Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier: Czy7M5W68sAuQrKObhELrTBFHN4CivHBNuStH4reL4c=
Subject key identifier: 6E:3B:05:00:46:39:EE:5A:CA:97:62:B9:13:2A:07:42:70:97:F5:43
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial: 019A01B53C8199672C3FB367A4937EBEE169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number: 0391
Signing time: Mon 20 Oct 2025 13:00:45 +0000
Manifest this update: Mon 20 Oct 2025 13:00:45 +0000
Manifest next update: Tue 21 Oct 2025 13:00:45 +0000
Files and hashes: 1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: MY5RyGkYk6yM5xJyRCvTjrNQMPHULX2cuAWdsB0FDbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:3c:81:99:67:2c:3f:b3:67:a4:93:7e:be:e1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Validity
Not Before: Oct 20 13:00:45 2025 GMT
Not After : Oct 21 13:00:45 2025 GMT
Subject: CN=6e3b05004639ee5aca9762b9132a07427097f543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:2e:10:b4:e2:85:52:e5:3b:d5:21:d2:f9:
52:a3:8c:96:16:1c:63:09:ba:93:3a:6c:4a:8c:af:
58:2a:62:4c:9c:55:76:cf:1a:a4:5a:c6:0d:be:68:
29:6d:38:ad:79:11:6d:ff:8d:a3:b4:12:69:fb:98:
27:c6:56:dd:8f:88:66:06:42:2a:f7:4e:3e:08:89:
c0:b1:f7:03:1e:0c:3f:c0:ec:45:51:37:ab:bb:28:
65:de:fa:2e:13:8b:6a:fc:dd:77:a7:2b:ff:eb:6f:
89:46:b7:1a:be:36:d2:a8:64:27:f2:88:d0:c3:4f:
d2:bc:3f:39:ee:31:08:d3:ba:2d:b7:67:96:2f:18:
60:3d:01:cc:97:c7:fe:85:a7:d6:6d:68:0f:81:fd:
e2:bf:3b:ab:14:9b:ba:55:8b:a8:99:a2:89:77:5c:
af:ce:b5:44:29:8c:40:07:d4:90:d1:ee:ab:24:2d:
cc:d1:aa:c1:29:2d:17:e1:82:30:28:33:02:31:c0:
46:5a:23:d8:25:bb:e5:53:f5:a5:8d:95:19:7d:a4:
7b:d2:6f:5a:b9:2a:10:8f:9d:d7:0e:7c:5d:90:c5:
cb:90:0f:ea:a7:9e:03:da:41:31:27:97:93:fc:18:
28:0a:f0:b4:b8:44:a1:5e:52:ed:ba:9b:c2:37:3a:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3B:05:00:46:39:EE:5A:CA:97:62:B9:13:2A:07:42:70:97:F5:43
X509v3 Authority Key Identifier:
keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:01:07:0d:a9:0b:19:4b:26:20:9a:94:9c:48:4e:cd:ce:
ba:4e:2a:63:bf:5e:c9:d1:dc:ee:3a:2d:a1:c2:82:e7:4b:a1:
d7:e6:b0:d2:5d:57:36:4b:0c:1d:6a:66:f5:c6:b2:87:4f:0e:
1d:b6:58:8c:9a:6b:1e:f3:0e:13:9c:aa:1c:2c:56:e9:71:86:
3d:63:2a:76:14:4d:ca:52:65:56:4d:70:82:d6:4c:ab:5d:e6:
df:b3:30:da:e1:c4:15:4c:8a:2f:2a:af:45:5b:3f:eb:32:94:
fa:33:79:e7:76:ca:71:89:34:29:3c:1d:84:cf:0e:9f:b9:c0:
3d:df:bc:39:ed:94:33:f2:65:ef:6b:1d:99:ca:c2:f2:71:7d:
0d:17:76:99:00:be:b3:cd:f1:8f:71:a6:3a:83:30:00:ce:a5:
b5:91:34:21:a7:f8:64:65:ed:94:2c:3d:47:19:ee:4b:75:84:
de:35:6e:e1:ff:d8:bc:24:c6:b5:29:94:db:be:37:29:7f:96:
eb:39:bd:20:e6:0e:37:ca:f0:40:7e:e9:cf:87:a6:46:c7:86:
40:f4:36:22:dd:dc:3b:65:df:70:51:f5:4e:de:2f:c9:0d:1e:
50:d9:fe:86:3c:a8:12:32:96:3f:d4:e0:2e:b1:7e:fb:4c:85:
b1:2b:1d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:00:36 2025 by rpki-client