Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier: JuFJTRIqf9ahhxA+lZnNRNg3TC8Wh7CUKoFTJX/ti7M=
Subject key identifier: 7A:B5:DE:CA:A5:4D:6B:22:4A:D7:5A:D0:F0:34:40:D7:53:F8:94:26
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 019A4E8657CEA100F0445346734805E80CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:18 +0000
Manifest this update: Tue 04 Nov 2025 11:00:18 +0000
Manifest next update: Wed 05 Nov 2025 11:00:18 +0000
Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=)
2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: LtIuGF9j1Vay8s0MSrHVj/KxDPYnWw11eJNZXzyQyhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:57:ce:a1:00:f0:44:53:46:73:48:05:e8:0c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Nov 4 11:00:18 2025 GMT
Not After : Nov 5 11:00:18 2025 GMT
Subject: CN=7ab5decaa54d6b224ad75ad0f03440d753f89426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:0c:7e:4f:b2:82:a8:e9:98:da:c9:ad:75:
a8:59:8e:1a:2b:8a:bb:a7:45:55:78:2b:0d:70:e6:
80:da:62:82:4e:44:e2:56:03:36:37:bb:22:78:74:
bd:28:a5:71:8b:bb:4d:60:77:74:82:53:0f:52:4e:
fb:41:34:15:f0:fa:6a:ec:1f:e2:04:5f:db:e4:99:
b3:e4:b4:7d:fe:07:a0:1a:bd:93:e0:d2:52:4e:79:
b5:87:bf:c3:71:1e:9d:41:39:40:16:3a:58:0e:c3:
5b:78:4f:c1:06:f1:0c:d2:bb:f8:2b:54:a6:02:7a:
ab:02:18:cc:cf:ea:34:bf:87:9a:64:37:af:eb:b4:
11:2b:9c:a9:40:54:6b:47:21:e0:06:4c:8d:41:0a:
31:62:79:06:b1:3f:9e:61:14:9c:e3:b0:64:00:3d:
26:1c:82:f4:c3:e7:44:e1:80:15:18:97:b2:21:7e:
ea:7c:18:4d:7a:88:c7:f5:ad:fc:3c:40:15:e2:1e:
ef:b4:a0:7d:df:b7:f8:46:18:cc:ad:16:db:4d:ca:
9f:24:71:bb:e2:45:a7:11:6b:c7:51:96:4f:77:29:
2c:87:cf:a9:42:a7:6f:96:96:92:11:32:b7:ea:7c:
02:ba:fa:e6:65:9a:5f:61:e4:05:ea:2b:62:88:c0:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:DE:CA:A5:4D:6B:22:4A:D7:5A:D0:F0:34:40:D7:53:F8:94:26
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2c:e7:7f:a6:08:9a:2f:28:f6:44:b7:a7:3c:3a:30:1f:f1:
0d:72:25:d3:7f:33:7e:a0:53:f2:02:49:37:58:7a:6e:fd:33:
0e:30:ab:2c:31:d5:c3:7c:8d:c1:75:69:b3:68:32:81:99:3f:
9a:6f:cf:e4:39:eb:10:2b:a2:d5:c5:83:c6:05:e2:27:0b:e2:
60:5d:65:98:3d:dd:de:f1:1e:a5:eb:09:69:b0:b1:ac:ff:28:
f8:64:2d:b5:8d:09:c3:cc:89:fa:9f:f7:1a:73:d8:7e:ba:8c:
39:18:36:d9:99:bb:ae:ba:0c:71:c1:5f:5b:31:c3:70:f2:1b:
f6:8f:d8:34:fd:c9:85:50:0c:bc:61:e6:09:85:da:fe:ac:5e:
ac:15:be:54:f1:3b:30:eb:1e:99:59:af:a5:56:41:ee:65:eb:
a8:63:17:aa:a7:bc:4b:4c:2a:1a:28:33:aa:37:f0:30:94:bb:
04:45:1d:6e:22:d7:52:8b:8b:d2:b1:a1:b9:12:9f:8b:f9:0b:
bd:14:02:d9:12:6c:eb:df:32:49:59:57:74:0b:72:13:6f:bc:
d6:84:da:75:75:64:d1:65:ce:46:f9:9a:e4:e8:d9:90:f1:72:
e1:e8:8c:8d:ef:85:fa:1b:ce:ad:b3:cf:a8:4a:32:0f:fe:04:
fd:24:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:41 2025 by rpki-client