Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: NmqFp+l+G7gXw3dOb3lLe+gcaujgn7rOWiOroU70d7w=
Subject key identifier: F5:37:1E:35:92:8B:1D:55:56:D1:E4:35:AE:0D:20:45:A7:FC:67:5F
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 019873E3B9773CB6DA838C9A7301A4140FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0CF8
Signing time: Mon 04 Aug 2025 07:02:40 +0000
Manifest this update: Mon 04 Aug 2025 07:02:40 +0000
Manifest next update: Tue 05 Aug 2025 07:02:40 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: IZAQCQ+yaoUpjTGX4L1+zd+60uD1RTDepQieA/zuMbA=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:b9:77:3c:b6:da:83:8c:9a:73:01:a4:14:0f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Aug 4 07:02:40 2025 GMT
Not After : Aug 5 07:02:40 2025 GMT
Subject: CN=f5371e35928b1d5556d1e435ae0d2045a7fc675f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:b1:30:6c:58:1c:1c:72:53:d4:c5:5a:6f:
1b:54:6b:77:98:0d:b9:bb:b1:81:f5:04:b6:22:ef:
f4:b8:6f:29:61:ef:b4:2b:13:e9:4c:c6:d0:f9:e7:
12:7c:5e:e5:ca:9e:1d:91:59:06:54:64:51:f7:64:
a5:2a:ed:fa:d4:0b:fa:48:86:6d:c3:b5:b9:e2:da:
c9:e1:23:e8:a0:13:b9:1e:63:07:16:7a:73:6f:cc:
9a:cd:9d:52:82:cc:9c:b6:7d:b0:27:16:53:3b:31:
03:1d:0a:0d:c2:0b:08:cd:f3:ae:8f:93:48:9a:eb:
63:2c:03:e7:80:48:53:a6:4a:ae:ac:55:cf:b0:2f:
d1:c6:f9:81:46:81:03:6e:c7:1e:f2:80:74:08:af:
9f:6b:68:9a:00:c7:fe:1a:b8:7d:fe:f5:ec:ff:89:
05:01:f5:86:8c:fc:0c:5b:35:f7:75:3e:a0:e3:f7:
25:11:46:fa:ab:08:86:7c:e5:38:7d:e2:09:43:dc:
8d:5e:c6:01:2b:8d:d2:bf:51:04:7e:3b:19:5c:94:
e8:95:d5:1c:a5:4c:5f:c8:8b:82:5a:19:af:9f:cc:
06:74:ac:7d:cc:7e:7f:f5:cb:02:47:88:86:0f:55:
e2:6a:1d:17:46:4e:5f:be:3f:36:43:28:18:1f:28:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:1E:35:92:8B:1D:55:56:D1:E4:35:AE:0D:20:45:A7:FC:67:5F
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:af:dd:9f:4c:65:2b:15:55:a0:c1:1b:78:bb:5b:18:81:75:
95:5a:ca:60:84:1f:5f:34:7e:a9:9f:96:60:4f:35:7e:d8:98:
fa:56:69:eb:41:1b:2f:51:3e:0a:72:61:39:c2:62:45:65:bf:
84:da:48:24:a7:4c:ba:1d:84:be:bc:f6:0c:9c:1c:38:fa:42:
be:c1:d4:72:fd:8b:4c:c7:f4:a9:84:8a:70:6c:7a:c3:ee:1c:
97:02:a4:f1:09:e9:f6:b0:e1:88:62:0b:85:53:f9:79:83:09:
af:3b:0b:de:e2:1d:49:9c:c6:91:44:a0:10:dd:cd:bc:31:c4:
f6:ae:6a:4f:0b:14:d3:48:65:1f:47:7a:bf:f8:c1:10:ba:df:
f1:c4:95:99:ab:81:d6:24:b2:cf:da:82:81:aa:47:31:c3:0e:
bb:92:3e:c8:dd:1c:f0:da:31:9a:1f:eb:01:46:c6:af:7c:2e:
32:f4:f0:c8:ed:62:37:5c:f6:91:be:9f:e4:d9:3d:0f:4a:ee:
bc:81:f4:36:11:36:a4:6f:23:11:a2:f4:34:23:87:bb:e6:a9:
cd:25:1e:6f:9b:a8:ba:2d:df:74:a9:03:ab:41:cb:83:75:e7:
7d:20:19:fa:ec:c0:31:80:b1:ec:42:64:bf:e5:2e:36:66:ba:
7c:d4:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:03 2025 by rpki-client