
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: V+SGLxxsGA643w+iC1GW9nu4iKMqyGdhOVIMsIX5g0Q=
Subject key identifier: DA:74:90:F7:EF:23:A2:BE:EF:BA:7C:F3:9A:4C:36:3A:47:65:DF:D2
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 0199FB7CC56B2B045B421CC0344B76729AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 0F7F
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: tNFoEDC5K7mYhhLYYWa4zTCHPRW04gjA0bZIGEDS3q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c5:6b:2b:04:5b:42:1c:c0:34:4b:76:72:9a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=da7490f7ef23a2beefba7cf39a4c363a4765dfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:64:d9:5e:a3:e2:64:b7:1d:0a:88:63:de:
2d:d7:49:df:d6:89:5d:18:b1:6f:e4:30:78:ea:6b:
ee:6c:ce:32:1f:ac:7b:74:e4:0b:6f:7b:d1:5a:64:
a7:7c:e6:15:49:d8:61:c0:a4:51:3e:95:9b:2e:35:
63:6f:51:7b:0d:4d:6e:d1:b4:d1:eb:98:37:a3:31:
8b:f6:ef:45:88:f3:da:9f:fc:92:0f:d5:74:7c:ab:
76:bf:3c:c3:40:8c:c5:90:aa:cc:1b:a0:9c:c2:c5:
1f:ae:2f:c3:78:5f:1b:dc:aa:58:c5:af:c5:01:2f:
cb:b2:84:62:c2:63:e0:b6:59:c0:21:ea:c5:61:d7:
79:2f:98:29:be:9c:d7:e3:51:26:e7:08:d5:6e:63:
2b:25:c5:ed:e1:3a:35:54:4a:cd:52:3d:ea:22:a3:
8f:b0:3a:df:5a:6c:a1:06:18:98:48:41:e4:cd:45:
16:49:3d:58:ec:fb:d3:a2:39:9e:38:7d:d8:c4:cf:
08:d0:c5:15:eb:d9:73:f5:48:b6:01:59:c9:cb:95:
64:49:33:fe:16:a6:05:52:57:22:66:12:e7:59:b7:
be:43:42:ec:7f:bc:e0:11:97:45:2a:bd:33:d1:11:
6b:a4:97:8e:6d:9a:08:08:27:21:d2:8b:a4:6a:29:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:90:F7:EF:23:A2:BE:EF:BA:7C:F3:9A:4C:36:3A:47:65:DF:D2
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d6:16:3d:9b:15:02:d7:36:78:fb:4b:a3:ec:58:da:42:99:
a4:69:06:32:89:55:0f:bb:a0:a6:3c:2e:c7:9d:11:43:f5:f0:
fc:95:f8:5f:ae:90:b6:9a:44:c7:55:63:a0:9b:0d:4f:00:6f:
34:fd:5a:b5:62:8a:dc:8a:5d:3a:aa:d9:05:01:d1:62:b2:84:
c5:17:5d:cf:29:18:4e:2f:7c:2c:d7:6c:25:72:e3:e8:b5:d5:
98:5c:e4:8f:cf:8c:6d:02:68:66:2e:73:35:b9:cb:d0:61:38:
bb:04:c3:88:28:9e:81:f5:3d:04:d4:e4:23:aa:02:5f:44:ab:
82:55:b3:b4:bf:57:37:73:2a:2e:10:9d:bd:1b:de:fc:84:96:
6c:bc:9d:dd:8f:88:b3:fc:5c:d6:b2:a5:76:5a:15:0d:4f:12:
89:97:4c:87:a0:7a:e9:3e:9f:2a:52:4e:24:4e:c2:9c:da:1f:
a4:d4:f7:60:84:0d:79:c3:e9:b4:f8:8b:4c:5a:11:b6:70:11:
d3:d0:7b:77:f0:82:c2:92:a3:c3:98:d6:50:f6:27:0c:30:21:
6b:63:38:38:c1:63:59:d0:f9:36:29:cf:e1:b5:8d:71:1a:b1:
cc:9b:77:16:89:77:fc:4e:7c:9a:ae:03:c6:20:6c:71:91:66:
17:5d:74:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:04 2025 by rpki-client