Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: VvEUVU5bHMoeuDxuWHR73s0ual7OFqDZ2hj4G1v85nk=
Subject key identifier: EA:D2:CA:DA:53:7F:F3:C7:16:D0:90:1C:FC:7E:99:0D:4D:83:04:EF
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 0199FEB48BAD960215112EFA35947A523414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0D12
Signing time: Sun 19 Oct 2025 23:01:09 +0000
Manifest this update: Sun 19 Oct 2025 23:01:09 +0000
Manifest next update: Mon 20 Oct 2025 23:01:09 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: lwySaKtwYl0ZmgulWUt1i0gwFjI5Qf7U2P9rSh0hgBA=)
2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:8b:ad:96:02:15:11:2e:fa:35:94:7a:52:34:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Oct 19 23:01:09 2025 GMT
Not After : Oct 20 23:01:09 2025 GMT
Subject: CN=ead2cada537ff3c716d0901cfc7e990d4d8304ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:d5:ac:46:44:5d:d9:c7:88:4a:93:31:be:
60:e9:e9:35:72:03:eb:ee:33:ad:d4:06:42:f4:f4:
65:fa:45:47:e2:e4:24:38:c3:cc:da:67:4b:4d:d7:
ed:a9:ab:1e:8a:64:c5:83:e5:0e:b7:97:35:40:08:
02:9e:af:54:84:fa:5f:f0:18:6b:cf:41:78:18:82:
74:bd:87:a0:80:99:00:f2:fa:19:de:47:55:e9:14:
a4:f3:7f:7c:b4:e0:f8:ef:00:8c:9a:81:eb:e5:3b:
7f:97:0a:c8:66:54:3b:d7:88:35:53:f7:cf:6a:e3:
83:a6:e3:ea:29:79:5e:84:73:04:50:ce:b7:8e:1a:
db:24:6b:2f:16:6c:20:da:3d:5a:99:51:b9:ec:45:
93:7e:9f:bf:72:3d:f0:90:39:43:16:a6:82:72:57:
a9:b9:f2:3b:39:03:80:82:84:8d:f1:f6:ae:16:34:
59:6b:e4:8d:85:4c:ab:e9:91:da:53:85:15:45:7d:
1d:cf:ce:7f:ff:d2:6b:6b:14:7e:4f:c9:34:50:01:
f9:58:ac:fc:43:cf:2a:17:27:cf:5d:e5:f8:16:55:
e6:b3:7e:20:0c:56:74:00:5a:69:a1:c3:c1:0a:62:
af:63:61:04:88:d1:f1:e4:a8:2f:f7:d4:97:ad:71:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:CA:DA:53:7F:F3:C7:16:D0:90:1C:FC:7E:99:0D:4D:83:04:EF
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d0:b6:06:e8:25:9b:a2:07:66:fb:71:ff:4c:69:3f:8f:9e:
b1:14:5b:b2:36:18:31:47:2a:95:5a:81:8f:1b:95:11:b9:7a:
1c:f5:61:b2:54:d6:c6:72:a8:5a:c5:6a:39:14:ab:24:05:f1:
82:58:ce:43:b2:47:23:fc:ba:bb:4e:25:46:fe:63:22:cf:ee:
25:56:26:f2:26:88:30:9c:ec:f1:30:ed:e8:ab:8d:ae:81:05:
f2:39:8c:92:62:4f:bc:dc:cb:c4:f8:5b:f4:c2:a5:31:a2:0b:
09:1f:05:be:eb:5d:c8:01:b2:99:60:73:b5:96:9f:ef:2a:ef:
8d:d1:98:37:6a:cd:4a:c7:68:a2:df:07:25:43:fd:b9:52:25:
51:51:28:b1:d2:a9:24:2d:76:80:ff:5f:1b:78:8e:85:32:c5:
e9:c7:32:cd:33:42:fb:3f:42:fc:05:1c:e4:9c:a5:a7:bc:32:
c4:2d:24:25:ab:d7:b1:ec:50:85:27:ac:fe:29:99:72:5c:40:
01:1a:e2:37:87:b5:d7:4c:f7:b4:69:a0:43:b9:59:38:dd:fe:
6c:8e:42:de:53:ea:a2:78:3b:f5:0b:cc:76:39:d8:46:9e:b6:
fe:d7:f4:b1:c3:d5:d0:c2:53:46:c1:fe:2f:85:3f:62:88:f1:
94:d2:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:44 2025 by rpki-client