Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File: M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier: IKOK+5qu8a1lPcEMtcBzlPVnF+IOKu1sAwD3EmR63tM=
Subject key identifier: A4:62:7B:00:59:1F:48:80:0E:19:1A:F2:B5:86:FB:44:42:49:99:3F
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 019A4E4F441B50E39A4A4DAA3C3950D1B501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number: 1090
Signing time: Tue 04 Nov 2025 10:00:08 +0000
Manifest this update: Tue 04 Nov 2025 10:00:08 +0000
Manifest next update: Wed 05 Nov 2025 10:00:08 +0000
Files and hashes: 1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=)
2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: OQu0ikCgZ/iRddK/0M7IC71bCkpZdqX0l8uIw9lGjBE=)
3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=)
4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:44:1b:50:e3:9a:4a:4d:aa:3c:39:50:d1:b5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Nov 4 10:00:08 2025 GMT
Not After : Nov 5 10:00:08 2025 GMT
Subject: CN=a4627b00591f48800e191af2b586fb444249993f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:5e:84:b8:7b:51:87:59:29:f9:4d:98:c0:
dc:af:4f:eb:04:c7:f7:47:ab:b1:65:59:d8:b6:56:
17:ae:1d:8a:c6:98:91:eb:b5:09:33:1f:f2:87:9e:
03:73:5a:ba:c3:af:79:83:b0:ac:85:a9:c3:8d:2a:
88:62:65:21:7f:c5:b2:9d:f9:f5:33:66:f3:90:6b:
81:90:58:da:14:ce:90:b2:55:d1:b2:f0:74:4c:0c:
cd:3b:dd:e3:d1:d3:9d:d8:49:78:b4:6e:79:1d:cb:
73:67:68:dd:d3:4e:eb:7b:eb:4e:6d:08:d9:d3:4a:
26:18:de:93:c3:49:4c:d2:c8:68:a6:60:62:11:92:
1e:6a:a9:9f:7c:e5:ff:a9:e3:47:8f:b4:d8:45:7e:
27:8c:11:5b:bc:0c:4b:67:dc:61:0e:c8:49:47:b3:
b8:ba:12:46:80:ae:51:18:1b:82:34:d6:09:cb:80:
9d:0d:e3:01:94:1e:90:13:9d:40:e0:76:f8:8b:16:
5f:67:13:c7:c2:8a:66:9d:e2:a9:0c:23:bc:c4:7b:
89:85:8a:83:19:dc:b4:78:ed:06:b1:9a:79:23:17:
1d:80:bc:96:ae:e6:dc:d1:3c:2f:47:81:e4:b1:6a:
8e:1b:68:ac:3e:28:06:9e:42:0b:8f:5f:c9:08:02:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:62:7B:00:59:1F:48:80:0E:19:1A:F2:B5:86:FB:44:42:49:99:3F
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a5:5c:11:5e:ed:7f:c8:33:8f:fd:4b:f7:56:58:6b:ca:61:
4e:ab:be:2f:d4:0f:45:79:3d:bf:31:28:81:59:21:ca:c7:99:
22:cc:da:7f:47:b7:a4:f6:3c:52:dd:ec:32:b2:51:ab:df:75:
ce:43:3f:1e:11:33:76:f2:5c:1e:8c:71:0d:54:6a:b7:af:ef:
4b:6c:58:86:8e:cc:c8:13:48:41:88:a0:60:d0:58:d3:3b:3b:
ba:fb:33:de:b1:6f:4b:11:2a:c9:61:77:b2:29:4c:bd:8f:03:
38:88:c3:e3:63:9d:84:b3:8d:2b:4b:ef:11:0d:fa:71:d4:31:
07:1a:5f:fd:25:dd:d9:04:74:77:85:d3:f2:e3:c4:ca:7d:ff:
e1:f4:54:09:84:db:66:f9:53:f5:3f:86:7a:7a:e8:1f:70:f4:
d6:60:a5:41:df:17:7b:f2:8f:54:82:07:1b:55:76:ee:e7:65:
b6:74:0c:45:87:76:59:f8:c2:38:cb:57:61:d6:56:aa:04:d9:
51:4f:3a:2a:39:60:e9:5c:6e:a5:ba:09:23:29:be:05:04:02:
b1:6c:e5:5c:17:5c:8d:43:2b:f4:4e:0a:9c:91:cc:e8:0d:12:
30:0c:64:19:57:81:80:e1:dc:3f:6d:75:a2:31:7c:57:0f:a6:
72:c6:7a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:20 2025 by rpki-client