Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: YxbUa67FVGkP1w5YP3yk7bnO5BcjJ5u/AjbzSCgJ08w=
Subject key identifier: 4F:3F:74:04:80:40:7E:E4:DF:8A:4D:3A:7B:60:88:C1:62:E4:0C:1C
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 019A4DE1A8F1BA20288CABC59BF258BC1DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 13DD
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: SswoJLPEpU3Ds+0u2Dt346q4ETcWGxgOptq5SGUeHmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a8:f1:ba:20:28:8c:ab:c5:9b:f2:58:bc:1d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=4f3f740480407ee4df8a4d3a7b6088c162e40c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:b7:f8:73:06:20:ff:3d:d0:5e:c0:bd:86:
81:90:bd:98:da:c4:69:c7:00:44:9b:2a:8b:16:44:
7d:2f:08:6f:e3:a4:6d:4e:68:24:8b:7f:88:52:af:
50:56:24:fb:a9:92:69:37:9b:d9:21:9f:85:cb:42:
62:db:74:62:aa:28:cc:f6:8e:3d:99:b3:b3:22:a3:
4c:5f:fe:86:e7:3a:7d:e4:ec:1f:6d:09:05:a2:19:
fe:12:c2:94:65:17:39:96:95:2b:f6:cb:a7:fd:1e:
22:40:55:63:93:93:24:7c:73:ad:a5:08:69:5b:af:
79:59:76:b0:62:88:5f:5a:1a:ed:05:2a:9f:02:6d:
02:ec:b5:87:82:1e:21:27:1f:eb:3b:5e:d5:fd:95:
67:1c:05:48:a8:78:ae:41:77:4f:25:d3:f4:e9:88:
59:d8:02:5d:9d:cc:f4:63:69:97:c3:6e:ff:57:b4:
8e:fd:f6:7f:4a:90:ad:14:e3:f3:76:cb:48:d2:89:
fa:34:9c:c6:20:29:4b:4d:30:07:26:cb:46:a6:32:
92:80:20:f0:07:20:cd:b6:e8:4c:ca:f0:20:a9:17:
eb:ed:2d:28:c4:b0:24:49:21:08:dd:d6:26:e0:f9:
44:57:db:5b:7c:2f:2c:52:31:a2:a6:b5:24:2b:5a:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:74:04:80:40:7E:E4:DF:8A:4D:3A:7B:60:88:C1:62:E4:0C:1C
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f1:2f:b1:14:12:4b:b6:a2:a0:45:4d:7a:40:e4:27:0d:c0:
76:9c:7d:0d:d3:e4:20:1a:a3:e2:9f:84:57:69:07:1c:17:5d:
51:c9:39:14:d6:e5:fd:f2:ee:78:8e:44:42:36:c8:ff:24:53:
da:c3:85:96:8a:ec:94:75:06:7b:27:3f:bb:76:9d:97:c0:31:
cb:30:b4:6d:eb:f0:fa:bf:55:69:16:70:e0:45:65:33:56:c5:
4b:06:45:f6:f9:23:95:b7:37:f7:45:09:cc:cc:fd:92:0e:0a:
75:8d:fa:78:bc:85:9d:ac:19:93:3d:a8:96:63:8f:93:fd:68:
67:53:31:a9:8a:a7:4c:ef:04:ed:07:d3:82:a2:8c:3f:01:be:
bf:03:bc:2f:24:37:00:5d:f6:7e:e7:14:c7:36:93:69:03:12:
03:d0:7b:b5:43:20:ab:82:4f:95:4d:27:35:b5:a1:b8:0c:e9:
6f:f9:80:ec:53:72:d2:85:9b:37:78:ff:34:5a:5b:14:bf:d8:
d6:c0:02:c3:98:a6:fb:01:cd:1b:03:15:a4:c6:37:c7:6e:19:
59:0b:8a:35:41:27:df:dd:46:52:1e:99:fc:f9:39:15:79:5e:
8c:59:a8:ab:c5:63:0e:66:d1:5c:0e:0f:a4:13:a7:d9:b0:57:
08:fd:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:18 2025 by rpki-client