Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier: CcBX8kG5zVUO3sX8Y7H8d5aY9bu2EwYE9m+kFksFBT8=
Subject key identifier: B7:45:DC:A6:DD:C3:EF:49:B1:D7:B9:82:C4:3B:82:03:6A:FD:93:93
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 019A53083D1858583DF743E2D37A4D384668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 08:00:39 +0000
Manifest this update: Wed 05 Nov 2025 08:00:39 +0000
Manifest next update: Thu 06 Nov 2025 08:00:39 +0000
Files and hashes: 1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: EOM931A0Ap9S2Flk7UeKmlXUxMvX5fOOTCenc52BfGs=)
2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:3d:18:58:58:3d:f7:43:e2:d3:7a:4d:38:46:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Nov 5 08:00:39 2025 GMT
Not After : Nov 6 08:00:39 2025 GMT
Subject: CN=b745dca6ddc3ef49b1d7b982c43b82036afd9393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:c4:f6:4f:ae:2f:a1:93:ca:5e:3b:e1:ee:
e7:79:54:9b:b0:de:43:42:84:25:5b:e8:83:b6:80:
8d:92:e5:6a:f0:52:54:1c:99:67:2b:2f:83:44:15:
f2:dd:b8:c7:56:de:ef:f0:46:4f:cd:66:72:09:06:
da:c5:c1:38:15:c6:0d:e2:c0:6e:3a:10:19:f4:c6:
ff:61:01:af:12:d7:26:2d:01:b5:87:11:a4:1a:f9:
dc:e7:11:00:c9:68:a4:96:13:84:fa:51:ac:59:28:
dd:e3:8f:8d:74:a3:5b:00:16:b0:e1:5b:54:32:1d:
9b:85:cd:02:ff:b0:c7:90:65:6c:1e:0f:fa:4e:19:
3e:92:86:53:12:76:a4:ce:71:ae:0c:8d:2d:46:4a:
a4:0e:65:cb:28:42:dc:25:c8:47:a3:fc:98:ef:08:
9d:a8:3b:4a:a6:dc:ae:31:96:64:c9:fc:be:56:04:
40:ee:c1:27:27:60:46:8f:80:d3:69:e9:5a:02:9a:
17:ad:f3:1c:f8:a5:f1:ae:c6:d5:55:7d:f9:f7:f3:
c3:04:28:25:ca:2f:df:04:62:62:38:a4:f7:9c:b9:
37:1d:ed:00:81:d9:26:48:c7:22:91:9d:b4:d0:5d:
88:d7:12:24:37:03:35:ff:aa:93:72:02:94:23:d3:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:45:DC:A6:DD:C3:EF:49:B1:D7:B9:82:C4:3B:82:03:6A:FD:93:93
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:07:26:d5:20:f2:f2:23:f4:8a:25:7b:bd:94:ad:ee:11:64:
6e:5c:0f:ad:05:d8:d4:5e:b6:a8:be:b0:f0:c6:0e:36:d0:e9:
31:ee:f9:bb:ef:8c:80:cf:93:28:72:eb:f1:df:db:7d:23:41:
52:b3:2b:33:de:02:83:b1:ac:44:e9:af:74:88:3e:78:5a:b9:
16:b2:60:4b:c0:2d:9a:93:99:f7:73:d7:6f:ec:cc:f7:6f:e3:
44:76:9a:66:43:86:6d:76:32:9d:d8:28:9d:33:67:8d:56:07:
f6:71:eb:58:66:a4:63:42:2a:e0:a1:48:0e:ec:ce:b8:34:2d:
0e:c3:96:33:2f:51:e6:e4:92:f4:af:72:cb:50:60:a6:0d:aa:
2e:d9:82:09:7c:db:e2:a0:a1:07:5b:3e:97:24:fd:98:48:c8:
3e:dd:55:6d:5a:35:0e:62:8b:f3:e4:57:19:d5:87:f3:2f:9f:
8d:eb:46:3f:e2:7a:42:55:75:06:8a:63:b4:c0:b3:4f:de:a2:
b1:85:9a:b3:6c:d6:d7:18:9a:c3:8e:ac:da:dd:05:b4:13:82:
2c:05:f1:43:00:87:14:46:69:12:c1:a4:a2:bf:87:30:5f:21:
38:96:1d:32:83:4e:ab:d7:e2:12:a9:07:4f:37:03:45:a3:ba:
1f:51:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:11 2025 by rpki-client