Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
File: mXwn0VtG2xhLwCswPIa0fEScG1Q.mft (raw, json)
Hash identifier: n1dDYgtHLvnjP0hM/BF21BjaaKzjzuhudqRsBZYx3IE=
Subject key identifier: F1:84:5F:02:7A:47:9F:39:3D:90:AA:F0:04:BB:99:E9:8B:23:13:4E
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Certificate issuer: /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial: 019A4D741D5CD78B70AEDD5836772B06DA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
Manifest number: 0FD1
Signing time: Tue 04 Nov 2025 06:00:46 +0000
Manifest this update: Tue 04 Nov 2025 06:00:46 +0000
Manifest next update: Wed 05 Nov 2025 06:00:46 +0000
Files and hashes: 1: JpZlGPUSnNPcPAQ7HrfbEiiCY90.roa (hash: sj/ySyRWLvZHGTxRHODxTY1XK4NRx1uXT8wwjiiWvG0=)
2: mXwn0VtG2xhLwCswPIa0fEScG1Q.crl (hash: nyarV6J2RU1+OGlJtkaaAeLgj9VgE4ruT/6kVkYyNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1d:5c:d7:8b:70:ae:dd:58:36:77:2b:06:da:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Validity
Not Before: Nov 4 06:00:46 2025 GMT
Not After : Nov 5 06:00:46 2025 GMT
Subject: CN=f1845f027a479f393d90aaf004bb99e98b23134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:8f:3f:b4:ba:91:f6:b0:2d:f8:e4:1f:92:
eb:a3:a5:28:5f:19:d6:ca:24:12:7e:53:d2:3e:9d:
31:76:e5:d8:56:c7:ca:ad:85:15:59:d3:f2:1c:47:
8d:ff:18:7d:49:98:21:45:ae:36:fd:e0:fd:51:8c:
49:d3:64:3e:0e:88:5f:cc:af:f5:11:8f:47:6c:77:
9b:96:e9:a4:77:e0:fd:aa:77:33:08:c8:f7:76:17:
46:05:bd:f9:10:01:12:f4:8f:ed:5c:6f:76:ca:e2:
f4:ec:2e:31:8c:15:40:fb:be:15:2c:44:89:3b:4c:
57:bf:85:0c:be:51:1b:fb:18:52:a5:32:1e:3c:fe:
d4:4e:92:73:29:90:d5:ad:1e:a3:ec:fb:32:bb:cd:
7b:46:a1:f9:5e:79:0c:44:f4:37:00:4d:cd:11:6a:
ad:af:ff:7e:4c:a1:d6:b4:95:47:fd:c7:e5:de:13:
c8:67:ed:af:af:eb:f1:d9:07:75:d8:f2:32:97:8c:
64:a9:3f:95:f5:1f:f3:8c:1a:cb:82:25:97:b0:6c:
56:19:44:19:47:74:15:02:b2:5b:df:73:36:35:d4:
cd:02:e3:84:37:8f:9a:e9:ce:63:c3:99:f6:ef:94:
17:26:78:d6:0c:32:6f:94:ef:09:61:df:d8:5c:73:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:84:5F:02:7A:47:9F:39:3D:90:AA:F0:04:BB:99:E9:8B:23:13:4E
X509v3 Authority Key Identifier:
keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2d:2a:47:bd:c6:b0:fe:14:d0:56:30:f0:55:38:4a:b5:46:
4a:d3:e9:bd:48:f5:7e:08:22:b5:de:72:3f:7a:ab:28:b6:92:
ec:6a:04:67:ae:c0:62:31:06:8d:c4:65:f0:fd:37:cc:d4:ef:
f9:27:f0:b8:eb:c5:9c:4f:28:aa:ac:50:41:eb:ff:7c:9f:34:
6b:30:e1:c9:09:cf:27:10:78:2a:c5:7f:36:b8:24:86:43:a6:
6d:0a:84:cf:19:53:fa:ab:d2:94:f2:1c:6b:c4:a0:53:55:24:
08:e8:02:d6:1f:16:70:a2:e5:5d:73:96:39:dc:bd:b7:0c:36:
5c:c8:f5:c2:8a:2d:24:13:88:37:1b:0f:e2:07:ab:ca:ad:b9:
81:94:3f:ef:c9:02:ed:a9:97:15:b6:51:86:7b:0f:a7:47:d0:
da:22:d9:5e:cb:06:77:61:49:fa:c4:11:78:f8:4e:23:80:28:
7a:83:25:ba:39:f4:d6:1e:50:82:09:fb:12:9b:a5:ca:de:82:
b1:4e:3e:78:a6:a0:45:5d:b3:5c:c8:01:ad:f7:e3:fd:34:03:
23:fa:35:5a:4b:7e:ca:e6:71:14:ae:cc:85:29:4e:2d:28:7d:
cd:ea:50:1a:2e:1c:87:c9:a1:3f:c9:a6:c1:d9:a2:62:56:78:
8c:c4:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:59 2025 by rpki-client