Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File: MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier: hMI+iWjMLYrG7q11kVBLXxubbsYAWE3K+Q4g383roDI=
Subject key identifier: AA:4E:32:E4:38:0F:03:19:20:92:BD:A1:A7:A4:2A:8B:8C:92:1D:55
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer: /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial: 019A52D26EA4D123FE4130EC1CB4EC4A13A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number: 76
Signing time: Wed 05 Nov 2025 07:01:53 +0000
Manifest this update: Wed 05 Nov 2025 07:01:53 +0000
Manifest next update: Thu 06 Nov 2025 07:01:53 +0000
Files and hashes: 1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: lQ+AXpQG1haReGfqoYC2U7xPkxRj30JrlP/SF3X+CTs=)
2: QhmGkcRygSZ5ihQLsVW91SIUW9s.roa (hash: YN0HNJUwhKmoGvr9Z1SSlKCl4sVnuUTF191h7YfoZmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:6e:a4:d1:23:fe:41:30:ec:1c:b4:ec:4a:13:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Validity
Not Before: Nov 5 07:01:53 2025 GMT
Not After : Nov 6 07:01:53 2025 GMT
Subject: CN=aa4e32e4380f03192092bda1a7a42a8b8c921d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5d:18:ef:a4:8f:93:06:76:ad:98:38:7d:1f:
7b:14:71:11:78:63:34:ee:45:80:a9:ba:e3:28:e9:
ef:8d:17:53:0c:51:4d:c0:b8:0b:6b:1f:7b:89:0f:
be:29:f5:89:e1:57:7b:79:d1:cc:e3:cf:0b:3f:eb:
90:90:0d:dc:a0:8c:4e:86:03:99:65:2d:6b:58:33:
ee:52:e6:55:5b:ab:c1:4e:d7:63:cf:58:75:de:78:
8b:11:e0:af:df:9c:d4:41:58:dd:9d:c3:f9:d5:25:
56:ee:f1:6b:02:56:a1:f0:a0:c0:42:e8:7b:fb:c7:
d1:4d:7d:b1:39:4a:6d:91:37:d5:0b:d9:6a:33:ff:
92:82:f5:df:78:0e:dd:d5:07:38:a3:17:4e:d7:e7:
33:c7:be:25:1c:10:fc:c4:82:12:6e:43:07:00:84:
46:23:c0:1a:9e:c8:7c:9b:41:07:60:4a:32:37:bf:
fa:18:8a:29:61:d4:cf:3e:e6:12:bc:f4:dd:1e:2c:
bc:61:ba:82:4a:42:7a:96:63:bb:3b:d4:f2:a8:0f:
c1:5f:5b:58:df:e8:be:0d:d6:b3:54:70:ee:db:16:
bd:4b:21:63:1f:43:9b:6e:7a:6a:de:a3:1c:f9:4d:
dc:81:f8:03:21:89:d5:df:f2:01:9e:2f:c2:49:9c:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:32:E4:38:0F:03:19:20:92:BD:A1:A7:A4:2A:8B:8C:92:1D:55
X509v3 Authority Key Identifier:
keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:78:ad:b3:30:71:9a:d4:6c:4e:1b:2c:f3:f3:23:b8:5e:68:
cd:1c:12:e4:e6:83:31:11:55:9e:51:14:29:87:5f:52:91:fe:
fb:26:d0:ca:3b:66:3d:0b:22:91:a7:06:bf:ca:7f:b0:2c:f4:
20:07:e4:c5:b7:3c:f8:87:b8:85:a7:27:c8:1d:35:3d:14:76:
d4:7f:cb:b7:26:b4:dd:79:88:2a:d0:21:74:b1:e0:a5:6e:fc:
30:20:26:37:78:d2:bc:a2:0c:0b:26:b3:72:4b:90:8c:25:9f:
09:61:1f:a9:66:28:54:bd:57:e9:e9:82:bb:e3:00:75:4c:2f:
9d:7a:ab:73:5f:09:2c:51:16:b5:79:ab:87:36:c5:8e:74:6a:
3c:bb:02:bb:13:c5:80:10:31:01:a4:6f:e3:ae:66:86:36:81:
e8:c9:9e:1a:f9:1c:5e:17:26:b4:25:61:10:d3:7e:6d:68:94:
13:18:02:5d:06:24:13:f0:41:9b:b3:0d:6e:88:91:fc:1d:20:
57:22:88:bb:7e:cc:53:1d:73:de:29:33:3d:58:3c:86:b2:42:
e1:51:34:3f:39:43:0b:16:49:a0:2e:d2:9c:70:bf:df:8a:4c:
24:1c:9f:73:35:14:f1:af:47:42:ae:11:4f:cc:94:2e:19:34:
ed:09:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:20:18 2025 by rpki-client