Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: kgS19LuFvkjq6f+vyDVV/FgPCr4tlHu43k6tRZnZfJA=
Subject key identifier: 18:E0:0D:0C:8F:BE:89:9E:43:E8:5E:AB:25:95:25:6F:1C:53:96:B8
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 019A53AD2689E04221887D3057FB868B4D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0D3E
Signing time: Wed 05 Nov 2025 11:00:47 +0000
Manifest this update: Wed 05 Nov 2025 11:00:47 +0000
Manifest next update: Thu 06 Nov 2025 11:00:47 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: MvIaghwcfOI62JOLcyg33719jNp2tmfIYtghCg3tG5o=)
2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:26:89:e0:42:21:88:7d:30:57:fb:86:8b:4d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Nov 5 11:00:47 2025 GMT
Not After : Nov 6 11:00:47 2025 GMT
Subject: CN=18e00d0c8fbe899e43e85eab2595256f1c5396b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:c9:72:40:64:58:17:d8:7a:0c:19:47:b9:
35:df:49:a6:97:bc:1c:c0:02:bb:95:f1:c8:00:cb:
ec:4e:2f:f6:0c:33:45:05:50:04:77:31:02:54:a3:
5f:6c:2c:b2:3e:76:ac:8b:43:68:e5:2c:7a:9e:91:
37:3c:95:36:c1:ae:fe:c4:84:3e:03:83:7d:7e:3d:
a0:42:b2:60:a7:77:44:19:b4:a6:62:ef:de:fb:8a:
f8:3c:5e:c8:a6:8a:bd:76:73:6e:58:73:88:6f:f1:
31:20:d6:76:ca:3a:cc:8b:07:96:18:3b:c1:cc:4f:
00:8a:d3:f5:31:42:3b:c6:c9:ee:e5:c9:94:a2:43:
88:ec:8a:90:e6:b9:0e:db:19:2f:ab:e6:b3:0f:26:
92:7e:8d:0b:0a:94:bb:63:17:5f:cf:2e:0f:05:70:
e2:1b:03:97:d5:60:1d:a4:da:63:08:b0:3e:8d:20:
b6:c8:5a:e9:98:3f:fb:78:6c:b6:5e:88:7c:d9:d9:
44:37:95:2e:fb:ec:a7:6e:c6:50:dd:fb:99:08:10:
3c:2f:1e:46:1b:4e:0e:0e:bc:78:20:20:7a:2d:8f:
03:7e:57:93:2f:00:1a:bd:c7:c9:04:35:d5:05:2e:
bf:bf:1a:d3:f1:30:74:d3:b1:1a:b9:26:a9:60:27:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:0D:0C:8F:BE:89:9E:43:E8:5E:AB:25:95:25:6F:1C:53:96:B8
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4f:1e:0d:0f:9a:7e:5d:bb:0b:92:49:db:2f:c4:63:92:3d:
e0:d2:18:70:81:28:46:b3:c2:dd:97:a9:86:05:b4:19:4c:9a:
84:63:0d:9d:b1:17:50:31:a2:69:bb:d3:2f:7d:e0:0b:e0:e1:
00:73:e5:7c:5a:df:55:2d:bb:e7:e5:48:46:87:6f:bd:99:e8:
5e:58:25:b0:eb:50:b8:99:b9:8e:7d:72:4d:a9:4f:d0:0a:e3:
4b:68:8b:34:b3:e8:1e:24:a9:1c:f5:f5:7f:57:90:87:3a:7e:
08:d8:f2:fc:99:b4:ab:15:ae:d3:65:df:75:a6:de:1a:f2:53:
a1:ae:7e:c5:f0:6a:1f:64:99:c3:6e:83:3d:51:73:60:e7:6f:
3a:c9:53:0f:52:8c:0e:21:00:b1:55:ac:ea:83:89:86:4e:b5:
68:e2:18:ea:bf:10:7a:0d:67:95:e6:7c:fc:74:19:c7:62:8a:
2c:8a:8b:81:72:36:d9:7e:a4:08:8b:bd:0a:55:85:02:3c:de:
99:33:e0:b2:6f:71:32:5e:90:c6:d3:33:e8:f2:31:e1:2e:18:
1a:ea:53:4b:5c:24:32:e3:3d:b8:c7:3a:6a:54:13:ce:4a:b1:
8b:fe:68:21:5b:fc:c4:5c:b1:a1:64:43:23:b4:9e:a3:4c:c7:
7b:03:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:13 2025 by rpki-client