Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: Lk5ui933qpWZCEr1j8ZD6kk7XIi2AJMiKnFjksUhY2o=
Subject key identifier: 84:42:07:5C:19:78:EF:3B:84:91:17:A7:22:2F:16:49:07:1D:FC:0E
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 0199FF2253595083D52C73F3703A7D065C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 091F
Signing time: Mon 20 Oct 2025 01:01:03 +0000
Manifest this update: Mon 20 Oct 2025 01:01:03 +0000
Manifest next update: Tue 21 Oct 2025 01:01:03 +0000
Files and hashes: 1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=)
2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: Z08RqgvSA31uvLpJriaDAQd76EmmOfOKP8iRALOHhFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:53:59:50:83:d5:2c:73:f3:70:3a:7d:06:5c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Oct 20 01:01:03 2025 GMT
Not After : Oct 21 01:01:03 2025 GMT
Subject: CN=8442075c1978ef3b849117a7222f1649071dfc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d3:7f:a2:63:b9:5f:37:ae:e9:6c:c2:67:23:
74:b3:b9:2f:69:99:58:4b:d7:ed:25:fe:51:90:7c:
dc:af:d7:a2:e8:44:3f:75:85:b2:bf:18:30:30:cc:
50:49:79:8f:05:1d:6c:0c:47:18:8b:46:dc:0d:05:
00:3a:20:72:7b:9c:37:50:c7:5c:56:2c:72:f0:d6:
64:22:12:29:05:3d:a5:f5:49:e8:43:22:07:9b:5d:
a5:d2:f3:d7:21:e2:99:db:73:f8:6f:b9:69:32:40:
d0:4a:a8:e8:30:65:db:72:0e:fb:cb:e1:8c:f6:2a:
ba:4e:a5:4c:d5:9b:d7:70:89:d8:78:30:0b:6b:a7:
32:e6:8d:26:28:7d:27:36:a2:6a:62:28:83:95:fb:
6a:56:f8:d4:be:83:52:30:c2:f8:01:f7:d4:80:cc:
66:bc:83:ad:12:fd:0a:3b:92:64:0e:23:fd:64:1f:
37:5b:32:2e:21:ab:ff:db:79:1e:10:c4:0c:e9:c2:
9d:35:c4:37:2f:61:f2:c8:d3:d2:da:92:ef:62:0c:
27:4c:63:10:fe:84:b6:a6:32:c1:d2:78:d6:72:e2:
05:b0:51:4a:d4:ab:b7:80:ac:f4:49:09:e5:3e:28:
23:74:2f:fb:0c:2b:5d:5c:a7:10:48:3d:aa:3e:d5:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:07:5C:19:78:EF:3B:84:91:17:A7:22:2F:16:49:07:1D:FC:0E
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4e:71:8b:0a:6f:fc:21:fb:f3:f3:0b:d2:1f:20:cd:0f:e7:
dd:f9:c1:4d:9f:3c:26:91:f2:b8:3e:ea:3d:65:7c:86:2c:64:
47:3e:00:36:00:95:04:26:bd:d6:38:47:55:2e:6f:78:e7:20:
df:2c:4c:cc:51:7b:4f:b5:fe:dc:c3:70:69:1e:d0:e9:31:23:
ca:e3:ca:ab:a4:39:30:1d:4d:98:79:3a:cb:ab:c6:86:ed:01:
cb:61:39:44:32:16:ab:cd:66:0f:0d:79:71:09:18:c2:9d:83:
9b:9d:69:d0:83:e9:8e:b9:47:a6:88:44:86:ac:3f:43:be:31:
ca:3a:3c:9b:e8:42:a8:26:30:a5:7e:84:da:58:21:98:29:2f:
07:10:e1:34:85:5a:83:31:74:8f:b9:31:a1:fc:df:19:9b:31:
64:d7:66:a2:88:3b:2c:3b:88:4e:3e:84:f7:ec:1f:06:84:ea:
4e:90:ec:1c:a7:fb:f4:e4:88:f3:1c:82:98:13:0a:54:39:0b:
99:b9:78:79:37:53:08:e3:45:ec:aa:e5:a5:dc:28:83:c5:91:
8e:d5:c1:b0:b9:da:4c:f1:ab:ac:02:e6:00:11:93:a3:59:69:
66:e9:7f:d5:a4:50:61:e5:1f:cf:03:69:e3:69:c2:e7:b5:cb:
a5:1d:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:10 2025 by rpki-client