Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: 8r0NHYfl62cBySrLGJveONCKqbdmHu4xW1zt56YaFEw=
Subject key identifier: 04:D2:8F:50:6C:1F:5F:5C:7A:31:81:2D:EE:78:2D:19:88:FD:DB:78
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 019A4DE213E397658B85405803181FD10CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 04B0
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: BYgNDZpPlq52cPkMIl2WoHo4ERJHvQCBy5vMwomcZws=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:13:e3:97:65:8b:85:40:58:03:18:1f:d1:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=04d28f506c1f5f5c7a31812dee782d1988fddb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:47:9a:8f:15:5a:eb:ae:d2:cf:db:7c:a8:
8e:b5:d3:35:eb:5e:19:65:b2:80:ea:36:e2:54:0b:
a3:ea:18:4d:65:70:31:d7:b0:c0:8e:c7:61:31:cd:
e9:bf:90:dc:bd:90:bf:31:b8:d3:a4:64:06:6b:26:
22:f4:27:92:57:8e:9b:4b:71:f6:c9:d3:9c:ee:77:
69:98:44:75:0f:23:35:3f:bc:be:e8:75:ca:5c:56:
69:8f:92:10:5b:28:99:d4:f4:17:c7:d1:09:d8:b0:
f9:ee:29:80:06:40:c2:da:2a:f1:b8:d7:7d:f8:c8:
00:dc:5a:55:e7:52:f4:8c:f8:61:35:d9:5f:8c:59:
cb:53:97:2f:e2:db:16:ba:40:0a:0f:bd:c5:4f:f6:
57:99:8c:9a:1b:48:c4:07:50:00:32:4b:cf:98:85:
b9:34:d1:36:65:ca:4e:dc:7a:78:63:c2:90:c5:02:
c3:69:76:80:e8:5f:7c:7f:99:da:8f:a6:19:d9:39:
03:9e:1b:bf:b7:48:eb:38:a8:e1:90:68:f1:b7:fd:
bf:f5:da:43:43:0d:ae:d5:51:c7:f3:a2:c9:5c:4d:
b6:b2:b9:fe:36:04:0c:a1:79:65:6e:e8:ef:cd:2e:
fb:fa:4e:d5:a0:de:df:f7:b3:fe:1c:02:df:3d:b8:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:8F:50:6C:1F:5F:5C:7A:31:81:2D:EE:78:2D:19:88:FD:DB:78
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:26:93:06:b5:02:59:bb:3d:2c:6c:2e:35:73:62:bc:6a:21:
5f:94:28:92:34:ba:f9:49:27:83:34:0a:94:52:9b:9d:7a:26:
14:44:b2:63:02:a8:58:74:5d:25:45:ea:b1:58:39:0f:f6:4d:
2b:89:eb:7f:68:bd:cd:3a:14:80:8e:65:2e:99:ee:f5:3d:44:
9c:cb:dc:7c:31:2e:f4:ed:ef:84:fb:d7:8f:45:23:d1:8e:82:
e8:db:ef:27:28:b6:41:ef:ed:22:e3:3c:fa:99:97:4c:9a:a3:
80:e9:e1:29:d8:ba:53:ec:8a:18:9e:cf:0d:98:62:13:0c:87:
17:5b:d0:1e:2d:4d:b0:d9:be:25:58:c8:46:1f:c7:83:7f:29:
7e:96:f4:8b:69:4c:c2:4a:33:f5:3c:fb:05:7b:50:22:03:4f:
7e:77:12:94:96:61:55:2b:77:e3:b8:58:81:84:db:f1:21:69:
d9:69:32:47:5d:45:fb:c5:65:1e:5b:87:64:d5:e8:da:d0:aa:
c1:c0:2f:0d:48:be:7a:a1:e6:83:e3:e7:66:8d:30:41:6e:ba:
6f:7c:78:a8:56:49:c9:1c:eb:5c:c8:d2:1b:08:ad:88:6f:ba:
f8:bc:f8:bf:c4:7d:2f:2b:32:07:7f:04:85:a5:40:7a:18:58:
30:d7:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:09 2025 by rpki-client