Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: XgSCFEA/y3j4pDubhr6i+Kt9CMfaIJ3cPSz/U3u6jYM=
Subject key identifier: 7C:87:CE:52:B9:F8:EE:AD:0D:D5:2E:34:B0:09:54:CE:86:CB:A5:2C
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019A4E863FC563571FC7CE84DDDCB32DD18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:12 +0000
Manifest this update: Tue 04 Nov 2025 11:00:12 +0000
Manifest next update: Wed 05 Nov 2025 11:00:12 +0000
Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: JHDXZnMOczi/thnLNa9uY0QKJy4ojWiSMTNgXr/8rKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3f:c5:63:57:1f:c7:ce:84:dd:dc:b3:2d:d1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Nov 4 11:00:12 2025 GMT
Not After : Nov 5 11:00:12 2025 GMT
Subject: CN=7c87ce52b9f8eead0dd52e34b00954ce86cba52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:1d:34:34:d6:7e:df:a3:53:c2:aa:00:06:
df:34:44:d4:da:51:9d:56:a1:0c:2e:81:6b:f3:4a:
27:6e:46:c6:ad:23:54:00:e1:0f:5e:0b:9f:ad:97:
36:58:d3:26:f5:42:b2:44:1b:d5:33:6f:34:78:05:
23:72:49:2f:11:a1:4c:b8:3d:c3:f8:f5:fd:1e:0f:
7c:0f:c0:5c:dc:4a:18:a6:a6:53:d8:d5:79:86:f2:
dd:dc:16:71:8b:83:dd:5d:19:7f:44:40:08:99:3c:
c8:8b:19:2e:4b:fe:38:99:54:d0:e3:af:18:93:8f:
57:0e:2c:0c:77:40:4a:70:1a:f3:91:b1:3b:5c:96:
2d:04:91:47:07:f0:c5:cd:7b:7d:b8:27:cc:f2:65:
78:1b:e8:9c:d4:6e:15:36:9d:47:e0:ba:ae:a5:ae:
a0:32:99:7b:15:60:5f:c5:f2:7a:41:ed:74:fb:ab:
c0:d2:fb:18:e5:f9:04:b6:41:53:6f:4c:11:c7:40:
d5:39:fc:22:40:a4:50:0e:4d:6d:df:c9:84:e5:59:
3c:c9:a0:82:c8:21:9c:7d:f7:a8:3e:46:ff:b5:c4:
d3:76:3f:5d:84:a1:d1:df:b2:55:70:65:f6:2c:37:
2a:2d:ae:7e:b0:34:f8:55:c9:c8:49:f6:cf:68:33:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:87:CE:52:B9:F8:EE:AD:0D:D5:2E:34:B0:09:54:CE:86:CB:A5:2C
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fd:d0:3b:d5:1a:6d:be:27:c8:26:be:66:38:cb:52:de:10:
91:7c:8b:fd:8c:57:43:42:5a:3d:48:ef:ba:9f:b4:78:6e:4c:
92:da:f2:ed:09:1c:e7:11:7b:10:d5:88:16:f5:a3:db:3b:0d:
c7:86:d7:35:0d:2e:2e:6c:c0:31:31:02:88:fb:47:9e:e6:a3:
99:b4:a3:7f:94:86:19:25:b6:21:80:cd:c3:db:31:d8:af:96:
62:e0:0c:27:01:3d:39:77:36:b2:b1:90:2b:f9:64:ec:49:77:
4b:cb:39:89:64:be:0e:95:c8:af:e2:fe:5d:d4:9e:bf:24:26:
c9:3f:f8:0c:46:d6:80:f9:ee:5d:45:b0:d6:e6:8f:c4:63:48:
5d:c1:ec:fe:35:bb:e4:f7:0c:c7:e5:20:14:1c:b8:bf:c1:c4:
65:97:7b:ce:ba:8b:fd:15:6e:7a:8c:5c:a3:77:c1:3e:08:af:
ef:fb:e2:e7:0c:47:59:d6:8b:c9:3a:2a:92:c1:69:4f:b0:9d:
5f:79:d5:5d:34:72:5d:d0:c6:d1:23:9d:a2:bd:bf:d0:73:88:
be:1e:cd:44:80:98:6a:76:12:d6:14:12:85:42:ac:38:b0:f5:
80:e4:8b:e0:0d:2f:c3:78:f4:19:7c:23:a8:70:e9:9a:b4:80:
56:bf:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:22 2025 by rpki-client