Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
File: MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json)
Hash identifier: ZjTMQWaryeDhU1CZ9LAvmgDjwY3nXpI5TtpXiahXS74=
Subject key identifier: 31:F5:B1:19:42:B2:A6:FE:C4:DE:79:65:19:37:76:3F:D2:08:B0:09
Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
Certificate issuer: /CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Certificate serial: 0199FBEAC110DEFF64B12A9889C3BA94CDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
Manifest number: 0A51
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: o245G+mDf3BPxrN+xtieHzU9Qwa/PQIBbsbYNU9FZcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c1:10:de:ff:64:b1:2a:98:89:c3:ba:94:cd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=31f5b11942b2a6fec4de79651937763fd208b009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:80:f0:0a:ce:93:3f:13:8f:89:6a:ef:70:
b7:7a:a1:72:32:3e:28:4a:fa:36:1c:21:75:78:d3:
51:37:84:e9:d2:21:95:39:e7:d3:51:92:0a:ed:70:
70:f0:2b:c4:0c:33:79:2f:df:7a:19:ae:85:09:8d:
2e:6f:84:4f:d3:47:ac:55:53:76:75:97:bd:3f:34:
32:88:53:6b:78:d5:a6:78:4f:f7:cf:20:ac:10:0e:
e5:c9:1c:fa:13:1d:c3:d5:4f:e3:e6:85:fd:5f:c1:
24:ea:f9:60:02:65:6b:04:fd:89:ff:6e:9b:00:2f:
d7:e4:08:5c:d1:42:ba:dd:dc:b0:a9:9e:ac:46:5e:
c8:93:72:15:07:8f:48:4f:11:3f:ff:ad:e2:06:db:
0d:d0:ac:0a:c6:c8:f7:ae:e5:e7:ca:da:c3:eb:56:
41:27:54:7a:b0:04:a3:34:37:bf:c8:59:98:c5:5f:
aa:c3:fc:3e:28:0a:6a:93:5c:5c:ae:5f:6f:37:72:
88:90:fa:e1:2f:0a:28:f0:b4:11:d1:d2:c5:91:b7:
0f:cd:43:fe:39:ae:52:50:5e:a9:dd:5d:f5:ca:b9:
5d:ab:77:0a:9e:97:9c:8d:a1:cc:ba:4a:d7:a2:88:
7e:2b:db:a2:82:05:b0:9b:30:eb:4c:a4:82:8f:0c:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F5:B1:19:42:B2:A6:FE:C4:DE:79:65:19:37:76:3F:D2:08:B0:09
X509v3 Authority Key Identifier:
keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8d:4d:77:24:59:f9:d8:41:f1:f3:fe:38:0b:4d:fc:87:0b:
e8:66:72:4c:cb:ea:07:f6:5a:b2:38:b8:52:b2:73:48:88:3e:
3a:41:fb:6e:ba:65:4d:67:55:a8:12:03:2e:ab:d6:2d:80:2b:
d2:cc:b6:55:c1:ec:fd:ac:73:bb:42:25:da:24:69:f2:1b:1a:
ae:53:18:4b:54:0f:0e:67:de:e0:b6:62:eb:cc:bf:c8:ea:f2:
11:af:2d:30:ad:52:2e:e0:4a:0e:2d:49:d6:9a:87:ba:85:62:
d9:11:68:05:92:8b:43:7a:bd:bd:c3:66:b9:5d:33:e5:b1:96:
dc:30:d3:60:5d:11:c8:5f:99:11:f2:c5:77:ab:5e:d1:a9:36:
d6:b4:92:7f:f3:a0:23:cc:9b:1a:93:2d:e0:5b:86:58:07:2d:
d9:4a:48:0d:01:e2:fd:ef:91:11:80:2c:4e:56:14:22:64:9d:
f1:45:d8:d9:db:44:31:01:3e:0f:8e:c4:f8:56:6b:24:f9:dd:
80:36:51:42:4f:25:e4:4a:3d:e4:30:5f:26:60:1e:db:69:78:
48:66:0b:c1:f4:5e:f2:63:ba:ab:c2:f2:7e:60:6b:11:de:d4:
21:fa:ed:63:c4:02:97:35:9e:8d:a4:c5:41:cd:c5:d9:81:9c:
55:f6:ce:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:56 2025 by rpki-client