Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
File: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft (raw, json)
Hash identifier: KeuI+X5ockP9f2oxLs7b63tCT0UjlBbdCObRGHQaNqo=
Subject key identifier: 68:61:91:58:73:D1:EA:B0:3F:AC:07:F5:63:6F:10:10:9E:4B:7C:9B
Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Certificate issuer: /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Certificate serial: 019A4EF570D338AB6914D8C37A9E09F23B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: 2vNXSPhqGzkcVvfumaqzoQwZMt0.roa (hash: eL4GW0LkIf6gTx0hvW09DQfbQa9hDU0uyvNBC0IgCZw=)
2: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl (hash: KrASdXtcJXf4ZrahzT2N1XQWz/5MTs5NceYIrfHpE/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:70:d3:38:ab:69:14:d8:c3:7a:9e:09:f2:3b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=6861915873d1eab03fac07f5636f10109e4b7c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:ed:fa:de:e7:33:39:f9:ed:ad:9e:53:c9:
7a:74:9c:5a:8b:4e:fb:e0:db:cf:53:90:03:a7:f3:
4b:eb:7d:e2:9f:1f:23:29:56:56:d7:ca:dc:67:c9:
b9:9b:fe:ea:d2:ac:88:ce:97:a5:f6:39:8c:18:70:
76:8f:63:32:bd:72:83:8a:89:36:96:73:ed:29:54:
a9:39:d9:90:e7:fd:35:e4:4f:1b:88:a3:2d:60:f9:
d5:f4:c8:de:64:61:47:67:8b:28:be:71:b8:c7:4d:
97:26:67:dd:94:af:2a:ed:ee:f8:06:70:88:20:e9:
b9:33:a9:54:99:f9:43:11:9e:b5:b2:62:75:89:3d:
d6:f0:58:0f:58:e3:38:4e:db:ed:00:83:f6:d2:e8:
a9:d8:4c:6e:d6:a3:de:92:4b:99:d7:61:0b:f6:fd:
a1:33:10:7a:9d:56:2d:db:5a:a5:d4:ae:8d:4e:c2:
60:55:c0:49:4f:e5:f2:f1:1e:ed:65:ef:07:a4:be:
60:5f:f1:6d:dd:6b:b1:4e:23:0a:ed:65:5d:3d:1e:
03:e9:ab:85:b6:13:b4:96:54:eb:ac:d9:e8:59:42:
d0:1a:31:19:1c:b1:e1:0c:b5:0d:95:23:d4:70:6c:
63:23:1f:fc:ca:7e:fd:26:37:9f:46:64:d9:79:ed:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:61:91:58:73:D1:EA:B0:3F:AC:07:F5:63:6F:10:10:9E:4B:7C:9B
X509v3 Authority Key Identifier:
keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bc:c9:bd:fe:4d:d5:76:58:87:74:d6:70:77:f5:bf:e1:91:
63:6f:bd:b7:b0:37:40:76:8f:34:1a:1c:e4:0d:b4:58:e2:40:
c9:97:8e:5b:3b:12:ac:44:28:fd:0e:81:82:fd:0c:f8:40:2d:
d4:a7:bd:33:59:a0:89:33:8b:a6:f3:77:bf:b1:29:be:9f:d0:
f8:35:34:b9:67:42:3b:9a:f7:0f:ad:a0:c2:40:12:ce:f1:2e:
f4:ee:b5:f3:ae:8f:f9:c0:67:79:90:51:ed:55:19:0e:34:3c:
a6:c1:eb:47:e4:d9:33:a4:d6:99:c2:a9:cd:a1:32:e1:51:83:
4f:67:11:c4:18:cd:71:6d:1c:15:9e:09:1e:37:20:54:69:34:
07:d2:ec:a5:e6:9e:ab:cf:89:36:61:dc:c7:16:3f:d5:6f:9e:
66:a5:21:fb:54:98:33:3b:64:7a:f8:d2:89:1b:53:9a:5f:91:
b0:34:74:4b:88:13:80:9f:19:58:56:87:95:d8:bb:66:8a:db:
d1:6c:3d:60:ad:83:74:01:42:b2:42:f8:29:5e:9d:ce:40:47:
b1:76:51:03:53:41:b4:be:50:f4:73:24:57:a4:be:f5:bc:ad:
53:1d:69:c0:37:85:52:f6:db:2e:64:b5:72:28:ef:50:9c:44:
a4:20:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:34 2025 by rpki-client