Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
File: m263eIMkLPw4ZQB4iNCt7-s-cYs.mft (raw, json)
Hash identifier: E8V5NZxIohOAw+ovxFCx7XbUSIuCjOX8UQq0e6G0riA=
Subject key identifier: B5:E3:7A:A5:68:F0:D5:85:00:93:E3:4E:FC:17:77:C4:8F:BA:62:1F
Authority key identifier: 9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B
Certificate issuer: /CN=9b6eb77883242cfc3865007888d0adefeb3e718b
Certificate serial: 019A00A2EFB23282F019CCB730005F6A2FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
Manifest number: 03D3
Signing time: Mon 20 Oct 2025 08:01:09 +0000
Manifest this update: Mon 20 Oct 2025 08:01:09 +0000
Manifest next update: Tue 21 Oct 2025 08:01:09 +0000
Files and hashes: 1: m263eIMkLPw4ZQB4iNCt7-s-cYs.crl (hash: 6kM0zQqqAJcr+EtCf2PeEz0a6bHeHGqcoeYByOIsvtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:ef:b2:32:82:f0:19:cc:b7:30:00:5f:6a:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6eb77883242cfc3865007888d0adefeb3e718b
Validity
Not Before: Oct 20 08:01:09 2025 GMT
Not After : Oct 21 08:01:09 2025 GMT
Subject: CN=b5e37aa568f0d5850093e34efc1777c48fba621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:94:fd:32:89:99:03:e6:e7:7a:fb:a9:f8:
09:35:1f:93:7f:32:d5:77:48:91:15:8e:e6:b2:b3:
af:01:ca:3f:f3:38:85:33:1a:b4:c9:4a:f8:8e:6e:
86:11:56:fc:c4:82:e8:21:4d:35:43:86:f1:d8:52:
a0:44:98:e9:b8:f7:a2:a0:03:67:3c:0e:58:e3:d9:
c7:39:c9:6b:b0:96:b2:20:c6:21:66:f4:0b:bd:8e:
28:93:f0:81:b7:ee:7d:5d:73:d7:30:0a:53:89:da:
b9:ab:cc:a3:2f:c2:5b:b9:e1:89:1e:31:26:e1:40:
7e:ad:16:12:17:2f:71:6e:b9:2b:53:28:68:b0:a1:
ec:cf:b0:d9:30:02:fa:22:f2:77:5c:d6:7c:87:be:
b4:5a:bc:12:a6:92:f0:6d:fb:06:70:da:6a:10:b0:
a8:49:b5:ca:71:4d:93:5d:8a:59:e1:83:04:9f:e9:
03:a4:5b:eb:0d:6a:8e:1e:d1:b1:f3:97:ad:0b:41:
a8:cb:06:4e:06:22:b2:36:24:6c:b0:e3:9b:0b:70:
e8:24:76:3b:44:92:29:5d:16:03:b8:ec:84:77:8d:
6c:5c:4b:b7:17:b3:9d:32:30:c8:28:1a:86:41:d0:
be:a2:5e:ba:38:a2:b4:bb:6d:66:65:70:32:e4:57:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:7A:A5:68:F0:D5:85:00:93:E3:4E:FC:17:77:C4:8F:BA:62:1F
X509v3 Authority Key Identifier:
keyid:9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:6d:15:de:49:f7:9f:10:5f:eb:ca:e4:70:5f:be:b3:79:
6f:7f:28:23:78:7f:b0:a2:08:10:49:8c:fc:a9:dd:93:8f:21:
41:b1:76:68:a4:14:3b:4b:0c:9f:ce:29:0e:4f:5c:2d:40:7c:
21:be:17:ed:c8:ae:21:96:3e:90:b1:0c:a4:ec:fd:34:c5:4f:
fe:9f:25:ef:4e:0d:f6:c2:92:00:a5:c4:e7:bf:c1:f0:94:cb:
59:92:e5:30:9a:8f:8d:e5:ae:9b:4a:5e:84:a8:f6:e7:97:17:
df:12:28:38:a3:a5:e1:bf:95:a8:aa:e5:00:64:36:b8:6d:bf:
f2:b4:b5:83:40:a6:de:ea:25:4e:f9:93:f5:47:be:c1:7e:55:
82:e1:18:a2:7d:ac:f9:02:90:b5:84:89:f2:7f:35:37:79:f6:
51:e8:a3:cd:78:6d:ca:59:72:96:9b:28:73:36:dd:eb:0c:63:
c9:67:31:45:06:d7:77:11:ea:ce:14:88:d9:5f:cc:b1:20:d0:
61:3b:3d:34:47:4d:56:26:a4:e0:1b:e9:62:4c:5f:c7:2d:25:
ab:ad:82:3c:b0:d8:8f:68:6b:a7:b0:cf:3d:0e:02:e9:4b:a6:
c1:a4:40:9d:46:19:3b:54:6b:d6:85:39:64:82:3c:b9:5b:a1:
35:be:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:59:43 2025 by rpki-client