Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier: Ietkg0Nceiaz0oHCD5ecqogqF2GulnnsRyNYvcck+bY=
Subject key identifier: 44:F9:60:B0:BB:12:EB:83:19:B7:FB:FD:A9:01:50:0A:44:51:8E:3E
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 019A4C60EFB97E5C1779801BBEC8BAB12471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 01:00:12 +0000
Manifest this update: Tue 04 Nov 2025 01:00:12 +0000
Manifest next update: Wed 05 Nov 2025 01:00:12 +0000
Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: X/lLgoZ1NnyPdsJZ69GzjypoT7OBHvEgXLeJpoc1Uog=)
2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:ef:b9:7e:5c:17:79:80:1b:be:c8:ba:b1:24:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Nov 4 01:00:12 2025 GMT
Not After : Nov 5 01:00:12 2025 GMT
Subject: CN=44f960b0bb12eb8319b7fbfda901500a44518e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:a3:90:93:b3:eb:27:ba:32:3a:8f:20:8e:
af:e7:13:3d:c8:aa:13:88:e5:ea:cd:69:2e:98:d0:
c7:d0:f7:b6:c9:d1:17:78:ac:ae:20:f1:d8:6a:f7:
f4:af:fd:de:de:9f:c6:e5:7f:b4:30:ed:93:29:ef:
2b:ad:63:76:55:99:cd:89:d0:b4:a7:64:30:24:1c:
62:a2:18:6a:c1:08:f9:6d:df:fa:16:20:58:ec:7a:
5e:82:41:67:42:34:d5:0c:fc:64:8c:5f:da:94:e6:
12:aa:93:c3:09:73:66:0d:f8:cc:fb:81:d4:ff:a4:
ad:a9:71:71:3f:6a:70:5a:01:ad:fb:be:7f:ee:b3:
22:d4:c8:bf:e0:91:d3:79:08:79:72:c6:a1:a0:10:
55:8d:4a:f3:cd:75:65:c1:7a:2d:96:88:61:ac:04:
66:0b:f4:48:15:f1:a6:9f:27:38:06:2d:a2:d5:74:
33:0f:33:92:7b:8f:95:d0:7c:82:56:e4:3d:5d:4d:
f5:bb:d1:e6:d8:d5:8e:59:96:cc:ad:68:03:a0:22:
36:7a:41:7b:04:cd:d0:fa:90:d8:43:d0:22:35:72:
8c:27:05:33:19:4e:03:2b:78:f3:6b:b9:a4:6c:2e:
88:15:49:37:92:ae:26:bc:cd:cd:a8:64:f7:71:b4:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F9:60:B0:BB:12:EB:83:19:B7:FB:FD:A9:01:50:0A:44:51:8E:3E
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:e4:1a:7a:5c:47:08:6c:3d:2a:e3:21:e7:be:77:37:32:
0c:b4:37:fd:03:09:05:34:8b:1e:a6:c5:31:a7:a0:9c:05:61:
9a:9b:e5:29:6e:3a:7e:ab:f9:75:b3:95:c0:d8:15:39:12:89:
fe:e9:98:16:ac:81:48:9a:4e:86:26:6b:c0:5e:5f:f9:e8:5e:
18:49:33:9d:fa:dc:45:48:1e:20:db:20:f8:c9:55:b6:8f:55:
bf:4f:07:3e:2a:c9:e7:44:f1:29:74:d1:44:c2:2f:e7:e6:10:
cb:03:a8:e0:3e:79:96:da:8e:6f:7d:e0:70:d6:e3:2c:6d:c7:
fb:67:4a:08:a4:0a:3c:02:39:54:bd:1e:b5:e0:21:d2:2f:8e:
3d:40:28:34:b2:c2:a9:40:17:2c:3c:53:60:ff:a6:96:e2:a4:
db:96:08:ba:d0:4c:0f:99:7a:cb:68:da:ec:58:0c:a9:1e:4c:
f9:83:03:95:36:0a:68:e7:b6:25:15:3a:8f:5f:c1:f0:e7:cb:
4c:d7:a9:d8:67:c8:cf:fd:c8:d4:be:1e:2c:b0:ec:79:d4:c6:
b4:39:a6:60:d2:35:80:a1:8f:b7:ea:cb:97:e2:16:1b:81:fd:
b7:eb:ef:d8:4b:cd:7d:e2:79:a8:a9:be:c1:f4:68:78:14:42:
ea:ca:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:32 2025 by rpki-client