Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: YcP6b5XQE6McPFxw7jfoqn6NK/ybb7pQh3kX+smYczk=
Subject key identifier: 02:9A:90:7E:48:B1:DB:A0:57:4D:44:78:D4:5D:8B:C9:12:E5:08:9D
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 019A4F622A2B5410A75D2878EE7EA4A74099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 1437
Signing time: Tue 04 Nov 2025 15:00:24 +0000
Manifest this update: Tue 04 Nov 2025 15:00:24 +0000
Manifest next update: Wed 05 Nov 2025 15:00:24 +0000
Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=)
2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: ed6Yf90UwEa0nJF/mXbjHNER07yktiQoJu7GQmHdGx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2a:2b:54:10:a7:5d:28:78:ee:7e:a4:a7:40:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Nov 4 15:00:24 2025 GMT
Not After : Nov 5 15:00:24 2025 GMT
Subject: CN=029a907e48b1dba0574d4478d45d8bc912e5089d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:de:23:75:90:5d:5b:31:04:21:10:7d:f8:
fb:4d:50:26:d7:a0:3e:dd:9e:47:7e:cf:e6:a9:06:
ec:5d:a6:a2:a9:a7:c8:c9:b7:35:8a:23:f2:7b:88:
41:5d:03:cd:03:d6:eb:f0:30:a2:ac:b1:e3:0f:de:
92:f8:de:f2:c9:d7:51:1a:32:fa:fc:f9:2d:79:4d:
61:71:f7:f7:83:a4:8f:d4:f8:b8:d3:d2:de:6f:bb:
72:47:08:52:f5:0b:79:f3:30:45:82:10:0c:ac:bb:
94:4b:fa:e9:b2:36:96:3e:6c:b1:3a:b3:d1:76:68:
2e:63:07:a4:96:4b:0b:99:6f:ec:3e:7e:a2:bb:a8:
30:40:3b:02:81:f3:28:6b:58:00:dd:80:7f:54:e9:
63:d5:55:70:d3:43:be:89:ed:29:b6:79:54:82:d1:
66:c3:42:dc:99:46:f3:28:94:2a:2b:72:d4:14:f8:
a0:f0:23:1c:cd:66:89:25:e0:42:3d:d8:fb:5a:51:
55:8d:f1:b4:83:7e:78:ff:cb:9e:62:d3:ed:ca:00:
9c:b9:12:d4:b5:89:ad:c6:d7:39:19:35:f6:b9:ce:
1b:a0:6c:40:3d:2c:f0:c3:7a:07:7e:4f:33:9f:1f:
f1:c4:12:92:95:17:ca:e3:71:83:4a:c2:3e:8c:0e:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9A:90:7E:48:B1:DB:A0:57:4D:44:78:D4:5D:8B:C9:12:E5:08:9D
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8c:11:e6:43:0f:34:94:99:7e:cd:08:b1:67:34:82:4f:f5:
5b:ac:20:c0:36:fb:61:81:1b:31:6b:95:1e:5f:48:93:5c:43:
9d:08:96:23:80:bd:89:59:7b:57:ad:00:f2:ad:48:8a:41:f0:
6a:b5:93:fe:f3:7d:f0:a0:4a:5f:3f:01:2f:1d:e7:c1:bf:af:
78:b1:6c:84:9a:5f:d2:32:73:e2:84:5d:01:a9:5f:e1:ca:30:
f8:04:c6:97:4f:18:f2:06:dc:e4:26:30:9b:db:3c:d7:c5:b9:
0c:01:e0:5b:f2:c4:49:c7:da:5b:b0:34:a1:f4:e4:8a:2e:97:
97:1f:90:64:8e:51:96:22:b4:e0:a3:af:97:5a:6d:0b:62:d1:
bb:9d:c4:ce:76:5f:fa:70:03:60:ab:a8:cd:15:8a:88:c9:e0:
7d:96:1e:d4:2f:bd:bb:af:0d:e0:df:84:44:2a:b1:60:8c:d0:
94:47:8b:e1:9c:5d:c8:ca:d1:96:14:e6:8c:04:5b:07:7c:09:
6e:d6:98:b5:d0:03:45:74:dd:5a:67:67:85:94:a9:d6:e5:74:
4c:0c:a9:8b:e5:5d:0b:15:46:2b:86:82:d2:b4:e1:fa:40:46:
99:60:c8:93:0f:b1:de:8b:24:db:03:42:d6:ee:05:d1:49:14:
bf:11:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:31 2025 by rpki-client