
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
File: b56WltzPbBpDIJBAhRSuzcP2Bzk.mft (raw, json)
Hash identifier: 4JbdJFtwGsd8RmNvSsrmam0TeSGv48x0Dlj3ZtAJJLo=
Subject key identifier: AA:4D:94:BD:25:F5:5B:68:7B:32:DC:E7:05:53:FD:78:6C:6A:C2:54
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 019A4E868A6902405A4212549F27C8B95971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
Manifest number: 0E1F
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: 1-NiC19PFJdVr-VuE1N7tWrIBE9Q.roa (hash: 0HAHPWXREzbwDwtij8FRpFriyrnHpfOye4GKnuxuEBo=)
2: 6nWnFXyS5F1ASwTmxTI-OKrVInw.roa (hash: nIb7NvpCUlKnok0WYLAdZJHgh2sr4DtEdqaSpiUSP2U=)
3: JepVTVOXgV6-PNcYm4B25-og_Bw.roa (hash: VKqDemplzQ4s9jiGQQ+ztyQv75PYRo6TWHvEcx19U2s=)
4: MncpHd9QqX2ka0is5mCmp6Ls4EE.roa (hash: rNntJON3CyCfJy9LGsF58CLKoNGRCBJyCvrP9s3kE9g=)
5: PlNj2d6nJdCalfpN6r_rJytfYJI.roa (hash: 0wdTzkVtCGDZ5ADOoR8XnEMg9MH672ZEq8atlwavEHU=)
6: Vx78BtYZth8fkOAc3-R4JCOAWDQ.roa (hash: bCA21gOWhnMn30bvClWd1qAWHLtWkJnH/m+zGg0euus=)
7: Y2J0ixWXxyomNLXlfR9-SEkEV10.roa (hash: rF2y/Uk8exCgCNC1RyMdj+bUcWV6XwhV1eBMJvHv7Ns=)
8: b56WltzPbBpDIJBAhRSuzcP2Bzk.crl (hash: 4blZl9I0Hr8ZPmbAYsjTlkkyZMXOt6+v9HRVry8nT8s=)
9: eF9lTSZjCnQxVBcCyaZ2_iTyyL4.roa (hash: C2f9yp+5cS9RVlmylbg05LRT6roHKpucks8wQ6aDfQ4=)
10: m861Xc-eiVog3f6I2l4jMFpfKnI.roa (hash: bz8DvDySjSOvcI2wBT0l0sJFxCwbCuCeVaGQ7jMEnBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8a:69:02:40:5a:42:12:54:9f:27:c8:b9:59:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=aa4d94bd25f55b687b32dce70553fd786c6ac254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:2e:33:c1:ab:04:05:a5:05:aa:4b:da:92:
ae:5f:fa:0f:24:52:98:78:a7:ca:a9:33:f7:66:46:
fb:4a:15:45:49:70:85:96:9d:27:83:35:4a:e6:3f:
4e:23:29:62:7a:d3:1e:ce:d2:33:72:ea:94:17:66:
a4:9c:a3:75:ed:45:6f:94:c6:d4:b1:9b:d2:84:3a:
da:9f:e5:a8:7f:95:b5:7b:d7:c8:16:26:80:8e:10:
8f:45:88:84:5f:d0:84:ab:a6:6a:85:71:c5:94:63:
08:15:52:58:95:b7:6e:68:61:34:81:c7:a4:3e:23:
5f:4c:ea:eb:32:17:07:03:f0:92:82:dd:24:44:2a:
ff:79:cc:d5:9a:40:88:7c:c7:da:f1:17:d3:40:27:
29:83:d7:83:25:00:a0:05:cf:26:8a:b5:d6:2d:d8:
d8:e0:a1:3c:46:c4:79:ee:23:c0:31:dc:c6:fc:f4:
5e:e6:ac:8c:43:33:5c:18:a8:ef:33:99:52:e3:7b:
27:4f:c7:1e:bd:c1:77:9e:4f:cc:77:86:79:23:7d:
55:d4:e1:62:b5:da:2a:a1:bf:1d:59:7c:25:20:03:
ef:a3:60:2d:d8:2c:cb:e8:d5:7f:02:a0:ef:5c:53:
3b:90:4b:d6:04:dd:0d:d0:2e:1e:12:a6:42:f9:00:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4D:94:BD:25:F5:5B:68:7B:32:DC:E7:05:53:FD:78:6C:6A:C2:54
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b1:aa:e0:80:86:54:5a:4c:56:0a:eb:ad:02:b8:37:32:46:
03:f5:c2:5d:de:41:5e:81:a4:5e:fe:df:47:0f:9e:a6:d3:4e:
84:52:41:1b:51:80:1b:05:3e:ae:04:d8:73:e2:3d:56:12:dd:
e2:b1:20:1d:99:8b:aa:bf:1c:a7:bd:62:af:92:80:0d:5c:31:
20:3b:22:f1:c2:cd:ac:f8:e3:77:d1:8f:4a:7f:9d:8e:bb:c0:
39:a8:98:3e:b1:1a:be:4a:9d:5c:1d:09:7a:1c:c9:45:0e:ef:
5a:d1:96:89:31:70:b1:7e:16:c5:41:42:6d:ed:82:a0:50:80:
89:83:fe:82:00:bb:80:97:fa:33:7f:f8:3a:78:3a:28:77:c7:
b1:27:48:ee:5d:7f:3f:5c:b4:eb:0f:74:b0:37:f4:78:d8:23:
6b:cb:f6:14:ea:61:3a:59:be:08:76:f3:dd:b3:e1:70:a2:af:
4a:63:52:5c:90:7c:91:4f:06:f9:94:35:82:12:69:8d:bf:88:
04:96:6f:60:db:12:e6:2c:ee:4a:64:19:09:c0:91:d8:9d:4c:
22:10:76:89:ef:90:90:07:02:94:87:4e:0c:76:dc:af:c0:1f:
45:89:b9:1b:33:d7:26:7a:4a:3d:95:47:5b:61:48:ac:5f:00:
f3:60:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:39 2025 by rpki-client