Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier: P9hIGURPyPVXPUZIov7F+APuTUSLvep1uerDtLDPOGM=
Subject key identifier: F9:C5:85:10:22:00:A6:6A:B7:CC:1B:44:05:60:52:74:E5:D7:04:F6
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 019A0147947B3FB0A3656EB360120BF17D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number: 16ED
Signing time: Mon 20 Oct 2025 11:00:59 +0000
Manifest this update: Mon 20 Oct 2025 11:00:59 +0000
Manifest next update: Tue 21 Oct 2025 11:00:59 +0000
Files and hashes: 1: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: 4T7JqztEXc75LXBBRjkAYZQfWuLPorOtNUhI2N0xu5o=)
2: S8_Fg8ytFF0tZ9kXzqLdIHZcAe4.roa (hash: k0MUzfyKgSwFW5KYtO8cWP9faKM6iooPUUBEmeIqdP0=)
3: dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa (hash: tReFkDEyNqbnnxeZucnGGCRzuWm3mLRotTGRZWTwBCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:94:7b:3f:b0:a3:65:6e:b3:60:12:0b:f1:7d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Oct 20 11:00:59 2025 GMT
Not After : Oct 21 11:00:59 2025 GMT
Subject: CN=f9c585102200a66ab7cc1b4405605274e5d704f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:77:53:e6:71:5e:b4:86:d4:47:2a:76:56:fb:
2d:b0:6c:d9:95:95:d2:9c:67:32:c4:ea:3c:19:10:
75:1f:ff:68:0c:35:98:83:84:ef:4b:05:da:83:a2:
65:e1:a7:e7:a2:a0:25:6d:c1:7b:1b:6f:8d:77:d6:
37:c1:99:68:00:65:de:d6:dd:de:20:42:72:a1:4b:
b1:55:77:b6:cf:f6:8a:fd:f6:77:69:97:21:e1:a5:
2b:0e:d5:8d:45:22:66:18:62:c4:06:32:da:91:df:
32:f3:ae:78:2f:bb:d8:84:05:11:2c:d4:81:ad:8b:
e8:ce:d1:b5:86:10:b7:a1:ba:92:73:8b:17:5d:64:
91:6a:49:77:1a:5b:de:78:0d:49:7d:c3:c9:50:5f:
33:59:7d:07:24:3b:dd:4f:e1:8a:b6:1c:76:e6:6f:
db:10:ad:3a:2a:70:c1:c0:07:4e:ce:13:6f:fc:ab:
da:7e:4a:8d:66:e8:ee:7a:48:d4:0b:5e:b4:3d:12:
28:ed:cf:5a:88:6b:23:b1:0f:4c:68:95:9a:1f:7d:
65:b3:bd:68:89:79:8e:c0:3e:03:49:81:9d:87:22:
74:a5:45:7d:3b:e4:bc:a4:5a:52:ef:ff:2a:fc:d5:
31:07:ae:4b:54:e7:f3:1f:f0:a7:d0:05:0e:8c:de:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C5:85:10:22:00:A6:6A:B7:CC:1B:44:05:60:52:74:E5:D7:04:F6
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2b:99:ad:93:4a:ac:e4:c3:4d:1c:15:59:7e:af:c0:80:41:
dc:4f:45:71:dd:ff:12:45:39:f7:24:07:d3:5f:49:3b:6e:b6:
1a:f7:37:eb:e6:92:f6:4d:4e:73:63:5a:bd:a9:78:51:9f:95:
7e:7f:3d:34:3c:90:4a:aa:d4:f9:5f:f5:b0:ef:5f:c6:34:2f:
b8:56:89:34:95:65:ab:42:f9:c3:7d:1c:cf:ff:4f:71:b2:9a:
9b:27:d0:ac:e4:03:31:35:5c:26:dc:05:e6:ff:45:f1:70:16:
17:da:00:04:47:bc:7a:dd:01:15:64:b4:0d:3b:19:a1:e7:b4:
19:09:2b:a0:e6:11:77:e0:86:e6:c2:4a:40:68:00:eb:46:c5:
00:5c:52:d0:27:bc:8b:4a:61:6c:3a:e0:15:ae:94:e8:8b:f5:
c8:04:14:e3:c9:cf:58:b9:7f:92:f2:de:fd:16:85:9f:2a:55:
2f:f3:27:6a:57:6b:06:68:49:3b:49:20:26:47:26:14:50:7e:
dd:50:39:bb:38:1e:08:a0:0e:31:57:b6:63:71:1e:3e:2b:35:
d9:37:58:63:57:08:97:a8:02:7e:ca:6d:e0:70:d6:ee:7b:17:
03:96:5c:88:38:cb:e3:ee:1b:a0:46:42:7b:48:82:9e:b6:c2:
b1:ef:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:51 2025 by rpki-client