Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: nyKCSpn0L3Jd8dr5fwZx1pDWg4VS5xnRBH23W0/8Qos=
Subject key identifier: D9:D2:53:C1:00:9A:BD:4F:E7:A7:51:C8:CC:33:39:BE:84:30:21:73
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 019A4F627D9ED5EF77D0ED1A4DE48F96A483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 031B
Signing time: Tue 04 Nov 2025 15:00:46 +0000
Manifest this update: Tue 04 Nov 2025 15:00:46 +0000
Manifest next update: Wed 05 Nov 2025 15:00:46 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: H2UcGZQNXrR1a04pz9Xho+785ArtXGxVJ50FTb5whgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7d:9e:d5:ef:77:d0:ed:1a:4d:e4:8f:96:a4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Nov 4 15:00:46 2025 GMT
Not After : Nov 5 15:00:46 2025 GMT
Subject: CN=d9d253c1009abd4fe7a751c8cc3339be84302173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:2f:1f:78:95:26:63:bc:98:26:e2:0e:9e:
fb:2a:81:5a:0c:bb:7e:f4:10:d6:e3:00:85:4f:01:
f5:99:94:dd:f5:ba:ea:19:b6:3e:25:1c:8f:fc:aa:
58:b4:4b:74:a9:84:f5:09:7e:ee:2b:5d:02:bc:40:
35:cf:f6:d8:a1:af:df:7e:3c:87:2b:42:50:33:9f:
fc:32:96:28:d4:7f:52:6c:9d:d4:ae:07:8a:30:73:
c2:15:50:ee:21:f8:31:91:15:fb:c3:9a:35:c9:10:
f2:98:f2:f0:67:5b:03:f0:0d:37:c9:73:44:f0:b4:
04:d8:bb:19:8f:f4:6f:e1:6a:41:3d:f3:4e:25:1c:
ec:cb:36:4a:7b:f4:e7:9a:f1:dc:72:16:b3:c3:11:
de:a3:66:c0:0c:71:f9:e6:1c:9e:d9:1d:d0:4e:a3:
53:d6:c1:36:42:02:09:fc:96:b6:63:3e:45:72:77:
5d:99:fd:00:70:c5:bb:3f:fc:08:61:da:60:60:6e:
d5:8a:aa:a0:14:ad:f6:46:fb:89:b7:7f:8a:9b:17:
66:ef:72:80:08:5b:7d:8e:3c:15:3e:90:b1:da:c0:
e8:ff:fc:fc:d0:34:c1:85:4f:99:19:40:17:2d:2c:
93:5e:31:d5:1d:dc:e1:30:d8:00:8d:3d:58:ed:72:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:53:C1:00:9A:BD:4F:E7:A7:51:C8:CC:33:39:BE:84:30:21:73
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0d:66:ba:7e:9e:9a:15:24:f8:91:0d:01:98:40:1f:52:02:
03:78:f9:70:8a:09:10:64:c8:55:26:cf:3e:4c:ad:af:c7:50:
24:99:41:50:50:99:c0:5d:8a:79:d6:17:b1:5a:b8:63:85:5c:
ab:3a:1d:6b:71:76:46:66:3a:e9:33:db:a9:ff:76:d2:ff:5f:
95:45:34:5a:43:45:d6:f4:ff:d8:21:7d:49:b4:7c:a9:26:c7:
f3:c3:40:ea:8d:a1:f8:19:a9:fd:23:81:58:15:69:4c:d8:db:
38:92:55:9c:b7:4b:3f:ce:3b:94:c5:c9:87:0a:01:54:9c:ae:
5a:5e:93:8f:6a:df:f8:b1:c3:57:2d:ae:06:2b:fc:5d:59:e0:
ed:79:3d:9f:7e:bb:02:ec:dd:48:ca:38:10:ec:1f:07:42:ad:
0d:a4:0e:f3:53:fc:c8:15:f9:33:8c:af:1a:b3:8a:7f:5c:fa:
c8:98:30:68:b4:57:73:ee:72:bd:30:df:5a:eb:6a:f0:c5:82:
fe:ed:65:16:d7:3a:f0:09:3a:8e:cb:68:41:1e:a6:6f:1b:61:
f4:a3:60:1b:f3:68:9e:63:cc:a6:e7:73:5f:a5:3c:db:f7:8c:
77:fd:f4:90:da:d3:5b:18:07:c8:ac:a4:04:df:33:a8:76:db:
b5:d0:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:58 2025 by rpki-client