Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: qg4t72DFMJbRSR/Jf/NchtmAd0i+zMsVGswAZR4U/YE=
Subject key identifier: 95:BE:C7:58:D4:67:11:DB:99:92:46:82:89:2B:FB:47:28:3D:64:9F
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 019A4FCFC92B933DE81D09A6C2538538664B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 17:00:08 +0000
Manifest this update: Tue 04 Nov 2025 17:00:08 +0000
Manifest next update: Wed 05 Nov 2025 17:00:08 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: QZfoj2UZiY47zwkQkBh5jtSAhOYqiO/CJhBcoTups0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:c9:2b:93:3d:e8:1d:09:a6:c2:53:85:38:66:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Nov 4 17:00:08 2025 GMT
Not After : Nov 5 17:00:08 2025 GMT
Subject: CN=95bec758d46711db99924682892bfb47283d649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:f3:db:78:34:12:05:40:e8:ac:dd:68:a9:
d8:49:a6:e9:72:11:df:11:77:93:8e:bd:ee:69:28:
af:bd:4b:eb:fe:bb:27:5c:9c:e4:c3:91:b1:d1:4b:
c7:a2:a0:d4:30:26:7c:8f:e6:df:11:11:69:cd:93:
0f:9c:81:5c:e8:d7:e8:46:54:45:01:ea:5c:80:32:
94:92:f1:42:05:f1:ff:fc:fe:53:ff:d7:cc:71:93:
96:a1:ef:52:3d:14:7c:47:00:8c:97:68:c1:0b:57:
7c:38:e8:da:2d:7b:7f:4e:e2:f4:ea:f2:df:86:7d:
fc:01:3a:5d:1e:50:9a:94:90:74:ac:67:69:02:8f:
5a:cf:f0:33:4a:62:19:87:50:4a:95:02:d1:d0:76:
ae:1a:f7:e9:d4:a0:56:97:2f:9c:32:0a:fe:1f:ca:
54:e0:91:23:32:28:dd:c5:37:ea:09:dd:d7:63:8c:
63:72:f2:b2:fc:8e:df:5e:cc:5e:0e:f5:84:d7:2d:
b8:67:8d:da:ec:a4:19:e7:60:a0:41:72:5f:d3:7f:
26:12:dc:e2:1b:5b:28:c9:2c:66:11:0e:11:f3:70:
55:8d:c5:1b:17:41:66:f9:67:df:85:b1:11:fa:6a:
e5:03:4e:aa:3f:1f:68:c4:57:a8:73:b1:12:d0:a4:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BE:C7:58:D4:67:11:DB:99:92:46:82:89:2B:FB:47:28:3D:64:9F
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5b:66:0c:c6:ea:6c:f7:26:6c:18:0e:1c:5c:1d:52:bb:d0:
7c:71:40:d1:81:62:ac:3d:34:41:2e:91:ba:f9:b3:35:1c:88:
6f:be:4d:f9:a7:06:a2:8c:be:8a:66:39:07:dc:1c:2d:07:97:
5d:f7:37:7c:cd:98:9a:8e:06:d7:71:0a:29:d2:87:32:09:63:
57:37:52:36:9d:cf:2f:fc:e7:86:bc:4c:69:f7:85:6d:6e:e7:
c9:d8:3f:52:e2:ae:ec:45:50:24:8d:60:cc:a8:ea:81:de:7e:
6c:16:55:4a:e3:73:fb:f4:58:1d:62:f6:c8:bb:a7:6d:7b:9f:
c9:17:8f:16:a2:ee:44:31:29:07:43:c6:2e:c5:64:5f:06:27:
1d:35:6b:36:d5:19:ad:1a:c4:47:ea:60:10:b6:09:c8:c8:9a:
25:7b:1b:aa:e4:92:6e:50:c2:b3:96:85:e1:14:33:02:0f:cb:
77:14:ca:88:d4:97:b5:b2:e2:8f:07:cd:15:d1:f8:d3:12:21:
73:1b:48:de:e1:94:53:20:e5:1b:e9:54:21:5a:00:5f:c0:3e:
c2:2d:20:b4:61:dc:89:cc:f3:ff:0c:fc:7b:c7:f7:1d:59:f4:
0d:17:28:e3:a6:15:5d:38:25:3c:cb:7b:fb:7b:48:6f:c6:a1:
c0:be:90:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:23:34 2025 by rpki-client