Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: cN0pR7gXiC0j61NHdnwDDc6Kc18vcu3fhsXrrn4mEbU=
Subject key identifier: F2:17:4A:C3:C6:60:9F:13:7B:CA:5B:49:2F:1A:1E:40:FA:FA:D4:87
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 0199FE4781E5B9FC23B60A7E8094C605CAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:02:03 +0000
Manifest this update: Sun 19 Oct 2025 21:02:03 +0000
Manifest next update: Mon 20 Oct 2025 21:02:03 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: Ri4dyz8g3AnDbb0xPIP6rS7Uk18TJn99Tmc/YDaZBO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:81:e5:b9:fc:23:b6:0a:7e:80:94:c6:05:ca:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Oct 19 21:02:03 2025 GMT
Not After : Oct 20 21:02:03 2025 GMT
Subject: CN=f2174ac3c6609f137bca5b492f1a1e40fafad487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:9c:d9:6e:fe:94:5a:7d:42:d5:25:81:5e:
24:46:34:cf:24:87:32:10:12:ca:d6:ca:76:38:57:
20:73:d1:bd:b5:71:c7:5a:44:6c:77:ef:57:c6:3b:
5f:31:d0:b0:ec:91:70:27:f3:77:ee:5d:c5:b8:38:
94:6c:c6:f5:9b:97:8d:e2:48:bd:e0:b5:e9:3e:d2:
84:3d:2b:0c:05:6e:78:6c:f6:f0:35:0a:ee:da:43:
2d:fb:07:8d:14:65:f7:03:87:b5:af:f0:09:1f:6e:
37:67:80:b5:31:c1:e1:d3:5c:d5:04:60:07:9b:95:
ec:1d:e4:ad:6d:2d:d6:03:6f:b3:48:e7:73:3d:e9:
ce:b9:05:13:24:43:05:a2:ba:0c:1a:23:bf:c3:cd:
0c:b1:09:e8:d6:a8:ae:13:df:f0:d2:80:7b:33:ae:
b0:52:d8:b1:b5:a6:f2:e4:17:2c:23:56:8c:66:a2:
dd:ae:1d:68:97:32:4a:cb:08:28:5a:47:06:2e:6f:
c7:82:4d:8a:5d:c2:99:d3:60:72:42:c0:23:32:47:
33:95:a3:b9:9c:70:b1:0b:2a:2a:72:4d:f6:05:8f:
34:2e:98:f3:6a:93:a2:14:b7:e5:43:3b:50:59:30:
42:86:18:c2:0d:9c:11:67:6b:d5:76:a4:09:35:cb:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:4A:C3:C6:60:9F:13:7B:CA:5B:49:2F:1A:1E:40:FA:FA:D4:87
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0d:c4:cf:f6:85:a5:58:f9:57:f2:aa:78:1e:9c:0f:6a:20:
b5:d1:8c:14:85:d0:a1:a0:ce:85:81:9c:38:9e:ee:76:7d:3c:
d8:83:7d:0b:a2:fe:28:a4:0c:75:5c:ae:e5:08:f2:0f:e2:d6:
10:b3:5c:e5:96:f8:de:25:3a:d3:23:9b:d2:a9:5f:93:1c:05:
47:77:dc:c7:ff:a9:f8:45:de:f5:26:19:87:82:9e:6e:30:f5:
77:35:a4:04:8d:99:82:d8:78:07:d5:e5:0e:76:f3:5b:09:f6:
b9:72:f7:d5:94:a1:2f:32:b4:b1:23:5b:a0:7d:48:c7:d2:3c:
36:09:f9:8f:5f:da:9e:ff:25:e4:e6:5a:42:82:f8:83:64:b6:
79:13:53:96:ee:e4:61:e1:86:72:70:ef:1b:de:fd:b4:bb:52:
fa:ce:b3:02:f5:71:12:16:63:6a:48:8a:be:6f:51:15:b9:f0:
a2:2a:af:d2:90:3d:d1:d4:b4:e8:34:a2:29:dd:f8:ad:d4:02:
86:26:0d:9e:1b:7e:bf:37:3c:0d:e5:aa:6e:b0:92:53:97:31:
d0:99:22:45:84:09:bc:e9:fa:43:91:14:fa:e7:0c:b0:01:19:
61:25:20:e6:6a:bd:15:40:c2:b9:d9:b3:1f:37:a8:ce:0d:cb:
d6:90:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:57 2025 by rpki-client