Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: CB5fBBQ1VMZX3QBt0bgY6Y68lG9f07yN8TDFksOI21U=
Subject key identifier: 75:D3:E0:30:EB:FE:1D:D8:12:CD:B2:F4:E5:7F:57:92:26:91:38:3C
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 0199FFC8A5A863143C3023C93AC0443E1D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 0709
Signing time: Mon 20 Oct 2025 04:02:43 +0000
Manifest this update: Mon 20 Oct 2025 04:02:43 +0000
Manifest next update: Tue 21 Oct 2025 04:02:43 +0000
Files and hashes: 1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: jPdq168FlBej4LBA1mGscdvVTxVxCMKsSnWEXEbw5Dk=)
2: ObpPyrV6nY3VTY_MJsA9gywrfek.roa (hash: 07jwwjcg4kll9zheibcZqtF5uLcKvWgF1fQLeGthDhs=)
3: rMVByUHiw-CJF8yDvID9Hv00TsU.roa (hash: W4FOiMzNAns/15Ks3q0b2X4cmgwlITeZp0cOOWz/tew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:a5:a8:63:14:3c:30:23:c9:3a:c0:44:3e:1d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Oct 20 04:02:43 2025 GMT
Not After : Oct 21 04:02:43 2025 GMT
Subject: CN=75d3e030ebfe1dd812cdb2f4e57f57922691383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:30:b6:35:8f:11:4c:13:e3:2a:76:8f:62:
0d:d9:01:ff:8b:c2:38:75:c4:a6:a7:9f:88:cf:58:
5d:ed:38:a8:70:cd:08:68:b3:87:6e:9d:43:c3:4e:
1c:08:6b:ce:74:84:c1:3d:54:65:af:0a:e8:01:0b:
ce:a3:99:3b:6a:70:e6:45:89:b0:56:12:56:fc:2a:
88:95:ae:6d:6b:f8:3f:ab:0b:2e:91:76:99:74:c2:
db:52:8a:ba:ef:f0:a8:e7:b2:45:42:b8:78:c8:ef:
0d:39:19:2e:61:12:a2:34:f4:b1:8d:f1:2d:5f:2a:
cf:b0:be:56:fb:7f:9a:d9:fd:68:99:ac:cb:2a:02:
2d:33:cb:a1:ea:e1:4f:13:cb:c9:08:48:cd:c4:f6:
a9:6f:7e:00:f8:ce:9f:1b:e6:28:7e:25:96:2d:53:
e9:50:6a:d8:ea:98:8c:91:60:bc:9a:47:96:42:a6:
42:37:99:1c:dd:b5:8f:e1:ee:2c:28:0c:ad:41:cd:
66:b3:a0:3d:2e:85:36:1c:50:bf:6d:0b:b7:6a:46:
1c:af:b3:78:84:a8:83:60:9f:74:ec:47:36:2d:f7:
c7:62:f0:0f:e7:59:60:ee:dd:10:10:33:82:c4:cc:
4f:9c:2d:e4:c6:a5:31:4a:ac:fa:bb:91:3b:b2:40:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D3:E0:30:EB:FE:1D:D8:12:CD:B2:F4:E5:7F:57:92:26:91:38:3C
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f1:41:63:cb:7b:1b:a7:56:07:8c:b4:25:c1:2d:50:db:04:
a3:c6:06:d8:2c:40:f3:5e:aa:77:51:a3:4c:d4:bd:8c:c1:c0:
01:74:35:13:94:d3:70:c2:5c:5a:2d:fe:ab:a3:da:4d:9b:25:
fc:04:b5:0c:81:fb:45:e0:33:3a:32:ea:d5:d0:56:07:b2:85:
a3:10:9a:81:9e:be:a4:cb:bf:98:06:4c:3c:1b:39:a2:c1:5f:
25:6c:d4:6f:f4:e3:00:90:cb:70:fe:4a:0b:c7:c9:bf:d6:d7:
50:28:c9:fb:dd:8a:96:9b:ca:81:53:c7:db:92:cc:7f:28:5a:
b9:e7:31:7d:28:f0:49:fd:35:5e:a0:9d:81:5f:1d:c9:2c:1a:
c3:32:5f:14:8d:dc:34:60:27:d5:11:b8:20:bd:e4:e7:70:90:
91:ca:e2:e4:28:c0:b4:e8:68:c1:e5:3c:e5:10:ab:89:ca:7a:
7a:29:9d:de:d1:67:2f:3f:be:f9:b2:a6:c8:07:3b:ed:ef:52:
40:70:4c:22:99:0b:8a:8b:26:f1:53:7c:04:55:32:c5:07:2f:
6c:84:d4:4c:bd:56:4d:ed:a5:56:49:28:f0:d6:e6:08:57:34:
a8:68:ec:79:6f:93:cd:e3:b4:8f:aa:3f:9a:1e:2c:81:e0:ac:
79:03:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:39 2025 by rpki-client