Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: LjNRR26zbVB08XZ7U9FfZfSZeDEYI/mua11bvdHoIcM=
Subject key identifier: 31:89:2B:5F:5A:F8:10:86:4C:C3:59:9A:0F:B7:BD:7C:3E:6C:E1:46
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 0199FD342BA02FD4C0D687F48CBB52A11F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:18 +0000
Manifest this update: Sun 19 Oct 2025 16:01:18 +0000
Manifest next update: Mon 20 Oct 2025 16:01:18 +0000
Files and hashes: 1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: MxGZgC5R2Cn3X9REzgCkPhR1qqvnF9mlVTepcpbXi5Y=)
2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2b:a0:2f:d4:c0:d6:87:f4:8c:bb:52:a1:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Oct 19 16:01:18 2025 GMT
Not After : Oct 20 16:01:18 2025 GMT
Subject: CN=31892b5f5af810864cc3599a0fb7bd7c3e6ce146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:83:fa:4c:80:3c:3e:c9:d7:dd:30:8d:a2:
df:8a:87:23:af:5d:64:ed:4c:48:99:17:04:24:36:
6d:de:6c:e0:b7:9d:b9:04:fa:32:22:ce:d7:16:57:
85:32:0f:d8:ec:0c:44:b3:78:05:85:f4:e8:70:48:
44:66:77:1d:57:cb:91:e1:b1:eb:d1:4b:6b:aa:9b:
e8:e1:29:86:0c:86:18:25:13:61:27:42:9f:e0:6e:
03:46:7a:2f:2a:5a:fe:e5:fa:6e:dd:b5:5f:70:60:
f7:ba:68:6c:5e:48:38:36:30:2b:06:ef:a8:5d:45:
67:36:13:bc:09:39:3b:17:d8:4e:59:8d:c0:68:7a:
86:d3:80:30:4c:76:f7:eb:b6:71:c7:27:0f:34:6c:
b2:4b:25:6b:c0:26:e0:69:01:55:f8:2b:1e:57:89:
38:52:f9:c3:a1:2a:89:d4:87:ab:b2:1f:b0:0c:f8:
d8:24:78:5f:f2:20:f1:ec:64:e0:13:1f:cb:0c:85:
4e:b5:05:47:98:6f:f0:07:c0:39:36:f4:be:32:ce:
4f:35:9d:a6:5a:84:c1:37:10:f1:6e:9d:11:d3:fc:
99:df:d6:49:c3:0b:86:36:a1:c8:92:df:8b:c0:be:
d4:19:75:42:d0:43:9c:69:9c:cb:bf:d3:b8:91:b8:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:2B:5F:5A:F8:10:86:4C:C3:59:9A:0F:B7:BD:7C:3E:6C:E1:46
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9e:55:10:71:bd:82:b1:86:79:d0:df:9d:ec:99:21:ac:c5:
b4:4b:be:a8:84:c0:70:e2:09:cd:30:4c:05:d8:74:2f:0f:0a:
f7:ac:cb:ba:de:6d:fd:92:84:a6:d5:d3:94:b8:68:92:3a:e5:
29:cf:e1:96:e4:95:e3:52:72:24:bc:96:23:61:67:fc:b8:de:
9a:9c:36:89:7d:96:29:d6:6d:08:df:f9:4a:86:a9:7d:78:9f:
59:76:83:8d:d1:62:98:52:59:a4:83:c0:3f:e5:c3:7c:78:02:
8d:4f:c0:24:1b:9b:9f:9e:1e:5f:e9:85:fd:48:31:be:d7:26:
ac:59:55:0a:bb:08:1f:d5:8e:fc:a6:bc:33:ca:c3:db:d3:23:
59:0d:b9:04:64:11:61:1c:fb:64:0a:ca:0c:36:cc:27:2c:3c:
e1:71:18:f5:aa:38:fe:c5:55:3f:64:ac:a3:06:d6:ec:5e:9a:
95:53:82:6a:1f:8a:22:e4:04:f0:38:ca:9e:68:94:8c:f8:cc:
78:97:ac:ca:16:1f:7a:9b:16:b6:94:e1:50:dd:ac:c3:83:a2:
1e:23:12:c2:25:b9:a9:1c:a5:d1:14:f7:c0:85:1d:71:76:4c:
95:2b:14:02:39:83:1a:8c:dd:d5:58:54:fe:04:63:13:bb:78:
54:a1:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:38 2025 by rpki-client