Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
File: M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json)
Hash identifier: XKpXLsfMHDEkGroIbKu5a758ghFxYRWC3xE1B7gNeD4=
Subject key identifier: 75:75:C1:B8:6E:14:A7:5C:18:D2:63:D5:ED:7E:9B:D0:0A:32:61:E5
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial: 019A51BEA07A815E6852D523AD50E8F81B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
Manifest number: 1623
Signing time: Wed 05 Nov 2025 02:00:38 +0000
Manifest this update: Wed 05 Nov 2025 02:00:38 +0000
Manifest next update: Thu 06 Nov 2025 02:00:38 +0000
Files and hashes: 1: FVPUO_4e4I5-OcVJQIXU4CRRPVk.roa (hash: q0KHYdYKhmIsDVg/gFGOj9HyFrWEATNN4eGecvRkCEk=)
2: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: fqpbQokjLHP3hRw6ivpZ76vNIA2bh2LKJNg5iMsRX5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a0:7a:81:5e:68:52:d5:23:ad:50:e8:f8:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Validity
Not Before: Nov 5 02:00:38 2025 GMT
Not After : Nov 6 02:00:38 2025 GMT
Subject: CN=7575c1b86e14a75c18d263d5ed7e9bd00a3261e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:9e:4a:b7:c7:d0:6b:08:0a:d6:ec:00:b8:
94:2f:c1:20:84:9a:90:3d:3f:da:f0:57:0a:0d:cb:
c4:49:28:eb:4d:b9:ec:bd:04:e8:21:b7:21:59:0c:
c3:dc:e4:31:ab:12:a6:7c:74:d7:6e:5f:aa:18:4a:
c7:84:99:6e:22:bc:5e:ea:08:87:df:52:74:b1:41:
f7:8f:d7:de:23:b2:f6:de:cb:07:09:2a:5d:c3:2c:
93:c5:b6:86:45:9c:d4:02:b1:d8:37:f5:14:30:ad:
28:e4:01:4a:09:a1:fe:0b:9b:08:04:35:22:b9:32:
e7:bd:57:8a:b4:8c:7c:59:01:3d:d9:f8:e7:84:30:
23:a8:4b:14:c7:41:99:d3:85:cb:e6:b6:2a:ee:fb:
91:11:02:9f:ed:66:46:bd:40:d7:e1:f7:70:d3:4d:
6d:bb:c0:2b:b7:92:bb:9c:1e:b7:01:f5:3c:7f:61:
b3:d6:db:5a:84:ed:ab:3a:e4:2a:d6:81:f0:de:8e:
cd:97:13:75:15:1a:27:b5:ba:15:28:04:3b:b7:77:
d2:76:c9:f5:4b:1c:89:46:d8:05:4e:d7:83:ac:4c:
68:1c:ab:83:26:5b:82:9a:3b:bb:3c:61:0c:88:b1:
b8:33:7a:da:75:41:bc:a6:fb:98:b1:47:b8:d2:e8:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:C1:B8:6E:14:A7:5C:18:D2:63:D5:ED:7E:9B:D0:0A:32:61:E5
X509v3 Authority Key Identifier:
keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ea:76:66:ec:60:0d:29:55:c2:36:4d:3b:12:a7:df:39:24:
e1:39:6f:7f:f5:59:a9:c2:96:16:fc:dc:ac:54:51:30:2a:88:
2f:de:fa:f7:29:48:c5:94:89:4d:9f:52:51:91:86:74:de:b2:
09:7c:1a:20:63:21:5b:1e:20:2c:8a:4a:40:ea:19:6a:db:bd:
8e:ae:a3:81:c3:4d:e3:e2:89:22:61:84:aa:a5:24:2d:91:58:
40:1e:3c:26:3b:66:7c:34:bb:dc:66:8a:7f:ef:02:bf:35:ed:
63:8a:55:ac:6e:72:44:93:bd:39:e9:2a:4f:12:07:3b:d9:2c:
5e:23:a7:fb:fd:0a:61:fc:c8:68:66:f6:90:8c:f1:a4:2c:08:
d9:10:4e:9c:54:e7:28:61:f5:82:13:33:ec:7b:e5:24:0f:c0:
5f:57:1e:98:0d:fb:72:4a:ae:da:91:cd:ff:53:e1:c4:7a:a4:
28:dd:bf:47:89:43:27:d9:2b:0c:26:84:ba:9b:87:7c:24:e7:
c5:a1:6e:b8:83:7c:f5:b4:90:4e:be:c0:fe:54:53:8e:39:21:
d1:71:d4:94:25:35:0f:8f:f9:6a:59:ce:d7:51:78:f0:11:69:
cb:f8:92:b4:73:17:38:5d:b2:2e:fb:d6:70:db:9a:17:ee:74:
3d:84:28:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:32 2025 by rpki-client