
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: o9RXGm0PIy9llFdeZyHxxDCMwciYUyGESFAmF8umGxs=
Subject key identifier: D3:3A:FC:8C:7E:A5:21:B2:F2:FC:14:49:AE:97:B0:6D:7F:E8:48:CA
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 0199FBEA837F0CAC751EFAF2832377028891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: tCBu6DudwhvmUFxTFPZ6GNIRrecPJ/3XdeK5veqv8mM=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:83:7f:0c:ac:75:1e:fa:f2:83:23:77:02:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=d33afc8c7ea521b2f2fc1449ae97b06d7fe848ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:2b:88:64:e5:1c:c0:96:4e:9f:ab:15:9a:
13:8f:53:c7:fb:b3:8e:15:75:01:2b:f2:82:c3:a1:
65:bc:90:68:aa:10:ff:8e:c4:c0:74:42:6d:c1:2d:
b3:f8:72:61:90:a5:b4:85:f9:d2:39:6a:eb:df:de:
44:cc:9d:85:fe:ba:04:16:c1:1e:8a:df:b7:71:53:
93:ef:fe:71:32:65:28:08:dd:48:5b:b1:5e:63:b7:
c6:6d:39:bb:b5:02:76:9c:f2:08:87:8e:66:00:97:
aa:2a:5b:e6:a2:84:68:74:b2:47:00:38:c7:48:63:
11:2b:cc:0a:0d:2f:9f:e8:08:bf:7b:f1:9f:be:97:
53:42:47:b4:a6:86:e1:f3:e4:da:bb:f6:eb:60:9a:
28:b5:d0:68:18:0a:de:30:a0:5a:89:9d:88:b2:ac:
92:9f:fa:b4:f8:81:f6:88:85:51:83:19:05:e9:95:
3d:3a:2c:6b:b5:5a:f9:08:d2:ac:54:34:1b:67:23:
f1:1a:05:e6:34:d8:8a:7c:c6:0a:d3:28:ea:ca:12:
53:a0:7b:cd:51:85:4b:f3:9b:dd:d0:4d:ec:78:02:
52:2a:72:69:29:68:06:23:3d:f9:fe:43:3d:c7:d4:
dd:6a:da:a8:14:d7:15:00:66:8a:0c:79:b7:2a:8c:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3A:FC:8C:7E:A5:21:B2:F2:FC:14:49:AE:97:B0:6D:7F:E8:48:CA
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2c:e1:78:e3:b1:89:12:53:81:23:95:4f:8f:b7:65:44:a4:
9c:38:17:81:6f:e1:af:39:a4:cd:1c:4b:0a:87:b1:af:7e:e3:
7b:b6:43:a7:a8:b4:42:93:b9:9a:ac:9e:cb:59:91:78:d1:48:
0a:7c:70:46:32:08:4b:fa:85:f9:03:09:f0:46:bb:c6:8a:30:
6d:2a:fc:93:34:7e:f5:52:51:59:cf:b2:18:bd:0b:9c:71:f3:
74:a4:8e:85:c3:6e:28:3c:4e:0d:46:0b:da:06:aa:42:84:6e:
65:95:fc:bf:6c:e4:2e:29:b6:a3:1e:7a:c7:a0:8f:24:ac:a0:
3e:3a:f9:e2:40:94:d6:7f:5d:33:c6:43:d6:24:62:f6:30:8c:
01:54:e9:ee:e5:03:5d:37:44:46:7b:2e:fc:2e:e5:e1:d4:9b:
c9:a9:b2:cf:5c:93:d5:9b:06:a0:72:ae:ad:81:37:b2:97:3a:
a1:0d:13:d3:f3:d7:ab:e6:a1:b4:b9:84:2a:41:e7:36:ea:7f:
08:48:94:cd:22:0b:d4:59:e2:51:b2:a1:9b:3c:99:a4:db:3b:
65:3f:45:69:f3:3f:ec:b5:01:df:4c:63:d6:e8:c7:9e:07:04:
47:28:b1:e8:02:5c:ff:36:ee:f1:58:bc:2b:1c:73:7d:99:91:
b3:0e:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:00 2025 by rpki-client