Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json)
Hash identifier: cLdE/3SLLiba3g6doQ32vztLrYqsbVqNJBQ/l+XHKsc=
Subject key identifier: EC:B9:6A:4B:EB:FA:2D:51:0E:D6:07:9B:5C:56:E1:F8:0A:11:80:EE
Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Certificate serial: 0199FC8F14DCA0A8B9E02DFC5E020CA43F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
Manifest number: 03FA
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (hash: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=)
2: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: WkFfSBfkezAR91/W34638C9+psnAx+SYQncuzQvYNJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:14:dc:a0:a8:b9:e0:2d:fc:5e:02:0c:a4:3f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=ecb96a4bebfa2d510ed6079b5c56e1f80a1180ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:a5:43:a3:39:dd:88:0d:cf:8f:98:e8:aa:
62:f8:3d:d6:38:02:f2:7d:6d:25:09:20:e8:f7:0a:
0f:ae:3b:bc:a7:a6:70:af:49:f9:8c:2e:c4:2a:43:
0f:ec:bc:36:f3:75:90:bd:93:64:5d:6a:a4:b7:27:
1b:fe:79:7d:63:0f:c0:b0:f3:e3:aa:19:d4:e6:0e:
7f:40:16:ba:2f:76:d1:6f:88:d0:a2:ee:19:a4:72:
30:2f:be:8c:34:16:49:ac:19:37:f2:84:b9:22:e4:
e7:8e:0c:66:de:63:e8:a5:c5:df:8d:76:4c:50:95:
ac:18:36:09:af:34:50:16:2e:b8:dc:e8:6f:7a:2e:
11:91:59:d8:51:1e:1d:d0:3a:7c:7a:ee:23:fa:52:
27:d0:00:93:39:93:f0:76:c5:d2:d1:d6:51:72:ab:
35:01:84:63:8b:15:2c:2f:12:c7:a1:71:c9:df:d6:
9e:d7:a1:40:32:c7:04:bd:e0:eb:3b:ed:ed:a4:70:
fb:2c:73:9d:3c:52:b6:00:fe:a4:df:04:bc:ef:37:
9d:59:6c:4b:bd:4c:7b:13:e2:6c:82:37:77:9d:2d:
af:10:c4:85:f2:a3:fb:75:ff:af:39:94:77:98:6a:
9c:da:dc:33:d3:13:05:98:64:ba:ea:70:e2:e1:79:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B9:6A:4B:EB:FA:2D:51:0E:D6:07:9B:5C:56:E1:F8:0A:11:80:EE
X509v3 Authority Key Identifier:
keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:37:98:cf:43:40:79:cc:1c:cb:ed:31:ae:1e:e7:a9:24:26:
21:40:82:e1:08:da:13:c1:41:7e:85:f0:d4:bd:61:e8:9f:b8:
78:dc:cd:d2:00:13:79:5a:79:49:88:6e:0e:4c:1c:f5:50:7c:
f9:be:76:dc:73:f4:e9:62:3a:42:74:1f:e3:d2:ac:66:09:ea:
a4:33:84:50:c3:33:c9:07:3f:f0:44:b6:73:24:64:14:e7:1b:
70:0e:e2:0f:3a:eb:6c:e4:de:f7:84:b6:60:e8:6e:46:9b:ab:
72:40:39:7f:42:90:86:03:8b:4c:6a:6f:dd:9f:63:12:15:17:
93:8f:ad:08:40:52:b7:0b:af:2d:6d:47:14:bd:3a:d6:56:76:
c3:fb:24:03:ae:6f:ee:0a:d6:c0:f3:fc:42:46:4c:91:cf:c8:
23:bd:67:64:25:b4:41:dc:3b:5a:c8:d3:b7:0d:95:08:92:15:
c0:0a:fc:07:31:87:31:c7:0c:82:9b:bd:5d:30:f1:1e:4f:86:
8b:44:61:5a:a2:26:44:b9:89:40:d0:9a:50:37:c5:3e:dd:7b:
db:e7:3a:5a:ea:da:6d:4c:67:68:e2:6d:66:52:40:6a:48:ed:
c1:1f:6d:a8:ab:3a:51:41:89:ca:b9:d1:60:a8:ec:28:c0:08:
c9:da:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:33 2025 by rpki-client