Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json)
Hash identifier: LNvUyxagPCRB4aWmJivTM2TKRamRRpwaX//E53grEk4=
Subject key identifier: CD:0A:7F:60:B8:29:25:0C:AA:99:23:CC:7C:AA:23:9E:2D:02:5F:7C
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 0199FEB483FE4588DAEE7EF8D39C5B01C93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
Manifest number: 0B58
Signing time: Sun 19 Oct 2025 23:01:07 +0000
Manifest this update: Sun 19 Oct 2025 23:01:07 +0000
Manifest next update: Mon 20 Oct 2025 23:01:07 +0000
Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: ni7okuhPn4VcMDZab6/ngQIVKshNCkY87mHvttS2/Wg=)
2: _khA_VnUk6WIR9HzLzBYy21gjiY.roa (hash: zYMvT2aBQ62Uw/oOkoXmLb0oW9+P5GMgEJxD27Pzif4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:83:fe:45:88:da:ee:7e:f8:d3:9c:5b:01:c9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Oct 19 23:01:07 2025 GMT
Not After : Oct 20 23:01:07 2025 GMT
Subject: CN=cd0a7f60b829250caa9923cc7caa239e2d025f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:13:55:c4:c2:fd:6d:fa:4d:86:89:60:65:
a0:33:09:76:0e:c1:61:a5:a2:91:3a:38:58:fa:7e:
5e:9c:ff:c6:ef:4c:2f:21:47:33:50:27:dd:04:df:
1f:1b:cf:e8:84:59:a2:e7:b4:99:c0:bb:fa:9e:69:
4d:db:ea:9e:db:6e:e6:d8:ca:12:b4:8a:a6:37:bf:
df:57:f4:1b:dc:f2:40:16:7c:c3:c0:7f:68:2d:5f:
53:b6:55:c7:48:e9:75:07:a9:58:08:04:19:5f:0c:
ce:1b:4d:20:ae:9a:48:f1:b2:4a:39:9a:a8:45:3c:
25:2f:e8:32:b4:20:ae:da:f8:ab:08:3e:8b:e3:fd:
be:a3:da:94:ff:9c:26:6d:33:ac:c1:4d:ef:ab:11:
7e:ce:c0:67:28:09:d2:36:a6:d6:dd:38:94:05:f4:
62:38:9c:42:f2:26:98:30:68:87:65:f7:b3:43:bd:
45:99:27:57:f1:97:24:4f:38:87:be:5d:28:53:e5:
cf:ea:8f:82:7a:f2:68:3c:44:e9:d8:0d:d9:a2:71:
69:79:e7:fb:bf:50:cd:18:ce:3b:7d:da:4d:e8:46:
ad:00:4f:34:7f:f1:84:f1:be:08:3e:93:09:89:85:
03:b8:25:36:d2:e2:e2:d1:56:04:23:3e:a5:62:69:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0A:7F:60:B8:29:25:0C:AA:99:23:CC:7C:AA:23:9E:2D:02:5F:7C
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:00:39:0d:3f:0c:21:fe:10:b6:0c:1f:29:35:34:d3:f4:ce:
d0:3a:52:6e:a5:ea:e5:79:38:c5:08:11:83:2a:fd:44:f0:9f:
c8:6e:f1:2a:73:dd:f2:47:b7:f0:65:36:86:fb:e5:9d:af:e3:
48:d4:03:cf:5e:32:91:99:46:f5:03:9a:5e:f2:7c:99:0e:1a:
ee:0a:94:a7:f7:ec:1f:a7:19:7d:cd:cc:bf:33:22:d5:86:ca:
8e:c7:d2:da:77:4b:5c:37:46:5e:2f:91:34:4a:e3:06:4a:7f:
02:1e:a0:f2:2a:3c:b3:9b:d5:84:ac:bd:9c:d5:36:9e:5c:fb:
82:eb:a1:2c:33:7a:fe:33:43:02:99:e2:87:07:24:a5:c1:a2:
8e:a1:64:46:80:26:fe:ba:91:d6:f3:b9:83:e1:94:9d:07:fc:
9e:d8:c2:1a:d1:55:fe:c4:5f:fe:b1:22:e0:ff:b5:f5:c7:e6:
0a:71:64:f7:c0:e9:fe:c5:e5:72:c4:2a:35:d0:e9:c3:28:51:
ee:8e:fd:89:21:bf:ec:14:75:c2:c1:41:5e:84:de:90:b5:db:
c7:66:7c:85:ce:c1:f8:a0:7a:31:26:63:37:c7:b9:02:88:d8:
90:fd:a4:01:f8:72:da:75:01:5d:43:f9:8b:9c:d4:20:0e:ff:
05:bb:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:36 2025 by rpki-client