
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File: e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier: ftLlVVMo3wMocY+QE76NxXszb1CpL+FaEa/fGk9gqW0=
Subject key identifier: 62:A6:26:7C:75:14:54:93:2A:FA:CF:D6:C9:75:5C:0F:8C:BC:6F:F0
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 019A522CE7F6A8BBF160DED3425E44D9DA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number: 1716
Signing time: Wed 05 Nov 2025 04:01:05 +0000
Manifest this update: Wed 05 Nov 2025 04:01:05 +0000
Manifest next update: Thu 06 Nov 2025 04:01:05 +0000
Files and hashes: 1: 2vvTx_yFrt5UrJ0WVDTO--gQh60.roa (hash: eB4HsG9FbYTVRCz9S1t9E+zrZDYTm7BTeCXp3dMiZIo=)
2: 7JHYrzTxN9asgLqVnNRUfP1LZ10.roa (hash: ChCGPqEl2ro34qpoNR4Xt2LPCuZTPhOJ4X9rWHYGEBA=)
3: IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa (hash: z5Pywc8Q1iL9qP7SJuBWFjeFMCxifvSPuK7zriYnBBA=)
4: Q0Z-cVwA4XOeztdkNcwehwFNVmI.roa (hash: MwfJgtXJrn1M2+nm68X48C8kqLl8c52QU/MPByryzoA=)
5: QvqihRljCm445jweQ6gFK7wXIOs.roa (hash: b6Ii57U4Sye1rJOrny/XLuYZqJiC9WdbHx+cBgoka7I=)
6: T-_3CIyQbqlGg305SxQy5ftJI7w.roa (hash: F0s6Ci0GqXXpEL55mUmVrJT+nL7cPcs5GgzPcy37r9s=)
7: e71RJyBktjssZjwClroR216iOMA.crl (hash: NtHnzrSWVcotG/GbH32luz+YofJps7sEcV5DIM74JY8=)
8: huUdoRBrSkw9ERfAbY_K0ms09AQ.roa (hash: /chnp5DKS977ybnp/eJrPNXNv/laADFMHK9MLA974oE=)
9: s7qZwF1zjjkn93vRYJKMTeg7njg.roa (hash: pDr3B3csiw+fcAUQmbSFOppqABEiwfJIZfstULKUEoQ=)
10: vuOqkJ576TdEaXJp1TfrxOCwRC0.roa (hash: Z+MjMiYxt6MDAWfYglmjvECMwme4DjstDsJyATyGhhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:e7:f6:a8:bb:f1:60:de:d3:42:5e:44:d9:da:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Nov 5 04:01:05 2025 GMT
Not After : Nov 6 04:01:05 2025 GMT
Subject: CN=62a6267c751454932afacfd6c9755c0f8cbc6ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:9a:98:c8:4f:8f:7c:17:30:33:90:35:f0:
ef:9f:1a:b2:b7:b5:52:38:99:1c:e4:36:eb:b8:62:
89:07:2c:65:18:b2:b5:a2:bc:c1:88:ad:17:ff:f3:
f3:a4:52:46:a8:84:cd:11:2e:6f:ae:0b:87:cf:c0:
a4:4a:2d:54:72:f4:9a:e1:a6:1f:12:60:0c:8e:02:
f8:75:c6:30:7d:b5:28:36:e7:28:2c:76:3c:2f:e8:
d9:47:59:ad:eb:7c:64:04:13:bc:f6:bb:1f:8d:28:
5c:94:92:7f:97:0d:4b:bd:a0:4a:bd:f9:ea:a8:3e:
d9:40:76:48:f2:24:01:e6:c7:78:f3:eb:ae:f1:d7:
6c:2f:05:29:92:ac:ba:ab:3a:97:0c:da:c2:97:c2:
30:50:fd:66:b7:ae:a4:dc:f0:ef:15:73:bc:f3:e5:
05:85:a8:95:af:29:82:48:58:46:ab:20:42:26:99:
4b:0a:4a:fb:79:de:4b:9d:da:dd:cf:45:61:b7:de:
4a:41:ef:f7:b4:db:cf:e9:99:51:d3:e0:1f:3f:fe:
