Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier: +NRclvrr+to+XDGQkgHUID8IA/DDFdnAnQu+uLgufgo=
Subject key identifier: 33:35:BF:5E:4B:8F:ED:03:03:6B:FF:F1:A9:44:5F:E5:07:20:ED:D7
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer: /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial: 0199FBEBADE483E8E8C94B7339F6DCF8CE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number: 0FF8
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: 8Gcj1P3qgYwiDkhVUDMXWwsaHdVm9ye6sIjDU5hzAXg=)
2: dXRP_DXzvkSVasQi7xjSi_GeSe8.roa (hash: e9TN5cLdjdYdVfizmweJUa1TiVL/jCcB00INSV37pZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ad:e4:83:e8:e8:c9:4b:73:39:f6:dc:f8:ce:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=3335bf5e4b8fed03036bfff1a9445fe50720edd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:b5:c2:af:4b:54:6c:87:7f:b7:ee:80:cb:
b5:d9:c8:ea:b2:cc:57:c4:01:5c:78:26:ef:11:06:
17:33:bb:57:c2:82:40:e3:69:b7:5a:a5:58:58:f1:
4c:e3:0f:50:d4:b8:c8:f3:bd:cf:7e:42:5d:ae:64:
7c:62:7e:c7:61:09:be:ba:a1:58:8e:6e:e0:67:56:
3a:90:9f:b0:4d:84:5a:77:63:cf:ca:c0:75:8e:5e:
f8:31:4e:88:7a:05:c6:20:74:5e:20:88:94:ef:ae:
29:2b:e2:be:dd:14:cf:6b:e5:93:db:57:47:fe:bd:
4a:e4:1e:b8:96:aa:79:eb:c6:98:82:3a:00:2e:27:
86:f4:57:42:7b:50:61:cd:77:53:9b:90:ca:37:15:
62:27:a5:15:0d:d8:5f:67:c3:d1:ea:6f:dd:40:76:
ab:3b:b3:35:9f:f7:fa:9c:30:6f:3c:f3:83:b4:84:
2e:1b:2e:61:fb:15:3d:04:35:61:7a:e5:eb:14:17:
b2:4e:d6:40:9a:b2:2b:94:8b:ae:47:cb:b4:cf:24:
85:6c:6e:d4:ae:b5:44:fc:b6:87:d5:71:c8:5e:e2:
2e:dd:10:79:f2:b4:d7:74:de:67:42:e0:81:97:be:
7a:ab:83:d2:28:e3:06:26:00:a7:d5:45:eb:cb:5e:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:BF:5E:4B:8F:ED:03:03:6B:FF:F1:A9:44:5F:E5:07:20:ED:D7
X509v3 Authority Key Identifier:
keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4c:cb:a8:1c:4d:09:71:67:9f:11:37:e5:16:71:a1:e1:28:
e3:88:f7:1e:89:4d:32:21:cd:2f:0b:4a:fb:43:7f:38:24:16:
f0:49:dd:e3:3b:8d:8e:6d:04:af:7b:e3:6c:dd:af:be:27:88:
eb:03:3e:91:92:66:25:2a:ef:22:c4:59:4c:56:28:73:d2:00:
14:82:e4:4e:41:d7:d4:37:b0:02:d3:41:cd:e6:eb:20:7c:4c:
f7:10:72:4d:39:f3:a3:a2:12:55:90:11:89:41:38:af:ad:36:
66:35:90:3d:c8:fd:bc:9a:04:64:7f:df:03:ea:a6:df:9d:a1:
4e:ab:1a:e8:92:ce:b3:04:48:de:7b:55:18:e0:1a:fc:eb:07:
a5:af:04:28:25:57:6e:29:e2:a7:53:7c:9f:17:2c:e1:fc:bb:
69:15:ed:5e:e4:6b:86:9a:65:b6:88:d4:24:88:ee:a6:57:4b:
8c:3c:7d:11:06:af:ed:18:22:22:91:77:07:85:90:0e:cc:0c:
77:70:42:78:8a:f4:6e:25:c8:b0:39:f1:0b:46:7e:b5:b0:08:
2b:3e:55:18:eb:6e:a2:09:b9:e3:0a:75:01:92:fd:07:af:91:
3a:77:87:91:cd:36:12:7c:94:e6:b2:d2:de:08:9d:08:54:6e:
27:76:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:17 2025 by rpki-client