Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: udXLAx+MUMGI+Xrh0y51F3EihlnqgI0az2lsqzleopo=
Subject key identifier: E5:12:B6:5D:6B:A4:01:85:44:8B:CF:34:69:EC:2F:EF:22:E3:0D:20
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 0199FD6B4C9AB6DE165E1A4911BC9F6C6953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 1375
Signing time: Sun 19 Oct 2025 17:01:31 +0000
Manifest this update: Sun 19 Oct 2025 17:01:31 +0000
Manifest next update: Mon 20 Oct 2025 17:01:31 +0000
Files and hashes: 1: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: g2PSXI6JCBvSfrzPq+JFxyZSQQvTilgJrpz+Y40Vx2Q=)
2: w5RgxPZJeCHJ32aZdxHuHtsDhQo.roa (hash: Uc4RlDE0xm/vlOwUXxqVD6EiTzssOmMkcQ4YcA/6FLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4c:9a:b6:de:16:5e:1a:49:11:bc:9f:6c:69:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Oct 19 17:01:31 2025 GMT
Not After : Oct 20 17:01:31 2025 GMT
Subject: CN=e512b65d6ba40185448bcf3469ec2fef22e30d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:60:07:e8:b8:19:0a:e4:58:43:15:e0:ae:
b1:a6:43:5f:b6:c8:89:97:b9:20:24:c6:1f:ff:59:
93:5f:85:c1:e2:f7:10:3d:22:c3:12:03:35:4a:4c:
74:bf:87:02:0d:73:be:bf:86:c7:1a:bc:6f:44:c2:
53:e5:7a:93:db:66:dc:75:1f:42:c7:cb:96:fe:c3:
32:df:44:55:ca:6d:b8:03:b1:05:4e:9a:c0:f2:6f:
a7:68:b8:26:82:2c:d3:0f:65:46:7c:7f:65:93:88:
d4:91:39:61:07:27:84:51:2d:45:91:65:d9:1a:1c:
5a:83:ac:77:63:33:5c:85:a5:93:4e:5b:27:86:a7:
ce:e7:89:99:4a:71:32:98:c9:63:b4:f4:f4:0b:99:
45:b4:1d:34:a4:80:94:e2:e0:b3:a1:e0:cf:bb:f8:
e0:77:7d:97:f2:47:6e:04:86:68:15:4c:8e:b3:70:
34:67:96:40:63:4c:af:35:90:cb:a4:95:0b:6d:78:
04:05:66:26:5d:b5:85:57:7d:4e:fe:f5:24:a2:51:
63:ce:16:65:9a:e0:0a:cb:a5:fe:fa:44:f6:01:9f:
ec:50:f1:f6:cb:87:fe:62:65:ae:1e:80:57:d3:f6:
a6:0b:b2:44:83:7d:f9:69:e7:4c:11:04:2a:24:3d:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:B6:5D:6B:A4:01:85:44:8B:CF:34:69:EC:2F:EF:22:E3:0D:20
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ba:82:0d:54:13:fc:d6:41:d3:63:ee:74:dd:18:05:fe:b1:
dd:47:02:76:0a:4a:49:e2:52:f9:ba:a3:24:93:cb:9b:9e:b9:
ba:aa:36:37:f9:0c:a1:ef:86:0e:65:3f:03:30:51:ef:62:44:
ce:4d:d5:3b:c7:ae:09:7e:99:63:60:64:b1:c7:64:e3:4b:38:
76:64:af:ef:f7:1e:00:a8:dc:d5:9b:0c:60:df:06:75:6a:9d:
f4:d0:15:38:2a:0a:ce:18:db:80:88:e0:07:32:bf:af:90:03:
4b:bf:a6:73:1a:6f:37:69:3e:e0:26:7f:44:cd:29:d7:bd:92:
9b:da:85:f7:01:49:b3:a7:52:f6:47:84:9a:92:8b:b3:7c:aa:
46:77:10:a3:ed:77:37:7a:43:96:7e:f9:42:c7:15:64:87:51:
6e:1a:39:83:cb:fe:e3:3b:2d:d7:c6:e4:f0:b4:1f:62:b6:cb:
e5:be:83:76:ef:11:ac:17:6b:f9:82:90:03:8d:c5:c8:76:bd:
22:c3:e7:b3:57:3c:9f:f6:23:45:20:9e:06:07:5d:be:50:cc:
34:a7:31:33:07:84:ee:83:12:36:d9:13:1e:e4:08:28:4c:82:
fb:24:7f:a3:ce:4c:41:c0:06:6b:86:1a:d9:65:ac:e6:73:e6:
31:22:81:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9a0yatt4WXhpJEbyfbGlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNTMzZDllZWY1YTgxMjhkYzQzNWQwMmYyMjMzMjgwMzQ4
ZGMyYjYwHhcNMjUxMDE5MTcwMTMxWhcNMjUxMDIwMTcwMTMxWjAzMTEwLwYDVQQD
EyhlNTEyYjY1ZDZiYTQwMTg1NDQ4YmNmMzQ2OWVjMmZlZjIyZTMwZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx1gB+i4GQrkWEMV4K6xpkNftsiJ
l7kgJMYf/1mTX4XB4vcQPSLDEgM1Skx0v4cCDXO+v4bHGrxvRMJT5XqT22bcdR9C
x8uW/sMy30RVym24A7EFTprA8m+naLgmgizTD2VGfH9lk4jUkTlhByeEUS1FkWXZ
Ghxag6x3YzNchaWTTlsnhqfO54mZSnEymMljtPT0C5lFtB00pICU4uCzoeDPu/jg
d32X8kduBIZoFUyOs3A0Z5ZAY0yvNZDLpJULbXgEBWYmXbWFV31O/vUkolFjzhZl
muAKy6X++kT2AZ/sUPH2y4f+YmWuHoBX0/amC7JEg335aedMEQQqJD19IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUStl1rpAGFRIvPNGnsL+8i4w0gMB8GA1UdIwQY
MBaAFDNTPZ7vWoEo3ENdAvIjMoA0jcK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYt
ZDJjM2I0YzA5ZWExLzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYtZDJjM2I0YzA5ZWEx
LzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbqCDVQT
/NZB02PudN0YBf6x3UcCdgpKSeJS+bqjJJPLm565uqo2N/kMoe+GDmU/AzBR72JE
zk3VO8euCX6ZY2Bkscdk40s4dmSv7/ceAKjc1ZsMYN8GdWqd9NAVOCoKzhjbgIjg
BzK/r5ADS7+mcxpvN2k+4CZ/RM0p172Sm9qF9wFJs6dS9keEmpKLs3yqRncQo+13
N3pDln75QscVZIdRbho5g8v+4zst18bk8LQfYrbL5b6Ddu8RrBdr+YKQA43FyHa9
IsPns1c8n/YjRSCeBgddvlDMNKcxMweE7oMSNtkTHuQIKEyC+yR/o85MQcAGa4Ya
2WWs5nPmMSKBIA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:37 2025 by rpki-client