Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: MEEBzzAPeOh8KYTPyfJ2hn8ijOs0+RD4zTdBUX67NXs=
Subject key identifier: 13:0A:27:D5:08:06:B6:00:CC:8B:F3:74:26:1D:DE:0B:7B:7D:2A:E7
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 019A511996254F265D576BE0032526559CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 095C
Signing time: Tue 04 Nov 2025 23:00:22 +0000
Manifest this update: Tue 04 Nov 2025 23:00:22 +0000
Manifest next update: Wed 05 Nov 2025 23:00:22 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: OU5XVl+jLOSvk6rCjwt/VyQqMHos2kleSi+/enWR4Ts=)
2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:96:25:4f:26:5d:57:6b:e0:03:25:26:55:9c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Nov 4 23:00:22 2025 GMT
Not After : Nov 5 23:00:22 2025 GMT
Subject: CN=130a27d50806b600cc8bf374261dde0b7b7d2ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:6b:37:27:a0:ad:49:68:1e:bb:3f:ba:a7:
0d:8a:06:41:87:6d:a3:27:a6:51:8f:b3:fc:9d:49:
46:6f:74:7f:ee:2f:d2:78:37:08:65:35:9a:9a:30:
68:55:6b:fa:49:f4:01:d6:64:da:7c:be:f2:67:5e:
13:23:22:a4:97:20:ae:54:b6:6d:4a:ea:6a:44:5c:
e1:f8:be:6e:d9:bc:07:01:37:56:99:25:3d:b4:4f:
42:ca:1b:60:7a:7b:8a:bf:d1:92:a2:50:ca:7f:bf:
0e:6e:47:05:3d:d6:3f:81:33:d4:b6:6c:e6:c4:4f:
a0:74:16:02:41:7a:2c:c4:1f:f1:72:9d:23:af:70:
0b:65:13:3f:f9:b1:0b:13:8e:25:0a:bc:f0:40:82:
57:de:65:0f:94:70:29:ab:7e:67:e9:49:3b:af:43:
c6:56:ff:5c:23:11:15:81:14:d0:cf:8d:4f:63:66:
e4:30:88:f8:50:11:0a:0f:38:dd:9f:06:19:46:4d:
8d:fe:5b:04:77:e2:7d:c9:75:42:32:72:c9:7a:2e:
46:9d:3d:aa:a6:56:f5:5e:a4:09:cf:91:44:ce:ca:
78:69:aa:0e:de:9e:7d:55:cf:a0:fd:54:eb:02:dd:
9d:0d:72:00:5c:e7:8d:fd:72:ca:bc:c7:43:8c:02:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:27:D5:08:06:B6:00:CC:8B:F3:74:26:1D:DE:0B:7B:7D:2A:E7
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0e:75:6a:19:03:de:6e:15:a6:a8:4e:a8:11:f4:fc:dd:c3:
81:10:ed:ac:1e:34:ab:10:fb:e7:7c:65:73:d8:e1:f5:25:a3:
09:04:74:ed:67:9d:3e:d8:68:62:f0:a0:fb:b4:8b:00:19:57:
d6:7f:9b:97:61:29:32:ce:50:3b:c3:9e:95:cc:2c:71:0f:d9:
b8:1f:f8:d3:30:e7:17:b4:9f:18:c5:33:c0:c8:e2:8a:7e:ca:
aa:3b:ec:44:d8:99:0f:46:3a:f3:ad:4b:b8:c7:1b:74:75:2a:
bf:6f:cb:67:e2:91:a2:a9:94:5c:81:53:7d:23:31:e0:1b:10:
85:84:24:af:de:86:d2:61:cc:94:93:f5:be:a0:6a:d8:96:69:
ba:7f:b2:15:a2:d0:c7:5e:1c:86:78:48:02:11:c6:79:16:b9:
50:28:aa:f0:ba:fc:4a:a4:4a:5c:65:f9:77:fe:65:a4:e9:fd:
86:e8:af:81:92:64:c3:55:a0:98:b0:9d:b8:52:10:b0:71:14:
97:c5:4e:e0:29:08:fc:ba:dd:8f:fa:9a:a0:61:b8:37:c7:d6:
e9:3d:bd:39:c6:75:80:53:d3:e6:ae:fb:62:66:de:0b:f2:59:
59:e4:76:17:a0:10:9f:41:77:05:9f:49:c0:b2:18:5d:a7:e5:
31:3e:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:37 2025 by rpki-client