Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: zaTIX7rbzVK5egf8F7Y9GyVVuwNHVHB5mhDKGRi5Ixg=
Subject key identifier: 2D:A6:55:4D:CA:50:78:7D:EB:1F:10:39:88:D5:C9:A3:DC:80:7A:0D
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019A50070821C3A8B95C802161CBE3265F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 18:00:29 +0000
Manifest this update: Tue 04 Nov 2025 18:00:29 +0000
Manifest next update: Wed 05 Nov 2025 18:00:29 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: Yb25v1jBG8ZfnbpdBY6DDBR38Ky7RQpjF6xRrgOV3Xs=)
3: SnB27P4aE00JP6FbecTTod9K1rk.roa (hash: 5E+ZR3tJKvaUJ0xYE7TDulpUYo4F5Unw9Ys//QosG5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:08:21:c3:a8:b9:5c:80:21:61:cb:e3:26:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Nov 4 18:00:29 2025 GMT
Not After : Nov 5 18:00:29 2025 GMT
Subject: CN=2da6554dca50787deb1f103988d5c9a3dc807a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:c6:51:5a:e0:67:e8:77:88:96:f1:55:00:
a4:86:5c:19:95:cb:df:76:c7:e6:fc:b0:74:a8:82:
30:73:2d:3f:5b:c5:b5:ef:8d:f4:f6:be:ac:36:b1:
76:80:41:9c:1d:fb:41:2d:c9:62:c5:89:52:8d:c0:
24:c5:8b:3c:d2:ee:b3:9b:ae:2b:92:1a:bc:e7:d5:
d3:33:ea:19:59:f8:8f:64:b6:40:c1:09:7f:59:f4:
c1:c5:93:8c:50:d0:09:51:73:85:d4:25:ec:00:2b:
e6:64:f1:ab:65:bd:85:9b:60:3e:b5:5c:20:cb:12:
67:c7:e4:5f:87:58:1c:72:6a:e5:27:a6:b7:48:3b:
e3:17:5d:e2:dc:0b:1b:71:e7:f5:80:60:24:76:58:
d5:14:f6:a1:49:e9:f1:37:b3:03:82:8d:a1:a4:8e:
ea:e2:c3:ae:8b:66:ac:46:f9:9d:4b:86:b2:ad:7f:
04:63:8f:6b:36:29:ab:f5:7b:a7:87:77:4c:8a:79:
96:0e:94:15:66:fc:a3:bd:ef:8a:60:f5:00:6f:09:
b2:d0:5e:bb:80:58:a6:aa:a7:32:0d:01:5d:1c:e7:
92:c8:7d:3a:b9:b2:01:30:e4:8f:cf:78:a9:b4:58:
52:38:63:d8:22:31:f2:db:e6:35:1c:a3:df:e9:8a:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:55:4D:CA:50:78:7D:EB:1F:10:39:88:D5:C9:A3:DC:80:7A:0D
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0f:2f:ea:08:61:8f:7c:29:4c:6f:80:d2:1b:b2:1f:b8:cc:
74:34:96:88:06:dc:52:bc:03:53:e8:8f:58:83:86:8f:72:ac:
5f:cf:4c:d5:83:fe:33:e5:f0:28:d8:fa:86:8b:1d:bd:b5:63:
fc:f8:e3:d9:a2:ec:fe:1f:2b:6b:5e:0f:93:73:5e:51:b0:b3:
cf:e1:17:94:2b:8a:d7:af:ae:0e:8a:43:8c:65:b0:54:79:00:
2a:79:b8:41:71:11:cb:9c:f3:3c:fa:3f:67:89:7a:e1:02:6b:
e1:22:99:99:77:71:e5:ad:62:ef:e5:b4:67:72:19:ac:20:26:
b4:2e:39:fb:f2:95:43:6c:47:38:8b:e8:94:43:05:57:8d:10:
fc:82:9c:66:5b:62:5a:5e:31:87:7b:84:4a:ef:83:bf:42:0d:
98:ff:66:fa:af:b5:cd:5c:ae:6f:1a:41:d2:34:ee:9b:51:e3:
2c:5b:23:f4:9a:ff:14:bc:da:cb:f0:ba:ee:5b:f0:6b:7e:04:
78:7b:a0:32:35:5d:67:49:17:d8:eb:20:d5:e8:09:58:d8:ee:
e1:46:56:50:81:01:f8:89:62:ed:54:58:52:cb:58:c4:89:6e:
8e:e1:ed:70:5b:33:98:df:65:bb:98:9c:34:6f:b0:54:02:b0:
f2:2a:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:19 2025 by rpki-client