Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: 25KpnjlmSn2tN33YYdzwrSqn1eH+zhN+wcmqO2ep0U8=
Subject key identifier: 5B:78:F8:61:CB:96:42:4C:D2:8E:41:D3:B3:58:09:87:F7:C0:70:43
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 0199FCFD38B1C362AD0F4920ADF66BD250E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 02BD
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: DSrriY0kTNELG4oxKEIjyONHFzY.roa (hash: G+y9D4/mU3p2L2jX8635Per34u+yYnPZalrdKQqBsuo=)
2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: blNKbXZAGGSD53nsyzg3R41MZYJ9TSl4xpstoDp8us8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:38:b1:c3:62:ad:0f:49:20:ad:f6:6b:d2:50:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=5b78f861cb96424cd28e41d3b3580987f7c07043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:ce:0d:8f:8c:74:74:94:1f:81:bf:29:41:
cf:ff:df:ab:ee:f0:c0:1f:67:de:c0:06:96:b6:ed:
ec:55:51:79:a1:a4:1f:f1:f2:fc:2f:cc:a4:01:a2:
09:7a:d4:87:e9:a5:0a:cb:f5:cc:cf:e1:66:2e:22:
d5:09:fa:95:62:71:69:46:30:6b:d4:29:a2:ed:07:
3e:d0:d7:ff:05:8e:ca:dd:27:9e:de:a9:e0:46:42:
04:65:8d:53:5a:e0:63:fa:2c:89:4b:0a:4e:8d:fd:
6d:7f:49:9a:f2:bc:c8:0a:2f:f3:b4:5b:d4:77:ff:
42:6c:ec:7b:c7:d6:9d:3d:5a:4a:41:b0:51:59:5a:
25:3e:02:4c:d5:3d:70:72:7c:1b:41:be:08:04:08:
11:1e:49:1e:85:81:a0:b9:66:0f:cc:d6:a3:f7:57:
a2:77:0f:a2:3e:cf:1c:cb:02:b6:43:fc:af:69:e0:
6a:69:34:ba:b2:b2:bf:54:43:41:73:db:e1:1b:60:
7b:a3:31:53:70:09:b5:cc:30:65:9a:7b:c5:60:ec:
c0:21:14:d4:cd:6a:83:f1:3c:14:46:13:ae:ce:d1:
b1:f5:36:74:f0:37:d1:a0:7e:71:08:c6:7c:c6:99:
7e:f1:fb:a8:8f:65:bd:8a:3f:8a:56:38:99:a2:84:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:F8:61:CB:96:42:4C:D2:8E:41:D3:B3:58:09:87:F7:C0:70:43
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f7:5f:53:b4:65:17:e1:c0:28:af:1a:65:7d:88:cd:8a:8e:
6b:9d:83:2e:ba:c2:f5:f5:e8:65:f7:32:ad:56:b0:ba:06:da:
f2:b3:27:c2:92:22:f3:8d:de:5e:2a:70:31:f2:77:cd:06:b8:
82:1a:f7:53:22:a9:5c:0d:4e:2a:6e:e0:7f:8a:55:ab:45:37:
fe:5c:67:49:98:7e:1e:03:29:ec:ad:dd:4a:68:5e:75:f3:0c:
16:eb:57:1a:92:05:55:d0:e0:37:a0:cf:d4:78:55:bc:91:e5:
aa:98:5c:7e:1e:4c:82:5f:81:b6:92:64:f5:13:8c:d3:b8:36:
f9:d0:48:6a:29:ab:da:ed:54:b4:f9:8b:1d:36:bf:63:98:13:
ff:35:e7:82:a6:cb:c3:3d:c5:62:48:fa:f5:7b:df:ca:4c:d1:
59:89:53:9f:a6:ca:19:92:2e:a9:37:5e:29:b3:3e:96:fd:9c:
b8:a1:e7:42:93:27:d2:b5:a4:30:21:6d:a0:c0:aa:b8:bb:23:
1b:f2:a2:ae:bf:d6:11:2f:26:33:56:15:36:62:62:da:4e:25:
76:9c:60:89:d2:75:ae:58:05:7e:b8:0e:73:4b:26:33:2b:c5:
39:4e:b9:4d:d8:99:31:62:e9:22:5c:b7:12:8b:54:9e:78:87:
7c:2b:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:00 2025 by rpki-client