Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: /WPV1Gs3TL6/eNdeC9S8fCQeE+VKxyTcmWGPjoVzuMA=
Subject key identifier: F7:1E:17:99:87:91:0D:7A:D3:5F:90:C3:57:0F:60:12:14:54:60:7F
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019A4EF5EDE60E5A98B7B92AB5213DA7CD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1336
Signing time: Tue 04 Nov 2025 13:02:11 +0000
Manifest this update: Tue 04 Nov 2025 13:02:11 +0000
Manifest next update: Wed 05 Nov 2025 13:02:11 +0000
Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: 08mnS1nKIY9YVipch4z+b5DiVdQgmzGIzi+w0K3Dh7o=)
3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ed:e6:0e:5a:98:b7:b9:2a:b5:21:3d:a7:cd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Nov 4 13:02:11 2025 GMT
Not After : Nov 5 13:02:11 2025 GMT
Subject: CN=f71e179987910d7ad35f90c3570f60121454607f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:18:78:5f:a4:4c:b9:7d:a7:b2:9a:50:34:
5a:74:bb:6a:40:34:30:7d:1d:9e:37:d5:87:98:3f:
c1:0e:e9:90:a8:63:ee:37:2f:4c:1a:ba:2e:e3:40:
34:3f:31:b8:64:dc:b7:3c:59:f8:30:99:07:03:eb:
22:04:e8:9c:a6:75:56:37:3d:76:bd:44:e6:ae:9a:
fc:5b:1d:10:78:7b:69:8c:42:77:6b:06:f6:ff:53:
1f:7b:0c:06:e6:f3:da:00:a7:e6:34:10:d9:c9:01:
d5:fb:a7:66:76:50:2e:7f:b9:c6:fb:88:0b:80:d6:
5a:66:c3:40:17:7d:02:b2:ac:40:3d:52:e2:3c:ba:
a2:bd:9c:89:cf:ef:39:e6:cc:08:35:75:fb:77:df:
f8:bc:c9:4d:8d:0c:e1:63:ad:94:05:1b:b8:90:c0:
e0:62:71:6d:b1:aa:96:9f:d0:01:ab:35:28:57:50:
45:51:66:52:8b:63:9c:1d:c7:ad:a3:51:bc:7a:1f:
7d:e3:5a:97:fe:f8:dc:c9:0d:c0:52:d9:e3:f7:17:
8b:66:2d:39:9a:50:d0:16:11:5e:6c:10:c4:47:5a:
81:f5:28:ec:41:d3:ce:e2:b2:bc:dc:5c:1e:24:1e:
bf:99:b2:60:33:5e:4f:fe:fa:b8:22:84:d8:3f:48:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1E:17:99:87:91:0D:7A:D3:5F:90:C3:57:0F:60:12:14:54:60:7F
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:17:af:74:56:76:d8:51:52:08:4b:37:17:1e:60:18:03:d1:
0b:24:cb:f5:70:ce:0c:56:88:5d:51:9b:ef:7a:38:66:65:89:
34:5b:d3:3d:74:f1:ae:21:45:1a:b7:8f:6e:52:ff:77:36:39:
b8:b3:ce:fc:95:67:ac:6e:a3:cc:1c:38:c0:9a:65:0c:df:6b:
de:6d:03:5f:fd:bb:9b:4f:a1:f9:ea:d8:e9:6b:2c:26:d0:ea:
1b:0a:42:38:27:6f:01:a1:c9:23:bd:29:6c:74:48:f6:c2:e6:
75:ab:9b:b6:26:2e:92:9e:8f:eb:04:05:8f:45:79:0f:fe:e8:
95:9e:a1:17:eb:e4:e9:de:bc:4e:bb:2b:8d:5e:40:82:e6:e1:
e1:39:19:74:49:19:56:e2:fa:62:d8:eb:db:fe:d7:42:a1:57:
43:45:04:08:98:36:08:4d:cd:b5:81:96:ca:16:a3:81:8f:55:
30:6a:51:13:3e:0a:c3:30:a1:ae:e7:a8:05:26:bf:8e:cf:af:
dc:ed:9a:cb:f8:30:90:e4:93:af:80:24:03:d4:6c:7c:e1:8d:
68:0c:b4:ab:94:bf:3c:74:fb:34:65:47:c7:61:dd:41:a4:ea:
82:10:d6:74:ec:87:ca:04:ca:19:e2:3a:80:87:b9:5c:d2:3c:
c5:89:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:42 2025 by rpki-client