Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: XvPzDdPx0Lakf2D6bCtdtRMJJj9Z0QgVrDQagLG4lIg=
Subject key identifier: 34:BD:4E:12:54:33:93:37:3D:6D:5A:3D:89:2A:C3:D0:08:6F:08:CB
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 019A4E4FB03B23CCD5842F78DF7640922F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0948
Signing time: Tue 04 Nov 2025 10:00:36 +0000
Manifest this update: Tue 04 Nov 2025 10:00:36 +0000
Manifest next update: Wed 05 Nov 2025 10:00:36 +0000
Files and hashes: 1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=)
2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: e9QKpAL3h0Kry+usuiabv0mhZh96+bdUfmgju9V/QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b0:3b:23:cc:d5:84:2f:78:df:76:40:92:2f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Nov 4 10:00:36 2025 GMT
Not After : Nov 5 10:00:36 2025 GMT
Subject: CN=34bd4e12543393373d6d5a3d892ac3d0086f08cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:ca:e0:81:69:fd:5a:aa:3e:f0:73:bb:e2:
77:02:2d:46:c3:5f:90:a8:bd:44:ec:bb:74:f5:b7:
21:0a:6f:56:62:a6:d1:b4:a6:5e:48:c8:26:41:23:
00:c3:76:33:f4:37:30:51:c8:f1:4a:e8:ba:e0:be:
bf:1a:75:91:33:b2:99:d8:58:f1:6a:4b:4f:11:7f:
57:8d:36:71:d6:b9:37:e9:24:44:e8:33:f9:84:8c:
11:5d:c1:2e:45:a0:6b:6a:e0:91:84:c6:7b:79:6f:
4d:44:82:09:fc:ea:38:00:6b:ce:74:11:80:4a:cf:
e1:86:e3:3f:86:18:b6:ad:03:e2:6f:b3:a2:ee:6e:
4c:9c:b4:be:44:57:6f:4d:bd:a9:4b:91:3a:be:22:
08:7e:ca:05:e8:ac:68:54:77:39:5d:9e:26:1f:51:
d3:af:a3:83:90:88:4a:49:48:2b:d1:ed:9d:b2:e8:
06:a5:57:9f:96:32:f9:e4:79:67:f7:a9:93:7d:d7:
dd:78:b6:9c:fb:d1:04:6d:f2:cb:61:f5:c8:9d:e1:
ac:6b:d1:7e:d3:30:2f:21:90:1b:44:04:60:cd:c4:
d9:4f:3a:90:e5:0d:ee:eb:c1:b8:d7:2a:e6:c9:d1:
9c:ba:ea:6b:15:4f:41:a6:fe:2f:c2:b8:7c:0d:f7:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BD:4E:12:54:33:93:37:3D:6D:5A:3D:89:2A:C3:D0:08:6F:08:CB
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b7:e2:d0:dc:44:4b:a8:e8:93:de:91:01:8c:98:ae:17:25:
10:09:21:b2:05:8d:fc:45:dd:d4:12:bf:1a:71:af:8a:de:31:
45:9d:cb:b7:dd:22:df:a2:ae:8a:94:90:b9:34:7e:5d:b9:f0:
84:1d:dc:56:2f:8b:74:6c:f7:58:42:b6:93:5f:a9:f2:24:4d:
4f:8d:d4:7f:31:c4:50:87:c6:dc:13:6b:98:fc:67:44:85:04:
95:be:d7:1f:66:65:eb:ea:47:27:67:78:df:d7:9c:ce:c1:44:
4a:6e:39:50:10:f2:11:72:4e:f4:c5:86:f2:dc:03:c0:45:fa:
52:43:88:2e:85:b1:5c:ec:80:cf:de:7f:ff:04:43:76:98:40:
88:32:c2:96:a9:14:30:09:58:a0:00:ae:84:db:d7:59:5f:6a:
1c:1d:36:63:ba:41:a8:6d:60:ac:23:76:19:e9:15:57:4a:75:
4f:76:31:04:90:27:d3:98:e7:e3:15:b6:24:5f:9e:44:a6:93:
26:60:78:b3:40:b9:45:0c:43:cb:3a:47:85:13:ab:fd:1a:79:
ae:17:bb:8a:17:78:9a:e9:b6:ab:6a:e7:6d:fe:11:66:83:43:
28:59:46:8d:02:98:4c:54:33:dd:8e:0d:2b:d7:88:80:75:66:
d0:0a:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:41 2025 by rpki-client