Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: TBrbGUYyFPRc0ECZffXE3etsALF7+ihXqn/76iwuKn0=
Subject key identifier: 5E:4A:30:1E:2C:61:08:F9:99:2F:43:5F:42:3E:94:F2:55:DF:85:D8
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 0199FC582B46BDA59C24107C9521FE6956BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 0E9E
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: 0tp/oXmuxjwpcAmQsjks+FQa/Us7NWY9tjxQEnpJpsw=)
2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2b:46:bd:a5:9c:24:10:7c:95:21:fe:69:56:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=5e4a301e2c6108f9992f435f423e94f255df85d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:49:6e:8d:a4:b7:db:f6:26:ec:0c:b7:ec:
ba:e8:29:41:ce:5f:48:10:57:bf:ec:3e:cb:9b:cf:
ad:77:11:da:76:51:77:29:d8:65:c2:cd:a3:e3:a4:
e0:51:5f:b4:1e:c9:99:ee:00:ba:66:2b:5a:7b:93:
35:58:35:19:da:3e:d7:b2:2d:0a:ba:a7:ab:5c:ed:
e5:97:98:99:bc:3e:6f:ee:cd:b1:b6:bf:2e:21:4d:
f7:7f:12:bc:40:b1:cf:8f:4a:63:41:fb:4f:dd:31:
83:39:78:2c:50:5f:da:60:05:e7:4d:bc:d8:50:86:
ea:ba:0a:22:58:b6:44:32:05:1e:cb:27:50:c3:9d:
e7:37:f3:96:a8:16:a3:f3:3b:7f:f8:3a:c3:30:ce:
0c:99:5d:a1:c3:a7:3b:6c:01:57:f5:dc:57:6b:96:
18:9c:6f:62:b6:84:fb:e8:91:87:95:1a:93:bb:e7:
cb:13:99:69:0e:8d:36:a5:9c:b2:bf:70:73:5a:0e:
be:06:59:ff:13:0a:83:95:57:24:2b:7f:55:ec:b2:
81:b8:b7:c9:38:4d:a3:a3:d2:e8:f1:b6:b9:35:c6:
c0:3d:16:96:83:d0:e7:ff:20:76:43:ff:1e:04:02:
29:c2:85:25:39:d2:00:59:57:5f:33:5c:9c:02:7a:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4A:30:1E:2C:61:08:F9:99:2F:43:5F:42:3E:94:F2:55:DF:85:D8
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:13:76:29:e1:0d:5a:13:1e:33:a9:a3:6e:0d:f0:e5:b4:48:
7e:82:1f:5e:88:9e:9b:09:ee:51:fd:95:0c:12:dd:0a:20:26:
23:b4:b5:6e:4b:6c:3f:eb:19:57:66:00:5e:b9:1d:db:26:64:
3e:e1:80:cb:69:3d:5a:bd:d3:7c:77:18:9b:ff:77:a7:7d:ce:
fc:e6:9d:61:26:3f:9e:66:62:a0:06:c8:42:84:c8:35:f3:3d:
15:ec:75:db:02:7e:5e:37:c0:99:65:50:09:86:34:df:75:50:
2c:9b:62:3d:64:b9:43:e5:43:a2:5e:a2:33:1a:ff:1b:1e:ba:
fe:5e:89:fe:05:ba:36:53:da:15:0e:3c:05:f0:ee:58:82:24:
8c:a7:68:c8:76:bc:a0:ec:77:8d:43:88:4a:47:28:c4:5b:6b:
24:29:73:63:e6:89:56:1f:72:33:f6:2f:01:bb:39:4a:c7:e2:
6f:7b:26:88:0b:9b:53:76:13:14:ff:fe:51:63:8a:d4:fb:8d:
ec:d8:63:48:7e:44:31:37:f8:69:8a:1d:45:8e:fd:1b:07:a8:
b6:7a:ce:79:ed:f0:d9:5f:c9:bc:2b:09:5b:c6:0b:37:53:56:
03:91:d1:bf:08:10:8f:16:1f:14:a8:73:0f:f3:82:09:9b:c2:
7a:cb:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:36 2025 by rpki-client