Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
File: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft (raw, json)
Hash identifier: DWjc9hDy9hXFyg5VbDAdaShcahr05Jm1Sy1S348D5yw=
Subject key identifier: 68:72:A7:09:E9:BE:E7:DA:FB:1E:F3:65:0C:B9:BE:F6:DA:06:12:15
Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Certificate issuer: /CN=31533690ab184f433f1760f3feaa184c443e70f9
Certificate serial: 019A4F98F0DB8C99D6BA8C6B7ED4486D66A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
Manifest number: 06BB
Signing time: Tue 04 Nov 2025 16:00:14 +0000
Manifest this update: Tue 04 Nov 2025 16:00:14 +0000
Manifest next update: Wed 05 Nov 2025 16:00:14 +0000
Files and hashes: 1: 4H5f4KMuGUdiq20v6X15FIvWPCg.roa (hash: 1oOS4e7SC894+hZZBmJUAEBGgPQQh1AJU8M/EeMAfmg=)
2: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl (hash: NxYTaxQyOu7D72UWm3KSToDDdAwOSxciJN1iw1s/bKw=)
3: oWYw73o0XVlV6OpLKF4dF1YQeis.roa (hash: 5U7LFltASNwuXUP6x/MbRpxou9KC14KfkL67az3+D4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f0:db:8c:99:d6:ba:8c:6b:7e:d4:48:6d:66:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9
Validity
Not Before: Nov 4 16:00:14 2025 GMT
Not After : Nov 5 16:00:14 2025 GMT
Subject: CN=6872a709e9bee7dafb1ef3650cb9bef6da061215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:a9:63:9b:ef:db:ea:de:dd:6c:b3:d6:83:
a2:3a:f1:18:55:1e:8f:9a:85:38:ca:15:7e:3d:fa:
6f:94:48:ac:e9:21:01:9f:59:ba:6c:08:85:6c:a6:
9a:66:f0:38:2c:5f:89:b3:22:6c:b7:f3:84:85:8f:
7e:f9:b8:70:a8:f3:db:34:8f:f6:1a:9e:18:c3:b9:
ba:10:8c:83:9e:67:a2:eb:56:d1:11:b8:ec:d7:21:
87:46:12:9d:78:2e:78:6d:9a:9f:2f:fd:d6:0b:ea:
b4:de:52:08:b4:ba:8b:a2:23:d3:1d:8e:65:f9:a5:
de:47:57:64:2b:3b:21:9d:79:f2:d5:ef:d4:d0:4c:
bc:de:3e:b8:05:8a:ca:2c:1d:40:90:cf:d1:1f:ba:
af:bf:98:70:f0:80:97:ca:76:7c:4d:c5:06:c9:93:
13:b4:c7:4b:55:06:ea:11:ff:3d:91:d2:22:48:47:
a3:9b:07:4a:1f:59:e1:7b:1b:21:a4:82:b9:9e:6d:
54:15:ae:23:0f:36:a4:47:1b:c8:4b:83:0e:16:ad:
ad:90:44:24:5e:b2:fd:36:db:a5:4f:90:d0:4c:83:
0d:8e:ea:96:70:64:cd:93:91:87:d5:cd:d0:48:56:
56:a6:e1:9b:d7:e5:f7:50:af:0d:9a:3b:ee:1d:d4:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:72:A7:09:E9:BE:E7:DA:FB:1E:F3:65:0C:B9:BE:F6:DA:06:12:15
X509v3 Authority Key Identifier:
keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0c:8a:e8:84:27:5e:d9:0f:cc:31:4a:06:a3:99:9c:43:b2:
21:38:d0:00:0a:ca:3c:aa:77:e4:bf:4e:dd:d8:d2:b5:72:d5:
73:31:d8:e4:5d:64:83:4a:2e:52:0a:4c:14:9f:23:4d:3f:ed:
29:35:bb:ed:a8:d1:58:ee:6e:7e:22:ee:43:c6:1e:5c:06:88:
20:92:9c:42:32:e0:9e:cb:26:fa:52:ed:da:78:02:8e:85:cc:
9a:33:b1:8e:3c:3b:73:65:2b:07:00:43:17:4c:a0:e7:d4:ce:
96:17:ae:2c:e5:8d:8c:ca:c8:9c:ea:f7:57:cb:53:f0:02:35:
e7:15:db:0a:36:ab:a3:5a:9d:e5:2e:8c:a2:95:99:d0:ea:1b:
4a:a3:c3:de:23:98:49:76:c8:31:8f:a4:70:e7:d8:07:13:fc:
08:56:b5:26:37:68:46:aa:e0:00:25:c8:3f:34:a0:f9:7f:f4:
bf:d6:2c:54:2a:ef:bd:b7:f8:ed:da:46:5a:38:9b:76:50:b4:
32:59:ae:06:57:38:ba:75:30:68:f4:eb:bc:1d:33:a1:61:06:
91:cc:f7:59:9d:45:ca:48:52:00:c8:7a:43:fc:6e:b8:91:21:
0d:f4:b2:ba:d3:c4:b2:4d:69:c6:81:13:cb:67:8c:93:cb:ad:
86:41:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:45:35 2025 by rpki-client