Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File: M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier: kyKt7mqJrjh0F9SXd2P+VUy81/8XldjmwwXQmnneYTc=
Subject key identifier: A2:EB:8B:C5:87:1E:78:BF:B1:F6:BC:4C:1A:D3:A1:E3:91:8A:27:63
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer: /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial: 019A50E30901303957C560FFE15C12AF679B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:00:47 +0000
Manifest this update: Tue 04 Nov 2025 22:00:47 +0000
Manifest next update: Wed 05 Nov 2025 22:00:47 +0000
Files and hashes: 1: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: faUWfKgFBoGbwEYRA9wpQtNFbbHRX69ITPjShsurhqo=)
2: m9KlvtpTq4Ql79O_O_rULA1w-zY.roa (hash: +h4/STkGCXYgH/sIOVE5dquJUDdEfzAIpbql2yKK20U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:09:01:30:39:57:c5:60:ff:e1:5c:12:af:67:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
Validity
Not Before: Nov 4 22:00:47 2025 GMT
Not After : Nov 5 22:00:47 2025 GMT
Subject: CN=a2eb8bc5871e78bfb1f6bc4c1ad3a1e3918a2763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:59:52:c5:dd:fd:66:c9:ca:6a:38:34:3e:
89:df:32:1a:1f:d5:ae:fa:0d:36:c1:1c:62:d8:41:
ac:d9:a7:13:a9:38:75:0e:d2:bf:dc:69:4d:ba:42:
10:aa:8f:f7:72:c1:53:92:79:b7:c3:5b:e7:2d:74:
50:34:2a:52:35:77:63:01:33:dc:38:63:b1:bc:33:
7b:a5:61:ea:37:97:b0:83:d3:c3:a0:23:fc:98:e1:
c9:fe:48:d3:47:5c:74:8f:ba:4a:ca:f6:ef:c9:7f:
60:3f:75:04:5e:5d:0f:92:a7:05:c2:54:e8:64:d9:
fd:9f:dc:13:eb:79:2f:4d:c9:67:68:78:62:a8:c6:
93:0f:0a:ea:c0:ea:32:c4:60:c6:f8:8d:21:41:ed:
59:7f:8d:bd:9e:d7:8f:74:91:56:a1:61:53:ab:43:
70:f5:f0:7a:6a:51:97:89:f4:4c:9d:a3:8b:9d:bd:
37:52:6f:09:12:31:5e:7a:51:1a:5c:67:3e:4c:8e:
2b:15:0c:76:0e:17:51:02:52:ee:88:63:11:8f:f0:
70:f7:63:6b:4b:b5:74:b5:a2:3a:0f:06:58:6d:5d:
0a:14:38:db:61:ab:aa:a3:dc:7c:d4:71:e2:be:a5:
2d:1d:3c:d0:f9:7b:5d:ea:5c:c7:95:e1:fe:97:b8:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:8B:C5:87:1E:78:BF:B1:F6:BC:4C:1A:D3:A1:E3:91:8A:27:63
X509v3 Authority Key Identifier:
keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6f:dd:60:be:80:92:e2:a3:3e:e0:b3:a6:87:7f:11:ad:ce:
bd:41:00:0f:4d:5b:bc:2b:64:91:5c:9f:08:d3:9c:d4:ca:5e:
c5:b1:07:0d:4e:ae:7c:a6:dd:64:f6:7b:b8:12:89:c8:f2:e9:
5a:5b:83:67:7e:56:b7:11:eb:58:81:b9:e5:37:1c:4e:13:88:
d2:ad:3b:00:4c:2d:9e:49:e0:45:74:ad:f8:1b:2f:46:33:74:
b1:06:eb:d8:32:8f:d9:e5:20:e9:3f:9a:84:59:95:93:3d:72:
fd:23:67:50:68:ae:d7:e8:31:76:9f:76:4e:f4:a7:cd:5a:8a:
54:23:a5:ee:2c:1b:9a:a0:e7:be:71:24:6c:6d:2b:ce:dd:ed:
08:e8:50:84:d5:ca:30:a4:c6:5e:be:7e:1d:6b:8c:52:c3:de:
13:4b:0b:db:85:af:78:55:71:f8:23:97:11:b8:f2:4c:3a:5a:
0a:ee:c5:97:6a:b1:8f:3a:07:20:55:a2:85:84:64:fd:76:80:
62:04:44:10:cb:89:a6:71:15:f9:f1:0f:47:da:4a:54:3b:4d:
e3:01:63:7a:95:b9:fb:d0:04:03:f4:db:85:8f:ae:83:8e:6b:
b6:97:b3:ea:ea:a4:f6:05:13:58:48:f6:8b:fa:6e:a0:5f:b1:
ee:47:80:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4wkBMDlXxWD/4VwSr2ebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNTdhZDQwNmRmOTkzNGI1MDQ4YjVmYTIxZGUzMTQ1MGI5
MzZmYTkwHhcNMjUxMTA0MjIwMDQ3WhcNMjUxMTA1MjIwMDQ3WjAzMTEwLwYDVQQD
EyhhMmViOGJjNTg3MWU3OGJmYjFmNmJjNGMxYWQzYTFlMzkxOGEyNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsRZUsXd/WbJymo4ND6J3zIaH9Wu
+g02wRxi2EGs2acTqTh1DtK/3GlNukIQqo/3csFTknm3w1vnLXRQNCpSNXdjATPc
OGOxvDN7pWHqN5ewg9PDoCP8mOHJ/kjTR1x0j7pKyvbvyX9gP3UEXl0PkqcFwlTo
ZNn9n9wT63kvTclnaHhiqMaTDwrqwOoyxGDG+I0hQe1Zf429ntePdJFWoWFTq0Nw
9fB6alGXifRMnaOLnb03Um8JEjFeelEaXGc+TI4rFQx2DhdRAlLuiGMRj/Bw92Nr
S7V0taI6DwZYbV0KFDjbYauqo9x81HHivqUtHTzQ+Xtd6lzHleH+l7gLRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLri8WHHni/sfa8TBrToeORiidjMB8GA1UdIwQY
MBaAFDNXrUBt+ZNLUEi1+iHeMUULk2+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTFldFFHMzVrMHRRU0xYNklkNHhSUXVUYjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmQ0ZWMtYTA3Mi00ZjNlLWFjZGEt
MGNmNjM4NGE1NjEwLzEvTTFldFFHMzVrMHRRU0xYNklkNHhSUXVUYjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmQ0ZWMtYTA3Mi00ZjNlLWFjZGEtMGNmNjM4NGE1NjEw
LzEvTTFldFFHMzVrMHRRU0xYNklkNHhSUXVUYjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2/dYL6A
kuKjPuCzpod/Ea3OvUEAD01bvCtkkVyfCNOc1MpexbEHDU6ufKbdZPZ7uBKJyPLp
WluDZ35WtxHrWIG55TccThOI0q07AEwtnkngRXSt+BsvRjN0sQbr2DKP2eUg6T+a
hFmVkz1y/SNnUGiu1+gxdp92TvSnzVqKVCOl7iwbmqDnvnEkbG0rzt3tCOhQhNXK
MKTGXr5+HWuMUsPeE0sL24WveFVx+COXEbjyTDpaCu7Fl2qxjzoHIFWihYRk/XaA
YgREEMuJpnEV+fEPR9pKVDtN4wFjepW5+9AEA/TbhY+ug45rtpez6uqk9gUTWEj2
i/puoF+x7keAzQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:07 2025 by rpki-client