Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: cOI3dTQCi0a1/pe3xV1ZJGJDwWw5L8Bhv3hfUAQvemo=
Subject key identifier: 33:FB:ED:80:08:26:C3:FE:31:98:17:89:00:70:BB:F4:33:E4:20:F0
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019A4DE1A39709BC95F9F8550C00FBBDAE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 09AD
Signing time: Tue 04 Nov 2025 08:00:24 +0000
Manifest this update: Tue 04 Nov 2025 08:00:24 +0000
Manifest next update: Wed 05 Nov 2025 08:00:24 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: H22bqGGK4iZ/n2Zo8KgQnA0Wxq0NLIXhKlhm08YUfGg=)
2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a3:97:09:bc:95:f9:f8:55:0c:00:fb:bd:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Nov 4 08:00:24 2025 GMT
Not After : Nov 5 08:00:24 2025 GMT
Subject: CN=33fbed800826c3fe319817890070bbf433e420f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:6d:96:4e:87:44:e3:55:21:08:c1:aa:74:
26:d0:a2:14:69:c4:90:c0:12:67:87:65:02:23:5a:
ed:32:8c:38:d5:d0:af:cf:2f:d1:15:e5:55:8e:a9:
66:f5:ec:12:c8:52:69:2f:69:63:37:36:0f:3a:12:
0c:df:2d:45:62:d0:f3:34:33:2e:77:b5:d2:12:2f:
cb:9f:9d:41:0d:b1:8d:81:c7:b2:1d:70:c0:73:62:
8d:55:2e:90:bf:dd:be:b4:45:2e:61:8e:78:3c:86:
97:23:c8:87:c2:24:f0:c4:34:01:08:42:5d:ab:7c:
45:7d:d9:94:de:ed:f0:be:82:57:ca:5c:d7:07:d6:
6a:76:90:20:31:9b:12:0c:12:cb:94:cf:18:19:a1:
df:c7:79:68:24:bc:10:e1:d9:48:a9:07:16:f4:89:
e4:f4:71:89:b3:d9:8c:7d:27:7c:35:75:b9:e1:64:
c5:5c:33:93:dc:b5:9b:5b:e1:3b:99:b7:18:77:6a:
d7:2d:d7:64:50:b3:59:1c:02:47:89:91:6f:ec:a2:
3f:b3:c3:d3:51:b1:d5:09:2d:03:03:40:bf:7a:fb:
09:70:5e:d4:15:a8:ae:c1:ff:b1:a1:cf:88:40:4d:
78:bd:89:19:d7:c0:bc:dc:62:ba:84:62:d2:35:6c:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FB:ED:80:08:26:C3:FE:31:98:17:89:00:70:BB:F4:33:E4:20:F0
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7d:12:f8:22:16:08:26:39:2c:16:53:96:79:c5:da:88:03:
43:d4:88:e6:c7:ed:83:fe:97:fe:bf:12:8e:05:cd:3c:3b:76:
76:60:bb:20:22:17:19:1a:a2:db:27:da:ba:8c:ec:2e:c0:da:
d5:12:aa:9e:6e:7c:2a:58:ec:5c:59:22:4c:7a:75:f7:c8:53:
10:c7:82:25:2b:cd:20:ca:d1:08:97:cf:55:e8:b7:f3:61:08:
94:04:da:29:5f:7f:91:6f:56:77:5a:cf:c8:19:88:d5:43:1c:
49:4d:b7:2b:d0:52:60:99:92:ad:7d:a3:2b:7c:b1:24:24:7c:
d2:63:35:22:33:d9:12:30:3c:2f:d5:f0:a6:ff:fc:f5:f5:d8:
28:f7:b1:86:1f:7a:5a:bf:9e:7e:1e:1b:50:f2:e9:8d:38:86:
d9:1a:27:88:4e:f6:64:33:b2:f3:3a:64:bb:3e:75:41:22:c7:
4c:eb:8e:15:5e:f0:7a:e0:9c:d1:90:32:ca:12:0e:8f:a8:44:
95:b7:61:e4:08:96:f4:79:a2:a8:9b:a3:70:dd:15:0b:ca:76:
3c:b4:96:fd:b3:cf:02:cf:7d:ed:da:ea:0d:05:55:cc:8c:af:
9e:43:21:24:c6:e0:e3:56:f7:e6:ac:b6:c0:99:13:db:de:e0:
9b:8f:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:39 2025 by rpki-client