Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File: M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier: pHCi9LSErTEXe6mhpKefi4BJo/bvpe37bUMwJB2906k=
Subject key identifier: 4A:75:FB:57:4A:46:3C:0F:F9:2B:5D:2E:CA:40:D2:7A:68:59:F8:CB
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer: /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial: 0199FFC79075D81299DBA589F0880AF962A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 04:01:32 +0000
Manifest this update: Mon 20 Oct 2025 04:01:32 +0000
Manifest next update: Tue 21 Oct 2025 04:01:32 +0000
Files and hashes: 1: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: Rwoqcc7UGfVt/4EV+9blx48OPMJNiW/+O+68/toEnHg=)
2: m9KlvtpTq4Ql79O_O_rULA1w-zY.roa (hash: +h4/STkGCXYgH/sIOVE5dquJUDdEfzAIpbql2yKK20U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:90:75:d8:12:99:db:a5:89:f0:88:0a:f9:62:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
Validity
Not Before: Oct 20 04:01:32 2025 GMT
Not After : Oct 21 04:01:32 2025 GMT
Subject: CN=4a75fb574a463c0ff92b5d2eca40d27a6859f8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:df:e0:49:50:c7:e6:5e:c2:70:19:20:62:
e4:00:dd:4a:bb:2a:79:c7:03:3d:a9:bb:1b:b4:9a:
b1:9e:7c:3f:fe:08:12:f9:77:d3:8c:89:b3:d4:f8:
a7:20:e7:b6:66:14:74:6e:f2:48:5f:c6:73:56:92:
53:8f:e3:04:cd:68:51:4d:1d:3a:9e:27:38:f8:76:
94:48:4c:6b:00:d0:05:65:ce:76:2f:c4:14:4f:e3:
bb:d9:fd:70:6e:d9:41:12:f3:15:bc:c5:ce:7f:a7:
bd:76:6f:d7:3e:74:06:69:79:c1:be:27:61:79:72:
1f:a8:fb:fb:e5:eb:47:31:6a:c0:65:01:de:a5:4e:
75:09:b8:e3:10:1d:1e:b8:ea:64:9f:fc:c2:30:84:
7e:70:1a:5d:92:97:31:9a:97:60:f7:9f:35:7e:13:
25:e8:b5:79:c2:4e:cb:ea:23:6f:d9:82:d5:dd:2a:
cf:7d:82:c1:58:0c:3a:99:15:52:91:06:4f:93:f1:
37:51:fd:81:60:bc:26:8b:f0:cb:8d:90:f7:22:b5:
df:fd:65:1a:3f:a5:45:79:54:e8:8a:c9:98:30:cd:
b8:5e:c0:77:13:c9:b9:df:a0:2a:9f:e4:81:08:24:
79:0a:7e:ed:75:89:38:d2:7b:ad:8a:d1:ce:d5:5f:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:FB:57:4A:46:3C:0F:F9:2B:5D:2E:CA:40:D2:7A:68:59:F8:CB
X509v3 Authority Key Identifier:
keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fe:7d:0e:da:53:13:df:5e:82:0d:fc:a4:60:2a:be:9b:9a:
65:e6:e6:9d:fd:a7:7b:49:95:da:e7:e9:9f:8f:95:90:43:90:
3f:b0:bd:7f:f3:bc:a3:d8:93:b4:a2:2b:61:6f:05:01:45:c0:
23:21:c7:1b:05:10:f9:2e:26:84:1e:86:f0:4b:0a:85:ae:ab:
d4:14:59:03:d2:c4:6c:ff:54:83:da:40:29:4e:07:3e:29:66:
64:cc:96:56:80:48:39:e8:93:ff:97:c8:00:52:ae:e9:30:c7:
5b:af:c4:b4:21:70:0c:6a:5e:7a:a2:a5:47:cb:03:a2:1b:24:
95:9d:64:f5:cc:22:b5:77:98:0b:bf:d4:55:49:dc:9c:ea:2b:
08:b2:d8:34:ff:77:13:bf:28:e9:cd:b6:27:c4:f8:45:03:4e:
c5:de:cd:d1:8f:a4:b1:29:6b:c9:f4:2b:dd:59:5c:c9:33:19:
e2:cb:5e:86:ae:07:fd:93:eb:b1:e2:d4:8c:ad:4b:c0:c1:ce:
cc:1d:b6:b9:3c:50:2f:65:b4:81:3b:70:ff:3a:4e:ab:78:d1:
1f:b7:f7:1b:95:c7:79:7f:ca:ea:06:c4:cf:e9:f3:95:3d:75:
40:f6:a2:50:d1:79:0a:2e:f6:b8:c4:8b:e6:03:02:57:a5:92:
a6:7c:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:49 2025 by rpki-client