Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File: MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier: 8x7bfRowaGzQEZF7UJeidPwTlyIdlBfkzt2E1/r7YKk=
Subject key identifier: 22:4C:BE:B7:93:3C:E6:C6:1D:BE:D4:DA:C5:34:AF:99:FA:69:74:7F
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 019A4E4F94651E812E6F0E81F961E2F083AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number: 0F94
Signing time: Tue 04 Nov 2025 10:00:29 +0000
Manifest this update: Tue 04 Nov 2025 10:00:29 +0000
Manifest next update: Wed 05 Nov 2025 10:00:29 +0000
Files and hashes: 1: 0IHmyTelW8zpO-_QdR9UfSEkXAI.roa (hash: UlYSOxczUbkdfKJ9miYaE+QEa9fb9mQhLOlffEgcsoY=)
2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: dYr/9RS8fK3Xe+MYjF+HVPzvmqTsXMVtAbXEflmdJK0=)
3: PQvHlqxPOZ5EcVf6KsUmqrHycoQ.roa (hash: 3ksFdFv/Fa3gpXmdL0Lg1ZLkcfv0kVJRQQQ2mO5ywLk=)
4: ahJNP8kQoasOGfOn59FuyopzzTg.roa (hash: 6vRaJqB5sPcJZ3/fvcKuSD1RiGeRJgHPqC0FIBy6qGg=)
5: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (hash: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=)
6: cz_i6inXtcUIjcIN9oJWb2HinvM.roa (hash: PQ0BLB4sI2B91vehL/dzDGr3GUpFGQqMElA5h/dx7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:94:65:1e:81:2e:6f:0e:81:f9:61:e2:f0:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Nov 4 10:00:29 2025 GMT
Not After : Nov 5 10:00:29 2025 GMT
Subject: CN=224cbeb7933ce6c61dbed4dac534af99fa69747f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:3d:1c:25:de:2e:84:e4:7e:61:2e:2b:83:
38:cd:51:43:34:96:79:e9:d7:ea:71:9c:13:3f:0a:
92:4b:d4:1d:7d:fc:fc:33:69:27:dd:46:f5:b6:10:
8a:61:f9:73:2f:d5:c3:48:49:3e:b1:7f:ae:47:7b:
f4:95:4d:4f:18:54:0c:87:c0:5b:be:35:4a:92:fd:
57:bc:78:a9:50:af:ce:37:04:5f:75:0b:6f:fb:43:
af:d8:0e:93:88:32:3a:c9:7c:e5:9a:ce:9a:72:9d:
91:d8:36:6b:59:81:b4:40:39:f3:9a:3a:be:26:4b:
08:8d:61:e1:50:59:2f:cf:ac:9f:d7:cc:cc:15:f0:
a9:83:d1:c4:7a:dd:f0:08:bf:d2:70:4d:b7:94:c0:
d8:6d:4d:8b:11:b6:17:a3:ba:84:b1:95:a9:d9:9a:
97:06:b6:d2:ea:c6:99:35:87:86:d7:fe:33:e7:77:
fe:2c:6a:bb:39:fc:2c:7f:b5:c7:01:59:6d:38:41:
82:78:db:7c:d0:7f:46:fc:29:69:5d:55:ba:0c:3b:
d7:83:bf:8d:e0:e8:fe:2c:c6:c5:c3:bf:a5:d2:d9:
25:f5:05:ae:03:96:1b:90:d2:dd:c9:c8:c2:bc:4f:
42:54:aa:fe:6a:f5:dd:8f:ca:7e:74:00:ab:dc:d1:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4C:BE:B7:93:3C:E6:C6:1D:BE:D4:DA:C5:34:AF:99:FA:69:74:7F
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:43:bb:9b:f5:8c:00:bc:30:ce:7d:c4:70:3f:b8:2e:0a:75:
b8:44:74:0a:de:87:b7:4d:a1:c9:85:48:b8:fc:75:22:41:41:
dd:fb:49:0f:e2:1b:26:a5:17:5c:a3:01:aa:55:16:b0:8c:3f:
49:5b:d0:3c:94:db:78:50:17:52:4c:1c:e2:97:21:3c:83:c7:
7b:d9:64:b1:4d:58:db:70:33:8d:de:67:f5:ca:99:c5:14:b4:
f1:34:c5:50:b4:fd:e0:75:a2:10:8c:f7:7e:6b:48:14:d0:e1:
f6:0d:e1:da:40:c8:52:4d:b7:73:13:5c:dd:5e:92:99:c2:bc:
e5:8c:b3:9d:5c:18:c9:a1:8b:c8:9b:e0:c0:4e:5d:fa:26:5b:
09:73:f2:a2:61:15:dc:97:79:76:99:73:e1:8e:45:3e:29:f2:
28:57:6b:9b:27:e2:cf:fd:ea:82:f6:1c:c5:5d:43:e7:8f:51:
44:22:3a:47:d5:c5:23:f5:23:32:f8:7a:40:30:9c:ec:38:71:
e4:c2:91:d0:36:42:d7:6a:12:cc:71:07:97:56:e4:90:a2:3f:
eb:0d:67:7b:e2:10:06:7a:66:b8:12:8d:d9:1b:39:23:20:34:
e0:6d:fb:20:21:17:6d:f3:d9:9e:d3:5c:15:a5:f3:99:c4:ce:
c5:91:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:41:27 2025 by rpki-client