Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier: +he6vGIUNIl8JraP2tkHTADrRY1ljnYY1MXjcxgwL14=
Subject key identifier: 45:2F:C9:69:E7:06:0D:52:6D:7F:65:A9:87:30:17:5C:F3:FA:41:FF
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 019A4E8661D39EDB16C2BAA75147D55AF3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:20 +0000
Manifest this update: Tue 04 Nov 2025 11:00:20 +0000
Manifest next update: Wed 05 Nov 2025 11:00:20 +0000
Files and hashes: 1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: 2sQ+em/J6yrk9Ygale27C7rqjdNnpvuImWk81FMtSE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:61:d3:9e:db:16:c2:ba:a7:51:47:d5:5a:f3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Nov 4 11:00:20 2025 GMT
Not After : Nov 5 11:00:20 2025 GMT
Subject: CN=452fc969e7060d526d7f65a98730175cf3fa41ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:b9:93:34:82:2c:b7:72:a8:87:3e:71:3e:
7d:e0:62:0d:07:e3:c5:c4:4d:e2:b7:4a:c6:d5:44:
35:4c:25:0c:24:60:e5:4e:e4:0e:48:89:20:9d:f2:
c0:8c:ab:d8:1a:a7:11:6f:0a:89:44:e6:e3:5d:66:
60:7b:f9:27:92:18:ad:bb:7b:89:41:b9:a4:20:96:
7e:c1:32:64:8f:82:66:39:35:1c:1d:80:6b:6e:60:
3e:ee:32:a6:75:b3:bb:11:cf:0f:94:9c:13:76:af:
05:7b:3f:8b:03:cd:3f:49:23:9f:a1:c5:a6:ea:96:
e2:bf:08:82:13:2e:c0:72:bf:41:28:ad:04:55:98:
7e:a2:39:2c:74:d5:94:26:fc:81:db:70:d0:6e:28:
d9:6b:6e:11:6b:98:a2:ca:00:ef:74:2c:3e:fb:20:
e4:c6:53:80:67:94:5a:d9:6c:34:46:a8:9d:1a:55:
c9:94:d5:eb:21:78:b7:c7:e6:34:5c:f9:79:25:9a:
2e:40:3c:a0:1f:43:f9:d1:0e:64:9b:97:6b:4a:2a:
ce:28:35:02:3e:ef:ab:59:87:90:b8:c2:4e:2e:76:
1f:01:c4:b6:75:cc:f7:e3:93:e0:40:b1:7d:8c:38:
8a:9b:fc:3e:7c:a7:45:6a:53:03:eb:46:e8:e7:15:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2F:C9:69:E7:06:0D:52:6D:7F:65:A9:87:30:17:5C:F3:FA:41:FF
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:68:86:ff:b8:83:be:96:a7:73:a7:83:f2:e8:55:3e:1f:b8:
7b:2e:05:01:ff:74:e4:c8:e6:cb:75:39:c8:c6:3c:fd:9b:07:
3d:82:92:8b:81:4b:7b:36:fe:9c:bd:4e:2b:83:92:ed:88:e8:
3e:da:ce:5d:e9:9d:60:66:35:7f:2b:60:ed:c5:28:7c:89:27:
5c:5c:ed:06:82:e2:98:e8:87:bc:12:0c:c6:f0:8a:dc:2e:04:
3f:46:0c:9a:39:a4:f6:87:02:ca:9c:5b:43:6c:61:bf:55:2c:
c4:28:bb:23:7d:25:82:3b:91:5a:5e:f0:f1:ec:ef:2c:f6:82:
c6:b7:51:a4:57:7c:aa:21:c5:97:4c:85:85:5e:21:4a:0a:ac:
77:33:27:2f:0e:d5:9d:17:5a:ca:90:c6:b4:14:dc:cb:75:18:
f4:56:5f:2a:61:02:91:07:62:8d:bd:0a:f6:6a:6f:77:9a:2c:
2f:6d:e1:85:b5:e9:ac:dd:4f:cb:8b:71:09:37:e7:88:29:4e:
69:a9:fe:93:b0:fd:83:2f:91:f9:3f:f4:95:67:c1:6e:8f:2b:
7a:a2:fd:40:45:5c:51:51:c4:d7:dd:16:b5:4e:a3:9f:57:41:
c9:85:1b:22:aa:ae:db:af:bc:3c:c8:6d:dc:a6:28:02:45:21:
c8:7f:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:57 2025 by rpki-client