Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: /GUx7aE4gTb5zBYgQXeWLTylSti+MwMVFMqS24S4tCg=
Subject key identifier: DC:52:CC:EB:62:D2:BB:75:11:89:31:AD:EA:A1:01:82:D5:58:DD:46
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 0199FD6B10F6C9A8FD0C0CA35F90ABA1B62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0E40
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: Mlw9G4CgaynbP+mqJM7SVN4lLId7Cez2upC98VcsW/c=)
2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:10:f6:c9:a8:fd:0c:0c:a3:5f:90:ab:a1:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=dc52cceb62d2bb75118931adeaa10182d558dd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:c0:84:76:25:5c:64:b2:b8:c7:cf:c9:45:
21:38:6a:f3:63:a2:fa:48:b0:7f:81:d6:77:0b:f3:
5e:57:71:cb:0d:f9:b8:be:77:74:6d:f8:2e:2e:a3:
8e:3d:59:67:c9:e1:22:4a:50:50:4b:ca:35:46:e1:
4e:c9:a2:27:5f:6c:aa:8d:6f:d4:2d:db:c6:c9:ed:
81:b9:68:d4:da:f5:36:53:c4:94:af:51:2e:bf:e5:
bb:2f:dd:d2:1c:1b:54:3a:aa:57:25:b9:50:cc:a5:
6a:0f:63:68:6a:93:39:f8:01:cb:ea:a1:bd:72:1b:
ae:9e:f5:de:47:b6:fc:f8:50:2f:3d:a4:1c:5c:6a:
97:3a:88:ff:59:85:3b:ca:dc:94:73:16:fa:af:59:
e8:b1:c4:84:36:7c:9a:3a:31:68:04:41:84:38:27:
da:a7:be:ac:f2:93:de:ea:67:7e:78:04:7f:07:7a:
49:ee:a1:3d:27:fd:ac:97:96:e5:7e:9e:f4:fa:ee:
39:b6:ba:0a:2c:ba:f2:ff:22:59:be:5c:66:44:26:
31:5d:df:74:6a:36:28:77:3c:09:62:b2:48:4d:39:
fa:85:0f:8d:d8:0f:b2:62:92:74:73:75:d5:d6:71:
0b:7b:82:2f:e6:5c:2d:d3:58:88:8a:f7:9b:39:45:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:CC:EB:62:D2:BB:75:11:89:31:AD:EA:A1:01:82:D5:58:DD:46
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fe:3b:a7:13:74:2d:a6:b9:b6:41:68:4f:7e:87:10:d1:9f:
70:68:e0:6b:ce:cb:c9:53:3d:3d:51:e5:20:44:f2:e4:d7:92:
c0:c6:b1:b8:03:c6:2a:ea:38:e4:4b:75:d4:5d:66:9c:7f:47:
42:01:12:a2:cc:ef:a6:53:ab:db:a9:39:4e:a4:2c:23:f4:61:
9e:fe:14:49:07:2f:b7:3b:bb:48:bf:43:31:ea:b6:fa:16:b4:
cf:d5:89:59:47:15:22:39:a6:cd:a5:d6:89:04:7c:e6:89:02:
6a:39:68:85:a0:28:4b:59:ed:4a:3f:32:01:c2:b8:04:b5:e8:
4b:d1:a1:df:ec:54:04:f8:54:60:73:a6:ad:f2:d3:b4:cf:98:
d2:91:47:6f:27:ee:4e:96:81:fa:21:28:00:c1:b5:b4:2a:06:
1a:66:b2:e7:91:bf:1d:4f:aa:0c:67:71:61:60:02:d1:d2:82:
5b:f0:a2:9e:fd:01:1d:ae:41:6c:c0:b6:17:af:a1:45:95:46:
76:fd:24:3e:1f:ef:38:3f:3b:cc:22:5b:89:12:15:34:12:28:
d0:63:da:60:11:9f:4a:f0:6f:9d:70:a3:89:20:ed:ab:86:21:
56:ab:41:e4:c7:b5:91:80:10:d9:f3:39:c0:47:2d:45:6c:6e:
bb:e8:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:48 2025 by rpki-client