Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json)
Hash identifier: BIq4y9+p1DScMkrEOAD8+QX6eUnxQCCCn0j+Cz41mw0=
Subject key identifier: B4:D3:5B:A7:86:F9:75:1E:3E:48:AE:CB:53:66:FC:10:EA:D2:E0:08
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 019A4FCFCB9E4BCC9B2A965F798866D17129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
Manifest number: 0B82
Signing time: Tue 04 Nov 2025 17:00:09 +0000
Manifest this update: Tue 04 Nov 2025 17:00:09 +0000
Manifest next update: Wed 05 Nov 2025 17:00:09 +0000
Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: BPqhOfCPCNEIYNXqppGjW2l08YZdV2CZXIU0Oe7+JOE=)
2: _khA_VnUk6WIR9HzLzBYy21gjiY.roa (hash: zYMvT2aBQ62Uw/oOkoXmLb0oW9+P5GMgEJxD27Pzif4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:cb:9e:4b:cc:9b:2a:96:5f:79:88:66:d1:71:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Nov 4 17:00:09 2025 GMT
Not After : Nov 5 17:00:09 2025 GMT
Subject: CN=b4d35ba786f9751e3e48aecb5366fc10ead2e008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:86:04:30:49:3e:af:c8:29:c0:40:24:83:
73:2a:0f:d3:dc:8a:78:f8:46:68:4e:4f:f4:00:8e:
4d:ed:25:f6:dd:31:ba:94:cf:5b:a4:63:e2:51:40:
ee:66:de:83:f3:29:41:f0:17:4c:d5:5d:09:4c:7e:
41:72:c1:7a:5c:b3:0e:6a:10:8c:51:7a:1d:0f:8b:
a7:f5:5e:30:51:f4:d3:04:14:dd:e3:5f:9d:b6:30:
32:ab:77:6b:35:67:82:41:08:a4:f9:ae:d7:a0:43:
b6:dd:9b:9f:0c:c5:f7:67:09:e9:28:7f:f2:97:6e:
f9:24:9d:18:4c:6a:09:45:de:e0:ca:07:c5:b0:cf:
fe:0d:8c:e2:0a:ce:78:6b:bd:e6:34:32:90:c4:2a:
c0:c0:5d:ef:99:ae:6c:6c:f7:50:92:1a:98:36:d1:
bc:98:9c:13:45:92:b9:4f:82:6f:bc:5a:ea:da:d2:
fe:d9:6e:07:0e:c2:74:eb:64:45:89:e0:59:73:79:
2c:ca:67:e5:db:2c:72:22:ad:7d:82:c1:f3:95:9d:
1b:98:e6:18:ca:2b:c2:89:5d:13:0a:61:ba:4a:dc:
10:d9:bd:5d:87:a8:59:76:71:e0:64:3d:ce:e1:e5:
00:76:3d:74:44:ef:d3:67:90:0d:11:0d:c4:18:50:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D3:5B:A7:86:F9:75:1E:3E:48:AE:CB:53:66:FC:10:EA:D2:E0:08
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bd:c2:c2:04:41:0c:18:38:17:54:3e:2c:e3:af:15:3a:99:
79:99:b0:f0:2b:3b:36:07:2f:ad:53:8d:a1:0e:9b:a0:c0:94:
48:09:d0:ba:18:b2:ad:0b:b0:ef:69:9a:a4:e2:51:30:7c:55:
bf:88:8d:9e:69:9c:6d:29:36:a8:04:83:c3:fe:99:23:4e:03:
74:86:79:ed:3b:ae:b8:17:18:ea:96:ec:43:10:29:77:c1:91:
f4:35:fa:da:35:c8:6e:59:c7:88:74:5b:5f:ef:92:18:ab:fc:
ef:97:06:16:2c:34:6f:e1:df:03:c6:5e:a4:f9:c4:8a:2b:4e:
36:3e:33:e4:8d:a0:7f:9d:93:3b:94:fc:e0:98:62:64:62:94:
c4:97:29:c9:21:d7:7e:5e:d8:9f:cc:3c:9a:32:56:5f:dd:3b:
a3:d3:70:38:46:b1:cb:c9:45:d9:d9:82:e1:64:81:15:0d:ca:
00:21:21:a9:77:eb:dc:b2:3a:52:35:ec:f7:73:36:a6:d8:d0:
23:18:c4:05:de:bf:59:d8:b9:05:15:51:81:f6:d4:c8:02:34:
21:1d:26:76:67:31:68:ea:ff:77:9e:d2:59:ae:95:96:8b:b7:
58:d8:4b:b8:48:99:dc:2c:bb:a5:58:89:72:f4:ae:4f:87:2a:
62:b1:be:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:11 2025 by rpki-client