da:85:b7:12:24:54:48:96:c5:3a:5f:0d:88:38:c2:
a0:16:cc:fb:6e:8e:03:fb:3b:47:56:f5:24:c6:0e:
15:a6:92:1a:22:dc:20:68:e2:4a:7f:76:a8:ee:94:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A6:26:7C:75:14:54:93:2A:FA:CF:D6:C9:75:5C:0F:8C:BC:6F:F0
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2a:8b:ba:45:b4:9f:7a:72:47:6e:e7:56:aa:b0:3f:78:64:
2c:7e:5c:93:32:db:4c:72:36:e9:ad:65:74:b9:68:71:b6:0d:
6c:5a:92:89:7f:6d:bc:fc:c4:93:59:f5:33:18:97:b5:60:71:
fb:45:38:ae:16:7f:49:26:7a:67:87:8c:42:c4:5a:47:a4:c0:
d1:80:bf:70:8c:9a:67:47:c6:db:16:03:64:08:71:c3:57:56:
38:1c:48:ca:e4:86:e1:3b:5d:b8:be:a2:9a:7d:c1:f6:74:62:
f0:f6:2d:67:bb:1e:d9:ee:04:1e:e8:bf:87:71:86:78:ff:72:
ad:21:03:27:87:9b:74:49:3c:3b:46:73:fa:f8:2c:ac:40:e2:
6c:bb:d8:40:db:7d:2d:36:6f:e0:1e:cc:39:67:cf:bf:87:8b:
78:17:e3:b0:8f:b1:59:9b:56:8b:cf:da:a6:0b:da:69:f8:43:
5a:d3:74:1f:89:04:0d:a7:a4:cb:a9:ab:af:fa:fd:9b:7b:b7:
4c:f1:9e:56:6d:10:9f:b0:f9:33:d6:f7:4e:9f:de:d2:41:6b:
79:cf:5d:29:3e:3c:cb:92:0a:94:ca:ae:77:ee:63:00:b6:c6:
52:34:ed:66:17:38:19:15:92:68:f0:0a:62:21:ec:d6:05:78:
8a:18:68:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLOf2qLvxYN7TQl5E2dp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh
MjM4YzAwHhcNMjUxMTA1MDQwMTA1WhcNMjUxMTA2MDQwMTA1WjAzMTEwLwYDVQQD
Eyg2MmE2MjY3Yzc1MTQ1NDkzMmFmYWNmZDZjOTc1NWMwZjhjYmM2ZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JeamMhPj3wXMDOQNfDvnxqyt7VS
OJkc5DbruGKJByxlGLK1orzBiK0X//PzpFJGqITNES5vrguHz8CkSi1UcvSa4aYf
EmAMjgL4dcYwfbUoNucoLHY8L+jZR1mt63xkBBO89rsfjShclJJ/lw1LvaBKvfnq
qD7ZQHZI8iQB5sd48+uu8ddsLwUpkqy6qzqXDNrCl8IwUP1mt66k3PDvFXO88+UF
haiVrymCSFhGqyBCJplLCkr7ed5Lndrdz0Vht95KQe/3tNvP6ZlR0+AfP/7ahbcS
JFRIlsU6Xw2IOMKgFsz7bo4D+ztHVvUkxg4VppIaItwgaOJKf3ao7pQbeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKmJnx1FFSTKvrP1sl1XA+MvG/wMB8GA1UdIwQY
MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt
OTdjOWFhYjgyOGYyLzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy
LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyqLukW0
n3pyR27nVqqwP3hkLH5ckzLbTHI26a1ldLlocbYNbFqSiX9tvPzEk1n1MxiXtWBx
+0U4rhZ/SSZ6Z4eMQsRaR6TA0YC/cIyaZ0fG2xYDZAhxw1dWOBxIyuSG4TtduL6i
mn3B9nRi8PYtZ7se2e4EHui/h3GGeP9yrSEDJ4ebdEk8O0Zz+vgsrEDibLvYQNt9
LTZv4B7MOWfPv4eLeBfjsI+xWZtWi8/apgvaafhDWtN0H4kEDaeky6mrr/r9m3u3
TPGeVm0Qn7D5M9b3Tp/e0kFrec9dKT48y5IKlMqud+5jALbGUjTtZhc4GRWSaPAK
YiHs1gV4ihhopA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:06:51 2025 by rpki-client