Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: HUJcBHbTJtD3u2olAxMrQh7Hxbz2PAZikiqJ+lFVwl4=
Subject key identifier: 19:AF:0E:98:26:76:F8:59:02:70:2C:CD:AA:CF:5B:D3:3C:CD:A1:A5
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019A4D3D6006F78D14A2530284E02ED5C09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:59 +0000
Manifest this update: Tue 04 Nov 2025 05:00:59 +0000
Manifest next update: Wed 05 Nov 2025 05:00:59 +0000
Files and hashes: 1: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: fRuvrcmQJ2CXY2eNHBRn2CDX3XGu5GvkGGGAb9baEoE=)
2: RYELhtEFcsCmVORqbpstU7Crut0.roa (hash: aIhBm/rb3wVRspojE1k+QXWmo713Q+h8iYk1yzSNDKA=)
3: wFOiJmPx91gFud4szSTNVGIfLik.roa (hash: KJL3tTISnToS4chRnmNiRq6jQUDoMI15K3mK8EPpyi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:60:06:f7:8d:14:a2:53:02:84:e0:2e:d5:c0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Nov 4 05:00:59 2025 GMT
Not After : Nov 5 05:00:59 2025 GMT
Subject: CN=19af0e982676f85902702ccdaacf5bd33ccda1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:4d:64:e3:90:f3:a0:8c:ca:cc:e3:f0:5b:
dc:81:9d:c9:7a:42:80:99:c2:52:bc:2a:fe:61:2b:
67:18:36:7d:1a:37:5f:2f:f4:7c:4c:df:38:65:bc:
f9:7b:11:c9:d6:24:a1:68:ed:7c:dd:42:ba:5c:55:
11:ae:a7:0c:b0:d3:a9:2e:87:3a:03:6a:f6:51:05:
b9:0d:bc:97:85:e6:30:a7:2f:d7:d9:95:d4:84:3c:
29:f4:12:49:36:a2:1c:34:b9:48:04:7a:07:90:6e:
cf:ce:78:c7:b4:be:95:c5:2e:c0:35:60:e8:13:fe:
23:f3:c7:a5:7a:07:7f:64:19:6d:36:00:39:ee:9a:
84:54:82:7e:8b:b4:aa:8c:a2:ae:99:06:05:bd:a0:
df:98:c3:e0:8d:27:42:f5:7c:91:b9:38:bf:a4:da:
09:5e:a6:73:c1:a3:b8:26:85:00:3f:b1:17:38:9d:
68:d6:8c:69:a0:f7:c3:a8:38:98:97:47:91:54:7d:
70:e1:09:27:24:c0:d9:62:f1:85:93:43:55:a1:96:
31:a2:3d:dd:86:93:43:bd:4f:72:83:ab:a3:4b:5f:
48:26:63:e7:a4:80:22:f2:e4:91:b3:ba:3a:3c:5c:
dd:e5:2e:6d:ec:3d:55:1c:48:cd:4d:21:1f:c7:58:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AF:0E:98:26:76:F8:59:02:70:2C:CD:AA:CF:5B:D3:3C:CD:A1:A5
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ed:45:76:0d:b9:5a:22:7e:93:60:d7:00:fb:e1:0e:96:ba:
27:0f:73:a6:11:43:29:4c:eb:50:49:09:45:46:5b:59:42:cf:
ff:a7:3f:64:86:60:c2:32:ed:98:37:07:ba:ff:af:e6:d0:b5:
c3:34:ce:cd:c4:bd:7f:89:88:8b:bf:58:91:da:b5:19:32:52:
09:4c:7a:37:35:fd:ad:07:65:23:06:7f:08:b1:66:4e:7f:81:
4d:94:77:d3:94:ce:1f:e0:04:22:2c:b4:6e:c5:5e:34:24:1c:
4b:66:1f:4b:a6:99:e5:aa:bd:38:dd:98:ec:5e:cb:88:52:a6:
1a:92:a9:a7:dd:6c:d9:d9:e3:c7:fd:6b:74:15:1c:e8:15:c0:
d2:84:2e:c5:a3:bc:06:d7:64:68:19:63:ad:4b:66:c1:5c:59:
cd:94:a5:4d:b0:e2:93:25:3f:38:ff:88:9f:e8:5e:a6:da:8a:
93:fa:13:e7:9f:ba:05:53:59:d8:ef:ca:57:2c:f9:01:f6:4f:
48:36:34:e9:95:10:31:ef:5b:f1:46:f9:dc:c5:9a:bd:a3:33:
99:0f:67:40:57:f7:5b:82:e7:a5:75:3a:40:f4:7d:ce:17:8c:
bd:a5:39:ce:83:07:8a:29:d7:64:7d:0b:52:bf:d4:f2:3c:db:
3c:83:6d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:22 2025 by rpki-client