Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: ZbrFCgDdB/4q1yTjBruuuC3f94hyHrLFa12ip/dvujQ=
Subject key identifier: D4:9C:7B:35:51:3E:FB:A8:FF:2C:29:90:CE:A1:3D:08:A0:03:A7:6A
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 0199FBEBABAE4C81CB9A2081106DB8E698D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: 6EAcvcrRaQyTY4Fr/schMkhN7IMejZdLS4rN4PBSvhs=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ab:ae:4c:81:cb:9a:20:81:10:6d:b8:e6:98:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=d49c7b35513efba8ff2c2990cea13d08a003a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:e9:21:36:2f:ae:25:9f:63:da:85:84:e4:
c3:10:28:7a:3f:9c:48:9a:a5:16:31:11:19:b4:22:
8a:0f:38:31:f5:9a:ac:6c:27:59:03:d7:36:39:14:
94:56:1f:fd:f7:89:89:77:75:bf:84:40:f7:48:49:
45:32:78:b1:4b:52:c4:4b:2a:1f:98:ad:b9:7d:3a:
11:35:dd:02:33:c3:50:65:47:1a:73:54:a0:7a:ab:
89:ad:5a:2b:15:c2:86:9b:3f:8b:ce:c4:b3:9c:bd:
a1:14:34:ff:8f:03:96:99:5e:f8:d4:d2:59:81:7d:
b6:85:e4:8a:5c:61:0d:e9:ae:57:1e:8b:9a:b3:7e:
af:a5:24:88:3b:0e:e9:97:c4:02:97:ed:11:58:e0:
6e:36:e3:71:e5:a8:98:09:05:a6:7f:61:69:c2:e1:
b1:f7:e3:23:c9:c2:4d:1b:42:89:da:eb:27:92:90:
5b:e3:ba:65:10:37:5e:16:60:db:43:87:d0:84:09:
e3:af:44:8b:ec:6f:39:79:2b:c5:81:5e:07:3a:3a:
6d:d1:45:90:b8:a4:50:20:8e:ea:2e:b8:3f:f9:ab:
0e:ec:2b:ac:e4:65:3f:e3:e9:34:3b:24:89:67:89:
8d:d1:ab:66:f0:87:d7:cc:b0:f4:69:ac:23:e0:d0:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:7B:35:51:3E:FB:A8:FF:2C:29:90:CE:A1:3D:08:A0:03:A7:6A
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:eb:ee:01:3c:62:6d:6c:ab:f7:08:17:28:a1:9d:80:1b:
9f:df:2e:ed:43:e8:be:05:3d:d1:62:f0:a9:ed:c5:f8:2b:92:
ee:40:20:ca:38:86:32:88:eb:73:66:6f:18:89:d2:70:4d:17:
cd:56:f6:dd:aa:6c:17:b1:33:4e:af:17:38:40:cd:0b:5f:c7:
03:5a:e7:a9:4c:bb:bf:aa:34:b2:57:fb:e8:0b:a6:76:fe:1a:
11:e2:a0:de:82:31:1b:71:eb:99:f1:18:ad:40:16:bc:12:aa:
73:ef:78:67:db:73:29:3b:fd:3d:b4:7c:dc:7c:a6:58:c8:3f:
ad:16:86:eb:aa:b8:35:2b:79:91:72:60:c6:0a:86:27:67:12:
79:3d:41:84:1a:d6:4c:54:e1:ef:d9:11:22:ae:5e:a2:f4:fd:
e4:6f:2a:6d:06:fa:ac:14:d9:06:c0:c3:1f:92:c0:12:35:33:
ec:e8:7a:6d:5a:b7:9d:e3:32:33:ac:37:27:86:d1:a8:60:f6:
29:8b:31:bf:26:04:ca:83:50:8e:36:90:b8:d4:2f:fe:34:2b:
1b:59:d7:57:23:2a:35:0a:14:fa:a6:75:7d:94:d7:ca:40:ec:
9a:0e:04:ba:3e:28:26:7b:9d:10:27:32:08:a2:47:d5:3c:86:
5b:e2:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:05 2025 by rpki-client