Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: t/Jhfxrewhv5fsCjTldpDdYTK9DTZ+S0cZyUFbyvaQw=
Subject key identifier: DD:2C:BE:68:C9:10:67:E8:0B:03:34:9D:13:59:E7:2B:39:57:A9:DB
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 0199FAD831EB8AE4C7F684276C2DCE80A05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 05:01:36 +0000
Manifest this update: Sun 19 Oct 2025 05:01:36 +0000
Manifest next update: Mon 20 Oct 2025 05:01:36 +0000
Files and hashes: 1: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: XqS6KSMSXNo4QWy6m8O2N93Bv+IE5LUp0tYpCf95aIc=)
2: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (hash: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:31:eb:8a:e4:c7:f6:84:27:6c:2d:ce:80:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Oct 19 05:01:36 2025 GMT
Not After : Oct 20 05:01:36 2025 GMT
Subject: CN=dd2cbe68c91067e80b03349d1359e72b3957a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:2b:f1:d6:05:96:e9:a1:2e:31:5b:f0:b8:
d5:e4:b8:17:2d:d7:c5:04:05:bb:08:2e:b7:78:c2:
0e:5d:28:21:d9:22:81:d6:84:b5:ac:3b:7c:9d:a9:
2f:29:73:bd:7e:2e:ad:d4:3f:d5:6c:e0:29:de:b4:
ba:bf:47:51:79:69:cb:42:00:03:76:20:78:47:92:
f3:35:9a:71:bd:25:e3:dc:17:03:2a:f6:5c:51:be:
d3:11:70:58:f4:8c:99:1d:2c:7b:9b:c8:83:75:0e:
c2:32:55:07:f2:3c:4b:05:68:d1:da:97:88:2c:33:
31:b0:4e:7c:90:65:27:b8:37:08:e2:f3:05:c5:b1:
b0:e8:61:f4:b2:3d:a9:d8:21:22:e4:88:73:08:51:
dc:cf:ac:7a:c8:29:99:5d:74:e9:a6:82:d6:99:11:
6d:11:0a:8d:bf:c5:e9:9e:06:95:b7:f6:35:1a:76:
fd:5c:4f:41:df:af:d3:eb:2f:ea:b1:ef:70:58:b5:
46:d2:c6:45:c8:c8:b2:c7:1f:a5:cf:98:51:50:a1:
4f:15:0f:34:e8:b0:3a:04:98:97:a2:9a:87:a5:8d:
eb:c3:66:cb:35:85:ee:27:f7:19:56:de:fa:9b:44:
6e:d7:3a:b0:1d:65:d8:e8:43:2c:06:3f:f1:77:23:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:BE:68:C9:10:67:E8:0B:03:34:9D:13:59:E7:2B:39:57:A9:DB
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:e7:16:21:f5:d0:d2:88:e6:b0:db:07:a5:77:3c:61:bd:
7b:4a:9c:58:ea:a5:db:3e:6d:18:f9:2c:d3:1c:17:13:df:ab:
9a:b1:8a:58:8c:4b:ee:15:64:2c:e0:c3:51:3f:60:50:25:6b:
16:ad:56:d1:84:c5:ca:38:ae:57:8f:23:99:ac:b1:08:ad:ea:
9d:2e:43:15:2a:69:15:89:6a:af:8f:52:16:f0:a3:02:02:02:
72:4b:95:c4:1a:c0:80:ee:6f:b7:e5:94:db:4b:cd:99:4e:cf:
f1:81:64:80:a8:fe:95:ce:94:4a:62:8b:75:01:cd:55:f3:ab:
1c:d0:59:cc:c2:3a:58:78:f6:25:51:3d:4c:81:cf:09:0c:fd:
92:36:65:0e:3b:c9:b4:0b:c7:a3:b0:63:25:57:f2:a3:43:fc:
d8:06:fc:20:d1:9f:24:2f:7a:d9:31:da:a8:b8:02:f0:1d:d6:
ce:cc:35:a9:32:bd:20:c0:ad:6d:47:ea:71:1e:f2:30:2b:8f:
73:dc:c7:8e:b5:06:ab:79:48:d9:de:56:cb:43:87:65:49:29:
cc:e6:27:c9:7e:e3:7e:dc:e6:38:40:f4:df:01:49:f5:e9:6b:
47:13:ad:9c:de:db:91:ef:21:02:b9:7e:a1:04:7d:d0:c6:3c:
99:29:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:42 2025 by rpki-client