Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: 1c6KVo+qbVHO1JexXYpAZy7V6woLd0Q2wcg+MD87a1c=
Subject key identifier: 06:76:92:ED:8D:03:09:7B:FF:05:2C:3D:5D:78:C3:94:DA:67:CB:7E
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019A24AF01F65959F5B3B615C31CF68B0A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 08:00:40 +0000
Manifest this update: Mon 27 Oct 2025 08:00:40 +0000
Manifest next update: Tue 28 Oct 2025 08:00:40 +0000
Files and hashes: 1: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: GiJPL/stzuT0tiVbt7/bYqQRnJT7twqKXIjn0w+fZJI=)
2: RYELhtEFcsCmVORqbpstU7Crut0.roa (hash: aIhBm/rb3wVRspojE1k+QXWmo713Q+h8iYk1yzSNDKA=)
3: wFOiJmPx91gFud4szSTNVGIfLik.roa (hash: KJL3tTISnToS4chRnmNiRq6jQUDoMI15K3mK8EPpyi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:01:f6:59:59:f5:b3:b6:15:c3:1c:f6:8b:0a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Oct 27 08:00:40 2025 GMT
Not After : Oct 28 08:00:40 2025 GMT
Subject: CN=067692ed8d03097bff052c3d5d78c394da67cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:c9:05:bd:05:9b:b0:15:67:2c:f5:1e:92:
aa:62:95:ac:57:82:19:c4:31:24:c7:d6:f2:83:4d:
36:c4:71:a7:6e:50:ce:b7:8e:9b:cf:96:3f:59:27:
72:41:cc:78:0a:2f:c2:50:3a:fa:37:7b:08:3a:7a:
09:f5:5a:1f:da:d6:ed:7b:06:21:70:ba:eb:93:60:
34:99:01:38:3c:07:de:61:6e:53:67:a9:aa:4f:00:
fe:58:bf:46:d4:88:36:53:cb:85:8a:2c:f5:47:55:
08:b5:70:0f:15:de:a3:a7:7b:28:a6:6e:fa:c3:51:
a0:69:6b:22:52:75:e5:73:6b:f2:6a:cc:5f:fd:c1:
7d:77:a4:be:2a:a0:74:49:b0:e1:08:2b:aa:72:1c:
79:ed:f9:57:17:a5:49:52:13:36:02:17:4f:8f:bb:
f8:67:e5:60:9f:43:ec:7d:65:a7:27:47:ab:59:69:
33:7f:1d:b3:e9:10:95:71:9b:d1:ae:d8:ba:eb:36:
d1:7b:a3:12:7b:12:a7:7a:d4:19:a1:8e:ce:73:7b:
a3:bc:fe:3b:18:52:61:92:56:4f:3e:55:29:ba:3c:
61:6c:bf:20:32:8e:1e:55:d8:fc:94:9a:1b:a0:fa:
7f:f3:b3:89:49:b3:e1:0c:0d:91:a8:9f:b5:2d:3d:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:92:ED:8D:03:09:7B:FF:05:2C:3D:5D:78:C3:94:DA:67:CB:7E
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d2:d3:ec:6c:8a:97:4e:c7:52:d2:68:96:76:f1:12:8a:22:
6a:a7:9f:0a:ad:57:f6:20:11:94:96:71:82:d2:dc:ae:f3:16:
93:32:c9:4a:0e:a8:c1:8c:11:01:f0:4c:f3:9a:13:10:ef:dc:
2b:81:9b:ee:2b:4d:40:7d:c6:71:b4:6b:54:85:e0:f2:d6:b8:
6f:ee:8a:ef:5d:fd:a8:98:46:f8:e7:8a:25:3e:b9:9d:16:20:
02:3d:81:c1:c4:b2:6f:85:cf:cf:66:f1:e7:ba:66:c8:36:41:
08:52:65:6e:93:dc:de:8c:62:3d:57:a3:2f:51:a6:25:db:28:
d1:a4:5a:fb:53:1d:46:bd:ed:85:dd:6d:d4:13:85:34:70:6b:
b4:5d:76:9b:8b:73:db:39:79:11:a1:57:91:06:c6:a5:04:65:
d3:f3:16:2e:12:9b:73:17:ef:0c:2d:26:75:4d:ec:b9:c2:82:
23:12:6b:59:78:e4:d5:1b:7c:dc:22:62:97:f5:98:5a:56:56:
f8:36:68:e6:49:8b:22:1b:b3:6b:44:83:d4:69:ae:3a:88:be:
c4:5e:ca:1c:3d:01:9b:d7:1e:f5:94:66:e2:f2:ec:98:f6:58:
9f:cb:a9:de:0b:b4:67:ae:64:43:a2:8c:aa:53:5c:27:88:ad:
fb:13:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:05:01 2025 by rpki-client