e0:1a:ee:b4:9b:29:9d:da:64:b3:e9:41:
a5:52:ff:c9:b7:f7:e0:71:98:27:f7:94:40:20:df:
1e:a6:ea:14:91:e8:16:15:e1:89:69:f4:c7:7a:bd:
0f:58:f6:b0:41:f1:56:75:3d:da:52:62:91:2a:a2:
23:cc:76:06:2b:3a:15:49:87:c2:6a:f5:e7:66:73:
a0:a5:4c:3a:1d:02:da:3c:19:56:85:f0:01:ee:89:
21:f0:69:f4:05:4f:7f:28:d4:e8:fe:fd:69:36:0b:
08:fd:89:40:3d:24:1f:d0:51:2a:14:29:b0:ed:67:
19:e7:f9:26:cd:6e:1e:d9:4b:e6:0a:b1:a5:d8:41:
e1:02:c3:1a:06:2c:5f:73:39:d0:00:f0:ad:40:90:
85:22:65:c2:a1:7d:0e:39:77:66:05:74:84:bf:b0:
bf:58:9e:e5:ca:08:11:09:e2:5e:81:71:ec:c5:54:
bf:99:d9:c4:ad:9a:84:95:d2:9c:54:a7:74:42:27:
9b:de:5d:2d:30:0b:5e:07:85:56:90:12:eb:53:75:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FE:B7:B1:B5:D9:D3:04:84:21:5F:3D:88:8B:3C:AB:AB:AB:69:FD
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3b:77:56:e4:d5:ec:d4:1f:1b:3d:37:8a:70:ca:37:5c:0f:
5f:22:7b:6e:d7:9a:e1:8b:81:3d:9e:be:59:5a:da:ea:59:97:
4d:f6:17:a4:a2:f8:db:08:75:f4:38:d8:34:74:5e:44:f5:fc:
26:1f:b2:1e:cb:8a:59:c6:85:77:c1:43:b7:7c:04:6d:f6:f7:
d3:fb:e3:ce:22:21:55:98:5b:b4:12:7d:47:70:ec:42:20:05:
2f:4e:1c:25:36:43:0d:89:6d:9d:c6:15:6f:6a:2c:02:d0:15:
ab:a0:4a:e2:20:a1:50:cc:fd:11:a6:3a:e7:cc:7c:c0:6e:da:
2a:bc:f8:b3:66:4b:13:3b:ab:66:64:f1:d1:67:3c:a7:68:92:
7c:2a:93:e0:e9:9c:af:f6:d2:34:ca:69:75:8c:47:80:56:5f:
8b:f0:8e:62:17:10:d9:f2:a1:d4:3d:4e:25:04:07:5d:81:eb:
e3:09:64:53:48:1a:b2:01:62:52:89:b8:c5:bf:53:12:38:a0:
64:b1:90:21:a3:6b:83:e1:c0:5c:14:59:27:f9:11:9d:dc:df:
c1:04:0a:ac:ac:52:4d:82:08:a0:67:ad:4a:ef:50:25:11:b0:
bb:56:d0:77:89:b7:5f:4d:f4:34:8e:39:a0:eb:a9:1c:e5:b1:
63:a8:83:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:53 2025 by rpki-client