Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: yZ3LrMzqI0Wvy2yLihNtpM4DrbqZWq4RwbEphdWndK4=
Subject key identifier: ED:46:C0:AA:7C:E3:63:1B:57:95:29:35:E2:C2:F5:45:E8:C5:37:2F
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019A4EF560E53D2BDB75053F4AFC3BFEE671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 06E7
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: D6QXOHgeOWbIdkf+J11gC/glEmMVqNvBO7shTFyTd0g=)
3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:60:e5:3d:2b:db:75:05:3f:4a:fc:3b:fe:e6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=ed46c0aa7ce3631b57952935e2c2f545e8c5372f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ce:3d:a3:11:e4:55:65:8b:c4:70:ea:de:e5:
c8:15:61:47:13:22:dc:97:01:0b:12:3b:ca:ee:41:
d9:a7:95:d6:ee:08:5d:8f:1c:4e:bd:b6:9b:aa:c2:
71:11:00:6e:4f:c4:3e:4e:90:39:5b:7a:b6:76:80:
c9:8b:e4:b9:23:45:f8:56:16:f0:20:32:8f:fe:00:
73:78:6a:3f:5d:02:4c:d5:85:02:a9:d0:09:d7:74:
37:79:15:00:88:eb:94:a6:c3:ed:19:28:8c:65:ad:
a7:2c:79:c3:36:56:65:66:fd:45:b5:58:11:74:85:
8c:7b:79:1e:8f:eb:b6:19:6b:c1:60:81:40:9a:bc:
bd:eb:45:31:52:bf:82:b3:8e:23:7d:22:12:80:5f:
cd:27:c3:15:45:99:cb:d9:1a:10:64:df:9e:b9:03:
9e:18:0b:57:2f:73:79:85:47:ec:2a:2b:12:65:72:
04:36:72:02:02:63:ef:58:02:84:c4:32:af:77:ef:
15:ae:78:db:23:61:45:98:96:0a:1b:5a:8b:79:d6:
33:12:91:87:70:ec:8a:2c:32:76:b1:82:c5:2b:71:
86:35:ae:4d:23:2c:bc:22:e8:40:3d:0a:3e:0c:89:
03:0c:80:fe:48:73:79:13:1e:37:25:d4:d7:9d:c2:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:C0:AA:7C:E3:63:1B:57:95:29:35:E2:C2:F5:45:E8:C5:37:2F
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0d:be:fd:6d:09:0b:56:d1:3c:b6:94:75:36:00:2a:56:a5:
31:e6:92:83:79:88:c6:b6:c5:4c:42:fa:b1:d0:6b:6a:5a:75:
e2:b5:06:8f:89:90:8b:e2:31:a8:bd:6f:8c:48:71:3c:f5:74:
83:a8:8d:dd:31:61:2c:00:f0:25:29:81:4c:29:d9:f2:cb:08:
c5:1f:df:b8:6a:cf:0b:2a:55:b7:7d:1a:8d:62:47:83:19:12:
49:15:e7:7f:4e:75:de:63:df:21:10:2e:54:71:a6:fd:20:25:
68:15:2e:13:d8:80:3f:50:fb:1d:bf:bc:3b:c6:b4:f9:d6:60:
20:d5:f7:45:3c:56:28:2e:94:a4:d3:bd:78:9e:5e:7b:e2:7b:
2f:0a:6a:f0:f0:87:6b:3a:77:ce:bd:5d:38:55:1d:48:96:30:
26:65:64:9f:93:44:ea:a1:90:b9:04:78:6e:28:c2:6e:99:54:
30:b7:29:86:b3:6c:79:72:75:c7:2b:57:76:93:2e:9e:9e:80:
fa:4a:16:71:49:f3:85:68:10:28:aa:62:d6:f5:69:d4:79:da:
5f:76:64:12:2e:13:6a:d0:17:77:ec:5d:cc:2b:53:7f:4c:cb:
fe:52:ef:68:bd:8b:4a:94:72:b4:66:cb:4e:e1:d8:26:61:35:
56:8d:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:43 2025 by rpki-client