Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: 2ZDZqiDSc8JBdFFaw/SX3xHRqAE/DXoPj01v42+JpNU=
Subject key identifier: 15:E1:56:CE:5A:79:A2:A7:65:09:17:BF:8A:9C:30:EE:25:90:D6:F1
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 019A526335D0F784122ACF168FC1F3A9EC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 13A1
Signing time: Wed 05 Nov 2025 05:00:24 +0000
Manifest this update: Wed 05 Nov 2025 05:00:24 +0000
Manifest next update: Thu 06 Nov 2025 05:00:24 +0000
Files and hashes: 1: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: SZK9ZKZQNEOjJN1qyGIGHIYHmZqjfZxi//eyJuNzXN8=)
2: w5RgxPZJeCHJ32aZdxHuHtsDhQo.roa (hash: Uc4RlDE0xm/vlOwUXxqVD6EiTzssOmMkcQ4YcA/6FLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:35:d0:f7:84:12:2a:cf:16:8f:c1:f3:a9:ec:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Nov 5 05:00:24 2025 GMT
Not After : Nov 6 05:00:24 2025 GMT
Subject: CN=15e156ce5a79a2a7650917bf8a9c30ee2590d6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:bd:b2:3c:6e:cb:7c:de:97:f7:b0:a6:6c:
18:34:f7:30:90:0c:7d:0a:18:18:7e:00:35:b8:3d:
98:00:98:a1:5f:7b:ae:22:c7:de:2b:13:b3:96:18:
5a:a7:0f:e8:84:44:f2:0f:07:ab:52:dd:80:f0:3b:
7b:f0:58:cb:48:c3:ba:52:1a:7d:5a:82:3f:63:53:
a9:12:02:09:a7:01:9c:74:f0:41:0d:f4:6a:79:e7:
58:dd:8a:9f:a2:f1:41:69:b9:ab:cd:d1:f4:90:01:
74:f6:95:0d:87:00:ab:e8:4d:6a:88:5f:56:5d:72:
cf:37:d5:d4:d1:8e:2c:8d:9c:b7:f0:7b:27:50:57:
01:bc:43:97:b5:46:2f:ac:42:a5:a0:5c:4f:6a:5a:
6e:47:c7:e5:63:7e:69:e8:69:a8:28:30:11:20:bc:
c4:e5:e5:f0:10:5b:44:45:86:65:a9:ba:53:e4:82:
8c:d3:7f:fb:09:f8:b0:fc:15:81:d9:58:74:6d:2a:
cb:5a:91:08:fc:dd:dd:b4:08:1b:b7:74:67:2e:66:
a0:0c:88:64:7d:35:96:88:62:fc:d3:0a:31:7f:1f:
6b:32:53:71:82:8e:36:15:28:61:fa:44:6c:17:1d:
a0:14:04:6e:5f:ec:05:8c:75:50:ef:70:9b:ee:6a:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:56:CE:5A:79:A2:A7:65:09:17:BF:8A:9C:30:EE:25:90:D6:F1
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f5:f2:19:d0:6b:98:dc:27:98:29:15:21:fa:8f:a1:fb:1a:
37:42:99:15:d6:39:ce:d5:8c:f3:c4:eb:9e:e0:c0:0c:7e:79:
a2:c9:6b:52:1c:2a:0a:6f:b9:be:11:7d:97:ec:4d:3d:ba:72:
72:d0:81:c1:12:d0:54:2e:06:51:3b:9b:2b:9d:41:ac:aa:b0:
b4:81:6f:ee:03:d7:b7:52:2e:82:66:8e:71:c6:77:49:cb:87:
17:ed:a7:1b:ec:46:32:27:b2:3d:cb:73:d8:54:5e:04:94:4a:
c9:92:6a:10:76:59:dd:c5:95:88:ac:57:da:d9:01:aa:fd:6e:
e8:e3:64:cb:a7:19:d4:7b:c1:08:c0:c1:e9:19:80:be:f1:ec:
b2:e9:93:e2:d5:57:96:09:94:33:19:e9:76:fe:69:97:42:56:
eb:00:80:c2:01:a3:eb:c4:4c:4b:9e:60:03:b5:85:e6:e2:54:
37:3d:d5:fb:78:47:32:c3:42:23:eb:cf:d9:e9:23:fc:4f:d0:
c8:48:f0:3a:df:c7:2a:3b:81:1d:c4:19:ed:d7:30:9c:cd:d1:
59:99:42:43:7c:0d:5f:2a:2e:9b:6c:25:8b:b1:d4:0a:ea:3d:
20:1c:d3:48:7b:40:b8:d2:93:ea:b7:f1:2a:c3:3b:f1:81:a2:
5c:97:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:42 2025 by rpki-client