Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier: d7e/U1ub76UEBfvpJvFkN/6LqJGeuMAj+HXGhEJRmO8=
Subject key identifier: B6:B7:21:0E:6B:93:FF:A7:97:C3:F0:03:1F:22:56:40:F1:B4:7C:45
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 019A71EE5ECF922F94CFD91647AD9A31189C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: MNDK0vq72kWr7g/aWlQStZIZGZn5JqWlAAyLH3O1DhM=)
2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5e:cf:92:2f:94:cf:d9:16:47:ad:9a:31:18:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=b6b7210e6b93ffa797c3f0031f225640f1b47c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:c3:aa:13:a0:84:ac:c0:3d:3a:56:93:91:
37:b9:98:19:0d:d2:37:74:a2:08:5e:c0:23:6f:bc:
f5:95:83:e5:50:16:83:a8:2b:bb:5b:a1:dc:52:68:
3e:15:1d:49:bf:22:3d:ed:e7:ef:07:0d:be:73:45:
a8:cc:d5:e7:fc:71:bb:10:0c:84:3a:35:f7:72:6d:
2f:ac:0a:77:db:14:94:d9:97:ec:e4:83:e1:44:a0:
9b:a8:af:61:1f:55:a3:06:1d:45:c6:d8:ff:f0:56:
f2:75:1e:2a:84:38:2d:32:02:93:8d:56:c7:8a:24:
95:3b:c7:48:f7:af:a3:45:bf:5e:a3:a3:3d:ef:71:
b5:62:5e:02:f7:2f:0b:5f:69:2f:65:9c:ae:11:45:
85:07:72:94:b1:78:12:d4:85:14:e9:6d:65:f7:99:
20:c3:1b:8d:f5:3a:5c:d6:6a:c6:66:89:f2:9a:17:
c6:83:b1:4d:b8:5e:30:31:c3:9b:24:53:22:ba:65:
8e:69:49:b2:f2:58:ea:40:42:08:17:2c:97:1b:ec:
a6:c5:e4:ac:32:8a:59:3a:50:64:60:eb:27:e0:bf:
de:66:94:c2:31:73:40:9d:ef:ed:b6:09:5b:08:70:
57:42:be:21:c8:83:56:5e:4c:62:a7:bd:b8:71:6b:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B7:21:0E:6B:93:FF:A7:97:C3:F0:03:1F:22:56:40:F1:B4:7C:45
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:52:b7:44:f8:0d:f9:c3:09:84:a2:bd:c5:4b:3a:23:56:28:
52:88:30:e9:58:3f:88:78:8c:3b:11:39:c4:7c:2b:2d:07:7b:
03:c4:6f:01:eb:77:de:5d:5f:3c:81:7e:b3:01:22:56:d3:3d:
b3:2f:0b:40:b3:cc:73:ec:a6:b0:2b:87:38:14:42:59:5a:d8:
e8:51:1a:0d:16:85:f5:00:3d:b9:7c:b7:b8:d5:48:a1:ee:3f:
30:52:ca:77:c0:b2:0e:fa:80:41:02:21:29:47:44:17:94:3b:
cb:ee:ea:06:36:54:db:d9:6f:90:c8:b2:bd:c7:14:51:f8:70:
1b:96:db:07:67:fe:ed:11:32:12:fa:f3:0f:70:d8:44:b9:e7:
ba:82:2d:35:9b:81:87:73:97:26:c5:f4:cf:e8:3c:2b:95:72:
5c:9b:64:34:3f:e5:e7:7b:16:86:7c:5c:7b:38:44:0d:69:1c:
61:6d:ea:bb:d1:23:ed:26:8c:4a:d7:bc:a7:d5:0b:51:6d:c9:
b4:cc:a3:e7:c1:30:cb:6a:59:de:1d:af:5d:33:94:e1:7c:02:
ff:23:62:ba:89:ca:fa:4b:b0:16:6f:54:86:1c:9f:b6:7b:af:
54:e0:8d:a3:cd:cb:06:13:07:6c:2e:20:7c:30:33:48:38:ae:
72:ca:e9:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7l7Pki+Uz9kWR62aMRicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTI3OGJhMjgyNjFhMmQxZTU1M2RiZWY2ZGY4NDA5YTIx
YzFhZWYwHhcNMjUxMTExMDgwMDM4WhcNMjUxMTEyMDgwMDM4WjAzMTEwLwYDVQQD
EyhiNmI3MjEwZTZiOTNmZmE3OTdjM2YwMDMxZjIyNTY0MGYxYjQ3YzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDTDqhOghKzAPTpWk5E3uZgZDdI3
dKIIXsAjb7z1lYPlUBaDqCu7W6HcUmg+FR1JvyI97efvBw2+c0WozNXn/HG7EAyE
OjX3cm0vrAp32xSU2Zfs5IPhRKCbqK9hH1WjBh1Fxtj/8FbydR4qhDgtMgKTjVbH
iiSVO8dI96+jRb9eo6M973G1Yl4C9y8LX2kvZZyuEUWFB3KUsXgS1IUU6W1l95kg
wxuN9Tpc1mrGZonymhfGg7FNuF4wMcObJFMiumWOaUmy8ljqQEIIFyyXG+ymxeSs
MopZOlBkYOsn4L/eZpTCMXNAne/ttglbCHBXQr4hyINWXkxip724cWsSwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLa3IQ5rk/+nl8PwAx8iVkDxtHxFMB8GA1UdIwQY
MBaAFDPieLooJhotHlU9vvbfhAmiHBrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEt
MjJlYTNhZDVkZTVjLzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEtMjJlYTNhZDVkZTVj
LzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVK3RPgN
+cMJhKK9xUs6I1YoUogw6Vg/iHiMOxE5xHwrLQd7A8RvAet33l1fPIF+swEiVtM9
sy8LQLPMc+ymsCuHOBRCWVrY6FEaDRaF9QA9uXy3uNVIoe4/MFLKd8CyDvqAQQIh
KUdEF5Q7y+7qBjZU29lvkMiyvccUUfhwG5bbB2f+7REyEvrzD3DYRLnnuoItNZuB
h3OXJsX0z+g8K5VyXJtkND/l53sWhnxcezhEDWkcYW3qu9Ej7SaMSte8p9ULUW3J
tMyj58Ewy2pZ3h2vXTOU4XwC/yNiuonK+kuwFm9UhhyftnuvVOCNo83LBhMHbC4g
fDAzSDiucsrpdA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:02 2025 by rpki-client