Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: nKZBceQC1HF1OOGyBDermGXqo0Df9FmgR/zSSyugbu8=
Subject key identifier: 2E:27:BE:82:0D:B1:1B:6F:64:C0:AE:DB:FA:69:4C:B0:C5:5E:39:7F
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 019A4E4FAA60BD53FAAC492A94B88A5D083C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:34 +0000
Manifest this update: Tue 04 Nov 2025 10:00:34 +0000
Manifest next update: Wed 05 Nov 2025 10:00:34 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: qwPXALAmNkjGO8t/NS+1z5WE+D3GC7AS1oA2vfMoWSE=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:aa:60:bd:53:fa:ac:49:2a:94:b8:8a:5d:08:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Nov 4 10:00:34 2025 GMT
Not After : Nov 5 10:00:34 2025 GMT
Subject: CN=2e27be820db11b6f64c0aedbfa694cb0c55e397f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:17:56:0f:f7:6f:4c:25:a8:04:8a:bc:f7:
81:fa:88:6a:94:1f:87:6f:bc:ce:75:b0:a6:d6:03:
d5:14:cf:7a:2a:f4:63:d0:99:51:67:ef:6d:19:bb:
57:c4:43:56:9c:a1:94:e9:46:a4:96:06:2f:33:7e:
c7:d8:7a:c4:31:0a:db:f3:ce:4f:a9:a4:91:1b:a6:
84:7e:59:cc:3e:7b:9c:ff:00:bb:4a:ff:54:91:c7:
6a:50:18:f9:cc:7e:46:81:73:98:e2:64:16:e8:03:
89:f4:b0:37:b4:05:e9:e8:a6:a1:fd:8e:df:6a:67:
4b:42:1c:ab:f6:6f:35:52:4d:fb:e0:8b:de:94:9f:
55:92:6b:23:52:30:26:60:53:23:36:e1:c1:8f:09:
e8:ec:2e:95:56:05:63:bc:c1:e9:12:1d:13:94:83:
61:3d:a6:c1:b4:2b:74:da:89:0c:75:bc:78:3e:52:
d1:8f:cb:21:74:d4:bc:ce:4e:56:ad:62:0e:5d:62:
93:cd:a1:82:45:b5:05:af:b1:04:a8:00:25:42:bd:
db:a9:b1:3c:6a:4f:6a:36:2f:e6:01:26:bd:b1:80:
9d:8e:2f:ef:58:9e:3b:61:40:3d:73:05:03:6f:82:
b9:95:12:c6:8d:87:99:37:39:c4:a8:51:4d:f7:7a:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:27:BE:82:0D:B1:1B:6F:64:C0:AE:DB:FA:69:4C:B0:C5:5E:39:7F
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:83:08:7d:7c:4e:91:02:fb:f8:f1:06:cb:e5:02:46:32:b4:
2b:7e:e2:a2:24:7f:48:d1:a4:25:2b:db:98:8a:7e:fa:64:43:
93:f0:9d:26:29:f7:ab:c8:b1:18:0a:06:a9:60:55:0a:59:5a:
f9:76:9e:21:d0:38:9d:df:37:78:5d:e4:f9:dc:86:64:da:3b:
97:cb:39:dd:c0:59:3a:4a:b7:23:2b:f8:71:8c:43:48:25:c9:
b0:b8:8e:48:6a:c6:fb:0f:2f:d3:3e:8f:01:cf:4f:3a:64:07:
74:62:6e:e7:fc:e1:13:47:1f:60:70:48:91:8d:50:91:12:27:
96:73:e7:c1:ee:19:8a:27:a6:f3:66:bb:dc:c3:2d:85:24:d0:
af:10:96:ed:e5:af:f6:db:33:a4:bc:4e:85:f9:c7:01:ea:f8:
66:c2:77:78:d9:9c:f2:bb:1e:4d:aa:cc:ab:d1:4d:06:17:d7:
33:7e:31:67:a7:e5:63:8e:91:0e:b9:b2:b7:f7:42:bc:3c:0e:
0e:86:02:18:53:c1:18:71:8c:52:02:2d:09:0f:10:ea:63:18:
55:cf:ce:f4:90:53:e7:7f:84:2b:04:7c:ae:4d:47:7a:98:53:
f8:ea:15:69:72:90:cb:e6:29:e6:68:ad:f7:e1:30:3a:04:a3:
28:cd:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:48 2025 by rpki-client