Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: X1GN1NCEYaOeN/oXqfRdUXTGkUR/6rWG/vwL1yHOsPY=
Subject key identifier: 25:01:74:3B:9F:FF:BD:93:98:95:56:27:7C:9A:C4:D2:26:D9:34:5D
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 0199FEB4656ECEB12A35FB8BC8C9AA6B2198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0984
Signing time: Sun 19 Oct 2025 23:00:59 +0000
Manifest this update: Sun 19 Oct 2025 23:00:59 +0000
Manifest next update: Mon 20 Oct 2025 23:00:59 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: qapF/m0XF+13K2tvmZaPF6Aei+4T+G2VEg4rXVccFGg=)
2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:65:6e:ce:b1:2a:35:fb:8b:c8:c9:aa:6b:21:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Oct 19 23:00:59 2025 GMT
Not After : Oct 20 23:00:59 2025 GMT
Subject: CN=2501743b9fffbd93989556277c9ac4d226d9345d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:95:e8:ef:4b:a7:61:bd:91:99:bb:49:9c:
6d:dd:bf:dc:91:97:ac:af:08:f8:1a:dd:28:f9:ae:
1f:e5:27:54:4c:25:32:77:4f:e2:fc:41:b7:06:6e:
a6:a3:aa:18:af:c9:36:5b:1d:0a:20:80:1a:4e:a4:
8d:b0:22:f4:97:8b:95:23:d5:f2:e8:9d:73:c9:27:
2c:67:63:39:55:28:4b:89:9c:7f:6c:5e:ea:2a:a9:
bb:80:a3:bc:58:04:67:39:40:ba:05:73:2d:e6:69:
de:b7:65:1a:2c:ca:12:b2:f8:b3:86:45:1d:8e:fe:
62:a7:b4:a2:78:52:b2:4c:3b:e5:eb:45:83:50:49:
27:61:2d:34:71:1c:f9:80:6b:47:72:ec:88:b7:1d:
95:e0:6a:05:3e:13:38:10:d6:7e:02:a8:9d:97:54:
67:74:f0:a8:e5:10:d8:02:90:2c:f5:3a:04:e7:3c:
82:a1:e5:b7:64:6f:98:cd:9b:1d:9f:52:ff:cf:c6:
c4:b6:a1:84:f3:b8:42:7e:5c:ce:51:5d:39:b9:a5:
a2:ab:08:bd:55:8b:6e:e4:97:2a:45:2f:c8:ed:4d:
06:ed:c1:76:44:5e:ab:1c:59:a9:41:dc:d9:85:00:
8e:b4:ed:13:73:20:0e:3a:42:ce:08:7f:09:c7:88:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:74:3B:9F:FF:BD:93:98:95:56:27:7C:9A:C4:D2:26:D9:34:5D
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bd:e4:bb:05:a8:1e:8f:b7:3f:04:5a:c3:b2:58:8e:32:88:
39:67:66:d9:f2:1d:34:37:04:4a:5a:47:47:72:49:72:6a:8d:
a2:3b:dd:c8:f1:48:1d:57:ef:62:a3:fb:40:18:17:11:29:ad:
c6:f1:f7:a7:e7:d2:6c:3b:f1:ff:24:39:84:25:8c:73:ae:ad:
e1:69:aa:81:d1:70:67:7f:7a:6a:05:4a:7d:55:6c:03:85:34:
aa:e9:eb:43:ee:d5:fb:6c:cd:c6:37:e4:80:ce:2e:cb:41:68:
0a:b7:1a:bd:38:4c:2b:e4:26:71:3f:9a:17:de:10:c8:1c:1c:
29:a1:ea:b1:14:d6:4c:f8:61:76:5d:a1:15:dd:04:f7:b4:45:
1a:e3:84:69:db:9b:bb:fa:7f:80:06:d8:a3:5e:81:1a:af:97:
c4:2a:70:c4:41:b7:04:56:0c:95:29:00:3d:c1:21:57:0c:24:
aa:08:40:fb:36:65:4b:5d:4b:90:28:f1:d4:68:01:a3:a9:31:
ee:33:9c:45:39:96:2f:de:37:f0:22:05:73:bb:b5:ac:0e:a3:
2f:f4:e2:2f:fb:f2:e0:94:49:1c:fa:f3:89:a4:6a:73:de:c7:
b3:97:c2:b5:21:14:2b:e5:4c:00:ca:41:4a:0d:d1:af:4a:bd:
34:85:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:34:56 2025 by rpki-client