Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File: M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier: dRmGvosW3cmkRXaowAMZEVWf+bu43G64a8cG44QO9SY=
Subject key identifier: 0D:6F:3E:E8:BE:C1:4D:9C:BC:76:B7:0E:ED:8D:A3:C5:95:CF:53:34
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer: /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial: 019A7149B1AA48C7AA8402DD93FA11AB3210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: FVzJiWT1BwXZ7vOzQpuODKWwpn0BTFA/2K7SRvTaUmg=)
2: azxmi2se1IK95xXGAVKvEPH21_A.roa (hash: Ss+Ca/k8A0fp5KqEjbn4GKd8EzNY8mejKpcvQRG6Wdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b1:aa:48:c7:aa:84:02:dd:93:fa:11:ab:32:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=0d6f3ee8bec14d9cbc76b70eed8da3c595cf5334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:b2:07:07:46:56:57:91:8d:cc:2a:35:80:
60:53:37:8e:8e:bd:9c:b2:ee:a1:1b:94:b2:e9:e3:
a5:67:81:a6:20:fe:b2:f9:b4:07:31:b4:54:6f:46:
13:13:fc:66:cf:4e:1c:aa:0c:7e:3d:d0:b2:67:37:
8b:f9:0c:cf:67:ce:e0:b9:7e:22:38:22:b6:4d:90:
27:28:19:69:33:fb:2c:7a:bc:04:52:11:a2:ac:f8:
56:24:6d:7d:6a:9e:0a:9a:21:8f:4c:99:16:10:a2:
ee:ad:d4:4a:aa:01:03:1f:15:d6:15:ff:93:80:bf:
aa:c0:80:e7:a7:6d:2a:0b:7d:9b:29:02:e8:1c:7e:
c5:74:17:01:07:d5:19:e1:65:b4:c0:e1:3a:19:99:
05:bf:59:dd:ce:cf:e6:c4:ec:05:78:12:9f:f5:a2:
23:de:93:c0:bb:68:7e:9a:93:1a:99:b5:dc:39:ba:
d8:67:79:56:68:72:74:41:92:bf:76:af:e6:54:e6:
4d:29:dc:a0:28:5f:6c:80:ed:6a:d6:06:b7:1f:50:
9e:8b:49:f8:10:e0:55:ce:4d:8a:65:74:b9:dd:dd:
6d:82:ac:39:79:58:0e:47:95:e8:70:7f:e6:4c:c8:
a7:dc:90:bb:98:0e:fc:8e:dc:18:82:d8:d2:4b:f9:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:3E:E8:BE:C1:4D:9C:BC:76:B7:0E:ED:8D:A3:C5:95:CF:53:34
X509v3 Authority Key Identifier:
keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f5:19:26:88:3f:bf:a3:17:3d:3b:3f:2d:f9:6a:23:c0:5f:
ba:a1:77:2b:5e:cc:c8:22:46:26:1c:a9:66:73:bf:93:ea:c8:
ef:e1:49:0b:c6:ab:bc:8d:d2:06:83:44:bb:cc:32:6c:43:36:
9c:68:b5:92:eb:08:d0:45:a5:1b:82:ec:89:62:92:b4:05:4e:
1f:ed:c6:56:98:e1:fa:80:c6:4c:f8:d8:a8:a1:90:26:ae:f6:
30:bd:65:c9:0c:e7:56:61:20:40:c9:33:23:99:b8:d0:09:16:
8c:55:ad:5c:f4:0c:ee:41:c6:6a:2b:b9:1d:9f:27:55:b4:5e:
8d:30:04:ef:ae:fc:27:3a:f0:4d:46:d3:24:e0:90:8f:59:b5:
02:ed:35:32:8c:59:63:31:5e:8e:81:fc:01:59:ea:04:a4:77:
7c:8f:88:23:b1:34:da:6f:7e:4c:26:8f:e9:53:5c:5b:51:3c:
ee:ba:38:19:ad:77:b1:e2:a6:2d:ec:75:1d:44:da:38:6a:66:
00:51:66:28:88:3d:37:d7:3c:33:e4:de:08:15:d4:36:92:a2:
66:0a:91:44:71:fe:fa:51:9c:7b:6f:a0:87:43:fb:cc:8d:b9:
2e:d5:5a:24:1a:17:86:a1:20:14:54:af:45:8d:2e:bb:64:3f:
3b:f3:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:55 2025 by rpki-client