Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: wIxBOasDTe0BV6MZ9KBKEXvdXjhuwzJ+/Zh6OECqn/g=
Subject key identifier: 50:5C:F1:F3:8B:81:27:17:A0:06:87:FF:BF:82:91:B8:25:3E:A4:D8
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 019A503E5C194B0C99E61C2255ED37FDA1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 063B
Signing time: Tue 04 Nov 2025 19:00:55 +0000
Manifest this update: Tue 04 Nov 2025 19:00:55 +0000
Manifest next update: Wed 05 Nov 2025 19:00:55 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: 2EIQqSvBRmLfa58YgK0zsA+7afMx2TubM/8pl5tf17M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:5c:19:4b:0c:99:e6:1c:22:55:ed:37:fd:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Nov 4 19:00:55 2025 GMT
Not After : Nov 5 19:00:55 2025 GMT
Subject: CN=505cf1f38b812717a00687ffbf8291b8253ea4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:6d:b3:5e:34:b3:73:0a:06:bf:ce:f4:53:
62:72:94:08:92:07:e7:13:07:ea:e2:92:41:5e:7d:
9f:38:02:61:cb:eb:8f:0c:51:40:88:a6:d7:75:21:
ee:ba:d6:6a:06:f6:1e:ed:e3:80:21:eb:ff:59:ed:
a6:65:87:b4:ca:5e:3b:02:f9:84:ba:78:bb:9c:dd:
9e:b2:19:cd:7f:d2:10:72:1b:5c:78:d8:d6:a0:12:
03:32:ab:23:6a:25:de:c8:fa:60:83:13:59:86:75:
20:c0:1a:d0:54:f0:85:d8:2a:5a:e3:4f:4e:41:a3:
ed:1b:60:db:cf:a6:47:da:32:37:bc:16:1b:e8:e7:
c8:13:5e:68:85:db:2e:26:67:b8:42:ca:ce:32:7a:
94:00:c5:ce:be:ac:bc:1e:0e:82:72:ee:0f:f5:9f:
e6:8f:b5:6d:2f:dc:d2:98:11:46:4e:cb:dc:2a:dd:
1a:0c:52:bf:1f:d5:d0:4e:e4:68:01:1e:80:e5:ae:
50:d9:e6:f4:ae:45:9b:23:53:8e:67:57:55:9c:96:
53:c7:b2:70:74:7e:06:5a:80:e5:e2:45:f4:95:e6:
67:ce:e5:3b:9d:26:14:11:d7:65:4e:3b:a7:39:2c:
04:ff:3a:bc:e0:26:a9:4b:28:15:e6:fc:73:3d:7b:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:F1:F3:8B:81:27:17:A0:06:87:FF:BF:82:91:B8:25:3E:A4:D8
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fa:75:b5:0b:59:11:84:7c:f3:2e:48:0c:70:b5:4b:42:51:
bd:75:c2:d3:29:23:5f:f8:3f:30:ae:69:03:f1:ab:a5:b1:60:
03:e1:cb:c8:31:e0:77:26:5b:1b:fc:cb:7a:52:3b:07:e9:4a:
59:2d:5c:b7:40:dd:43:73:07:16:85:dd:98:74:ae:64:90:dc:
16:36:f9:50:6b:34:3b:b4:3f:c5:3f:38:cc:a6:00:72:e7:bb:
d3:dc:9f:7d:4c:0c:7c:75:02:49:b0:35:a7:20:19:1e:e6:e9:
2e:9c:c1:32:9f:52:dc:19:99:14:cc:52:7f:3d:86:43:42:1e:
5a:bf:b1:ad:bd:52:06:7c:24:b2:ff:36:0e:d9:d1:c5:f5:8b:
13:d8:df:5c:30:95:75:79:58:5d:67:f5:f9:34:eb:f7:bc:c3:
2c:ee:08:b9:f2:4f:c0:87:00:b9:48:54:8b:e4:69:22:17:b6:
f1:e4:f5:71:e7:e9:ce:84:07:68:16:8b:44:45:7b:a2:62:8a:
3d:d1:81:ad:b9:36:8f:55:7a:65:05:8e:42:05:b0:c0:a5:3b:
09:3a:5c:d3:7e:a1:fb:92:bd:6f:a3:0c:4a:02:ac:da:1a:c0:
f9:1c:ed:a7:2b:37:03:2d:5f:c2:f3:0a:d1:d4:6c:56:d1:6b:
1b:99:38:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:52 2025 by rpki-client