Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: xp2SpN86ofGhzkK+bQaNbvVwXKhCGm3amF7NccvccQQ=
Subject key identifier: 53:78:39:36:06:3C:C1:1F:7C:DA:60:B5:48:7C:A0:52:4C:8E:1C:D0
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 019A4DE1C64CEBE36061E89CDB7F541A657E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:33 +0000
Manifest this update: Tue 04 Nov 2025 08:00:33 +0000
Manifest next update: Wed 05 Nov 2025 08:00:33 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: z/6Npe9JBLYrCngI5DaOsEoRhYb9aL6GO/aK4cwxbdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c6:4c:eb:e3:60:61:e8:9c:db:7f:54:1a:65:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Nov 4 08:00:33 2025 GMT
Not After : Nov 5 08:00:33 2025 GMT
Subject: CN=53783936063cc11f7cda60b5487ca0524c8e1cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:1c:01:80:26:8c:21:5f:35:2b:80:ad:ad:
d9:24:24:14:07:ec:f9:3c:ed:03:d1:cf:44:e7:59:
a2:8b:df:a0:70:83:df:e5:d6:5b:4c:76:99:7a:34:
93:76:33:ad:8e:10:fe:7e:97:fb:0b:81:1d:24:1d:
d1:76:57:79:70:26:e5:c4:eb:97:f8:0e:3b:23:3a:
fa:15:16:f9:53:d1:c6:0a:9c:39:34:3a:b9:27:3a:
b8:45:de:75:ad:7c:49:89:be:4d:45:ca:fe:34:06:
5b:e9:6d:96:08:04:72:7a:11:a8:fe:f3:32:93:75:
88:47:8a:fe:de:12:8a:2e:c2:7b:0e:7b:fc:a3:d7:
65:da:77:96:5c:12:96:14:45:f6:50:0f:9f:fc:01:
9b:87:1f:db:6f:15:d6:d4:94:49:d2:08:6d:d6:96:
56:fb:1f:39:cc:89:12:11:e1:7d:7b:ae:a1:d5:99:
c0:c1:0c:d5:7a:a5:a8:46:21:d9:33:ee:4d:ae:b4:
bd:9c:43:76:d4:c8:b0:6d:eb:7e:9e:04:1b:2d:c3:
11:15:18:82:00:59:85:d8:10:51:84:7a:cc:c7:20:
a4:0a:f3:b8:00:f0:ca:40:01:99:6e:20:c8:04:47:
32:25:6d:80:11:13:d1:a5:58:73:23:18:a6:aa:30:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:39:36:06:3C:C1:1F:7C:DA:60:B5:48:7C:A0:52:4C:8E:1C:D0
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cf:89:bb:fe:a6:95:7a:d2:2a:e2:27:ed:96:fd:40:90:66:
3f:cb:dd:1f:f6:cd:45:f8:a3:51:3b:5f:f3:4f:11:c0:0a:b7:
8d:12:84:7a:e4:b0:67:e0:bf:2d:1d:4d:22:53:f0:a1:72:9b:
16:9f:59:10:37:65:a3:9a:e8:c3:e5:5e:60:d0:b9:32:81:df:
1a:e4:d8:21:8c:39:28:39:a4:4d:33:b7:88:ea:88:f8:af:27:
b1:35:e5:0a:82:12:da:b2:50:de:66:f1:81:cb:a5:6f:aa:f9:
01:76:00:5e:f7:3a:1c:7e:76:c7:7a:fc:2f:1f:1c:3b:a9:90:
90:a9:5b:b5:6a:36:93:a8:4a:4a:ad:5e:db:0b:e9:9f:fc:82:
20:31:2c:d3:03:ed:3c:35:aa:a3:d6:53:1a:7d:6d:db:ac:40:
97:54:c7:ea:e3:17:3a:b9:da:73:c9:88:81:7c:a6:e7:8a:e8:
10:00:aa:30:54:47:1f:5a:b8:fb:a4:31:a6:69:f7:88:6c:63:
28:de:a3:53:5a:2d:df:99:c6:1e:bf:4a:89:16:b6:a4:a9:76:
3f:06:59:1f:87:de:8a:8f:08:40:67:31:a0:32:ae:f9:4a:ef:
1f:c3:b0:34:43:24:1d:ea:a5:d2:75:98:d5:d9:f5:62:88:24:
a6:b3:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:52 2025 by rpki-client