Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: yI0iYrQTP7hgxxma5qo0xntcy/Rc9hNBIlDDf7SAtEA=
Subject key identifier: CA:D4:E2:C2:FA:B3:14:2D:83:B6:E9:40:26:07:C0:1B:F3:01:D1:B8
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 019A541ACE10CF8F806F95EC264B632B15EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 13:00:34 +0000
Manifest this update: Wed 05 Nov 2025 13:00:34 +0000
Manifest next update: Thu 06 Nov 2025 13:00:34 +0000
Files and hashes: 1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: XJ5kQdAbMDBH8zF2aAo2KZaRSieu5JiQB9cKs12JYwA=)
2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:ce:10:cf:8f:80:6f:95:ec:26:4b:63:2b:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Nov 5 13:00:34 2025 GMT
Not After : Nov 6 13:00:34 2025 GMT
Subject: CN=cad4e2c2fab3142d83b6e9402607c01bf301d1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:98:a9:79:f7:14:1c:5a:99:33:0f:0b:ef:82:
ee:5a:f3:4c:0f:ab:f5:40:de:e5:6e:c4:81:63:de:
5f:20:f3:b7:7f:a2:18:e1:18:14:a6:9c:6f:b9:41:
83:e6:0d:e5:b1:e9:26:be:d0:2a:4c:ae:1e:b5:4a:
2f:65:0a:ad:46:0c:45:68:60:a4:df:15:cc:fb:0b:
fe:cd:5f:8c:f1:f0:1a:f7:91:8b:b9:7c:ef:b8:7b:
db:a6:35:75:31:4f:65:1f:ff:00:3e:c7:2e:db:03:
9b:bc:28:78:53:1e:81:14:34:92:5b:36:32:fc:c8:
11:06:f3:0b:59:df:6b:50:b3:99:87:ea:10:c8:42:
ff:97:ea:24:0d:df:3a:8a:16:5c:f8:c8:ff:8f:4e:
42:d0:ae:7a:9a:1e:b3:6e:89:ae:e2:ca:a9:af:a8:
44:d8:d0:40:e6:a1:fc:dc:95:d5:98:40:43:5a:9b:
66:e3:97:12:b6:93:ed:7e:47:21:ff:03:25:fc:a9:
3b:08:31:ba:e3:c4:0c:ef:af:ae:61:74:6a:cc:78:
f0:41:eb:47:6a:89:67:ec:47:02:8e:ad:42:20:3b:
38:cb:a4:31:6a:19:8e:24:d5:d3:e9:da:9d:19:04:
fc:80:30:a6:06:06:ff:e6:7e:f1:89:0f:b1:8f:ca:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D4:E2:C2:FA:B3:14:2D:83:B6:E9:40:26:07:C0:1B:F3:01:D1:B8
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:14:4e:ba:8f:2b:f7:ce:86:de:d0:30:d1:89:6e:af:01:91:
96:35:89:fe:e0:20:75:9e:40:1a:0b:d2:aa:9b:87:c4:f5:8e:
a3:46:12:04:bd:4b:26:c1:a2:f7:0d:08:c5:99:bf:c2:2f:d5:
e9:f5:4c:26:3b:f1:80:08:04:de:b4:02:a7:22:39:cc:a7:2f:
8d:32:ff:17:4b:0c:76:28:c0:28:05:a9:5b:63:78:79:2e:23:
a8:fe:41:7d:02:18:f5:99:41:40:46:80:92:d6:12:43:a2:7b:
49:60:08:19:e9:4b:0b:8c:7a:bc:cc:4a:0b:e9:aa:d1:9b:ef:
0a:a8:8c:81:bf:08:00:50:ed:d8:3e:7d:74:e4:26:e7:73:85:
aa:c0:80:ce:d5:9a:fb:98:49:aa:94:1c:a8:00:4c:13:0d:df:
07:75:ad:72:94:81:f2:7e:a3:f9:37:3a:e1:f2:1f:67:a0:2b:
7b:bb:9c:75:1c:3e:67:b7:ad:2b:1c:a5:b4:ff:ee:9e:b0:7a:
81:99:e7:ac:c7:ae:59:f4:f9:ce:f0:cb:30:32:0d:b9:73:c9:
79:24:61:d6:ad:fe:87:0f:94:95:23:df:7a:47:03:13:00:22:
2e:58:93:d2:32:0d:9e:20:a8:dc:25:59:aa:f1:4a:db:eb:1e:
34:19:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:06:53 2025 by rpki-client