Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File: mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier: 2Y59GLBW5IwXlaI6IPOMcYBvpshWJZ9MTqZrZRa2yRE=
Subject key identifier: 3C:F6:1E:95:2C:0F:77:40:CA:32:FC:00:5E:1D:27:54:15:B9:A1:92
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial: 019A4E86914502904C02F6FB885699723CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number: 03CE
Signing time: Tue 04 Nov 2025 11:00:33 +0000
Manifest this update: Tue 04 Nov 2025 11:00:33 +0000
Manifest next update: Wed 05 Nov 2025 11:00:33 +0000
Files and hashes: 1: N0qByPu3emMo9XfORXwQEiEDLX4.roa (hash: WDWKjOtvs4aBJ9ngAGga+267IwwKrgiGUR6VHAFxV3g=)
2: RoGqfo5WHnk9aJGToptEEJnYgSQ.roa (hash: L10AuIcaDMRz0t+d0kRw1yKzyj6eu5ePd1bWDs52MY4=)
3: dXZ-6UVHqdia25OyDn-Duexa4bY.roa (hash: 0T5UCEoUYDMxK/4Yih5THGiZdvmX2Rir43/xhLtG52s=)
4: ffVCJAudGRklTh6J2p53gbRPIvk.roa (hash: DvmrtTZ+4GX+XZD2/G6E6Uk/XxFpGuY4Z0oM1q4ZEeI=)
5: gkNUdTJYKI-HrI5siVhEhSliy48.roa (hash: ABXVZgoh60JAitHXcWT+7NbO1hc9hcd5tRCQ91UiLVQ=)
6: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: sTqvSE+JdufkJCwRbcyjjULMXGZ4Qc3WMTNf1Q45mI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:91:45:02:90:4c:02:f6:fb:88:56:99:72:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Validity
Not Before: Nov 4 11:00:33 2025 GMT
Not After : Nov 5 11:00:33 2025 GMT
Subject: CN=3cf61e952c0f7740ca32fc005e1d275415b9a192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:81:ed:c9:5a:9d:b2:1b:e9:ff:6a:4f:45:7e:
ef:a0:d6:99:bd:b4:a5:4c:5e:7c:54:e7:6f:be:9d:
c7:41:77:51:fa:5b:b9:51:98:eb:c6:3f:10:44:f0:
7e:f5:56:43:27:ef:2f:fb:50:af:2c:52:e0:81:c9:
90:b3:8a:28:da:ae:57:17:a6:ac:8b:d6:fe:c4:4a:
88:95:09:f6:b8:e2:bd:26:a2:2b:d8:36:50:8a:99:
38:61:31:da:f3:08:21:32:b6:65:68:10:0b:bd:6c:
16:2f:d9:35:db:20:c9:bf:e4:2a:21:4f:4f:b3:70:
e7:7b:a9:b5:fe:23:fc:40:83:ee:00:f0:2f:10:1c:
0b:9c:89:22:c7:d3:08:7f:99:e9:4f:9d:25:67:22:
7d:70:33:0c:4a:9d:81:d8:35:6a:09:fe:e1:29:11:
7e:01:63:40:d8:2e:15:e2:5a:d4:82:f8:a5:a1:8b:
82:14:a1:a8:42:49:c4:e3:f5:e4:f1:cf:47:5d:12:
7d:fb:76:bd:46:20:bd:62:4b:5a:23:ca:b7:0d:4d:
e9:a2:20:04:57:e0:6e:6b:de:07:81:bf:62:fd:72:
53:24:c5:85:1b:a9:10:3e:2e:1c:89:52:1b:1d:1f:
43:61:df:0a:95:07:0c:56:63:19:e9:b3:29:36:44:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F6:1E:95:2C:0F:77:40:CA:32:FC:00:5E:1D:27:54:15:B9:A1:92
X509v3 Authority Key Identifier:
keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dc:6a:08:6a:6f:74:2c:a6:37:12:35:e4:69:36:4e:18:53:
47:17:8b:7f:3b:eb:34:cb:ef:f1:a7:63:1c:80:dc:e0:8e:dc:
55:4e:0e:80:21:c5:91:a1:11:33:5f:13:98:31:59:17:0d:49:
81:9f:af:f2:21:9e:51:5c:c1:d6:be:e3:fb:34:48:69:6f:03:
f0:6c:ce:a4:54:c1:3a:41:11:1e:39:50:bf:fa:3f:1f:b6:93:
15:47:bb:6a:a7:e4:8f:97:71:8f:37:39:e1:5e:20:bf:21:e3:
db:cb:79:56:d2:57:b6:89:4a:f8:4a:e6:63:38:11:e7:50:82:
5c:92:2f:e3:f6:d5:75:93:ba:da:4d:9d:d5:05:5a:f1:3f:e7:
fe:5b:93:4e:ad:15:92:53:6c:d1:1f:f1:e0:42:7f:7c:1f:19:
5f:13:64:ef:a7:9e:d2:94:cc:32:3c:99:44:ee:d2:da:a2:d7:
50:d0:92:5b:f5:f2:67:64:b5:32:13:0a:e8:6a:78:e6:38:b5:
6d:48:4b:b8:9d:6d:a8:c6:8e:fa:52:9d:3c:d3:db:ed:87:e0:
4f:ad:7b:6c:08:01:a9:8b:40:bb:ed:b6:63:90:69:9f:9f:5b:
c7:d8:66:49:69:2e:f8:6f:e6:60:07:7f:31:95:e3:d0:13:e4:
b5:f9:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:43 2025 by rpki-client