Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier: Pof+ShznmBI9SwbfSIuQpzkvfXImxpQJ9o9nsaoyjqA=
Subject key identifier: BB:F4:06:A4:EC:0B:3E:8C:3A:62:30:82:D1:C8:BE:7E:98:4B:20:A8
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 019A522C38E82598820DA9913F437B188866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number: 0939
Signing time: Wed 05 Nov 2025 04:00:21 +0000
Manifest this update: Wed 05 Nov 2025 04:00:21 +0000
Manifest next update: Thu 06 Nov 2025 04:00:21 +0000
Files and hashes: 1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: 9B5Mp1RFDHxHrhS41BkJFViP3ToRDxD2TqKzI1uXROI=)
2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:38:e8:25:98:82:0d:a9:91:3f:43:7b:18:88:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Nov 5 04:00:21 2025 GMT
Not After : Nov 6 04:00:21 2025 GMT
Subject: CN=bbf406a4ec0b3e8c3a623082d1c8be7e984b20a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:99:66:af:62:61:4e:d9:83:6f:24:59:fe:
54:58:a3:a1:40:fe:3c:9e:ba:8d:5d:02:0d:96:d3:
b1:71:d7:6a:0c:04:00:f5:91:5e:4f:8c:2b:d8:64:
2b:20:91:e7:84:8a:99:d6:e8:eb:53:39:e7:86:90:
4a:5e:b9:db:55:a6:f4:90:ee:bf:be:9d:05:a6:c2:
87:0e:81:1a:f3:f0:3c:9a:05:11:1a:5a:22:1d:31:
be:56:b4:4c:5d:e5:19:25:bf:88:f6:34:45:8d:72:
52:ea:ad:4c:d0:99:cb:5e:5a:82:1b:3c:f7:81:fc:
0b:fb:d8:67:5d:e4:07:5e:c2:4a:2d:e7:9e:9d:87:
7a:e4:b0:7b:7e:f6:c7:04:b5:a2:cc:2d:db:bf:a2:
36:41:62:0c:9d:95:82:f1:2f:f3:e2:d2:f0:59:44:
ed:09:a2:ce:78:b9:c0:03:9a:e4:83:c3:03:24:46:
f6:a4:ab:b5:e3:0f:55:40:09:8f:04:c6:82:0e:9e:
8f:6c:71:07:05:bc:78:19:92:e0:86:94:c1:22:ed:
4e:87:f8:c9:19:b2:a1:81:e3:21:23:04:ef:49:a9:
cd:09:6c:77:77:6b:17:3c:35:01:81:9a:61:5f:30:
30:aa:bc:7d:85:6e:b8:0b:09:b1:af:ac:60:f5:af:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F4:06:A4:EC:0B:3E:8C:3A:62:30:82:D1:C8:BE:7E:98:4B:20:A8
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:98:99:c6:91:df:27:95:fe:51:4f:3a:ce:23:07:27:ed:86:
8d:84:74:5d:45:de:0c:63:5e:d7:26:76:51:22:00:de:38:66:
8f:dc:fb:09:ce:bc:e2:f9:c5:34:49:90:87:7f:3c:70:44:f1:
45:7d:9f:41:fd:9d:cc:ef:69:50:f4:0d:2a:ba:4f:1d:50:c6:
15:3f:f1:83:c2:84:e8:b4:da:78:78:1b:4e:35:50:ed:72:7c:
92:05:4a:83:d2:cf:93:02:8a:35:8b:a8:b8:5d:d1:1b:72:50:
aa:e6:0c:7e:8e:72:c3:6e:34:d9:00:39:9d:fb:f8:0a:ed:27:
12:be:07:a3:b0:bd:80:e4:16:8e:36:03:a6:99:8d:4b:ff:07:
19:36:e9:a4:aa:53:23:a2:f0:1f:22:56:09:9d:61:c1:f6:8b:
49:01:d3:b9:a8:00:8a:7a:88:e0:01:a1:42:67:9f:d8:8c:1a:
76:5a:46:38:7e:20:c7:a8:56:c9:3f:86:42:ac:8f:58:20:d9:
32:1a:96:36:c9:a6:11:74:7e:56:77:82:ae:10:c1:0f:88:4c:
91:f2:4b:c5:f4:54:42:5d:d8:9e:c6:3a:ea:2b:36:18:80:8e:
fa:0a:41:14:8e:80:3d:e1:d5:9c:ac:09:24:b1:32:92:b2:22:
35:c2:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:40 2025 by rpki-client