Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier: wAdfS9qxf9etviwsrvz3Du5Q5Sok8i6QL8lUyDkm48E=
Subject key identifier: 0E:3D:93:D3:43:DA:67:A3:5B:09:D4:28:CA:99:54:9F:D4:8C:4A:60
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial: 0199FFC721E6446786BC5D0497A3EC6397DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number: 0390
Signing time: Mon 20 Oct 2025 04:01:04 +0000
Manifest this update: Mon 20 Oct 2025 04:01:04 +0000
Manifest next update: Tue 21 Oct 2025 04:01:04 +0000
Files and hashes: 1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: NQYvWW4kwmOVkHGrpioF5cR9rkl6PWjznqoCtU7WvdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:21:e6:44:67:86:bc:5d:04:97:a3:ec:63:97:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Validity
Not Before: Oct 20 04:01:04 2025 GMT
Not After : Oct 21 04:01:04 2025 GMT
Subject: CN=0e3d93d343da67a35b09d428ca99549fd48c4a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:e7:a3:37:f7:de:05:f1:8b:67:64:ce:9b:
18:68:21:a2:89:69:d4:a1:6c:c7:a0:c4:63:25:4e:
af:88:74:49:66:12:c9:f9:fd:42:70:b3:c3:b7:79:
7e:33:57:ce:f4:4d:41:ab:e9:c5:db:08:0f:0a:fb:
a2:dc:73:45:eb:21:f6:76:a1:19:cc:fd:57:4a:be:
e2:51:7c:4f:8b:d9:8c:fc:8e:93:44:b7:29:17:3f:
2f:d8:d8:c4:d3:a8:30:f5:ee:f4:0f:dc:ba:cc:39:
19:f7:29:67:3b:04:49:10:c3:c1:53:48:e5:f9:d3:
05:7b:6f:83:c7:e4:2b:55:55:9f:c9:14:97:32:da:
84:1e:c3:0f:28:98:00:c8:a4:c4:0f:7b:b7:2e:5e:
f8:50:83:e8:39:61:e6:3f:56:9e:ed:ed:63:84:1a:
76:3d:9b:c6:0f:da:e4:ad:ee:1f:ee:cb:60:4e:b1:
ed:eb:74:2f:df:67:53:d6:06:e3:3e:b1:38:d0:e6:
4d:8f:31:28:b3:c2:59:42:09:89:6f:96:58:4f:66:
3c:c2:57:23:72:30:1a:6b:1c:8d:28:c3:c2:ec:60:
8a:d0:de:8f:0b:9a:f1:34:a4:96:59:9e:ed:6e:3d:
67:a4:a7:09:16:63:b1:6e:54:e4:de:cb:55:8c:67:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:93:D3:43:DA:67:A3:5B:09:D4:28:CA:99:54:9F:D4:8C:4A:60
X509v3 Authority Key Identifier:
keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:b8:a6:d4:be:04:ee:8b:86:d1:2c:8a:35:e2:b8:bb:d7:
dc:de:6a:46:88:da:a8:35:fe:bb:df:89:b7:b3:c0:d6:13:a0:
a8:91:52:40:d9:37:de:20:a4:05:9a:f7:d5:eb:ba:54:aa:96:
ff:2b:95:03:72:2e:9e:37:2d:69:38:f6:5c:01:e6:03:34:d5:
50:ae:73:47:de:ee:45:b2:a1:56:ff:8c:cd:b3:95:fd:3c:36:
7c:fe:3f:af:87:3e:c0:3d:3f:86:11:24:a7:7d:9e:ec:76:4e:
19:c5:1e:ef:ec:88:20:1f:bf:59:4a:38:b7:a0:89:73:fc:51:
78:6f:2c:17:65:68:fa:60:96:fc:fb:59:08:ef:43:98:bf:51:
16:79:c7:1d:6f:6e:05:38:27:52:ff:89:2f:dc:10:43:50:d7:
19:25:4b:ba:dd:1c:3d:df:7a:ce:f5:7c:a5:5f:de:ad:97:7c:
98:e9:b4:da:eb:5c:12:03:68:e0:54:29:be:5f:96:ec:b1:8f:
ae:e9:36:8a:f2:0a:5c:f0:ae:0b:35:b8:af:63:7e:43:b0:e6:
3e:6c:8c:25:3b:4e:39:39:9d:46:22:a3:b9:7a:f6:d8:ae:fa:
23:2d:fc:7a:2b:a9:e7:e3:ad:d7:64:89:15:ff:bc:ca:eb:aa:
cb:2c:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:49 2025 by rpki-client