Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier: Xq0q7EJyDVyP+gk9hO2RRN4yuLsNiKbv0O4xxLMJGFU=
Subject key identifier: DB:1C:D7:53:34:03:E6:1C:CC:C7:17:96:0E:3C:BD:D1:A4:DE:F7:C2
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 019A71133F07CA1904195214FEFD2A242A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:17 +0000
Manifest this update: Tue 11 Nov 2025 04:01:17 +0000
Manifest next update: Wed 12 Nov 2025 04:01:17 +0000
Files and hashes: 1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=)
2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: XaLF6SEFEmu1eArgbR1W0trr8jCkfurHF3phxJXcaxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3f:07:ca:19:04:19:52:14:fe:fd:2a:24:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: Nov 11 04:01:17 2025 GMT
Not After : Nov 12 04:01:17 2025 GMT
Subject: CN=db1cd7533403e61cccc717960e3cbdd1a4def7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:72:3c:d0:59:d8:b5:e4:ca:0f:eb:5b:cb:
39:2c:38:e9:37:73:40:0e:a9:e2:ca:fe:94:c5:0f:
19:d5:8e:f3:22:8f:e1:0e:53:0d:bd:db:70:a2:0e:
ed:ec:45:2e:9a:64:ba:cf:b8:77:0d:99:78:b9:c5:
00:91:54:81:f2:d1:90:aa:9d:4c:6e:52:89:6c:da:
e7:e1:0d:b9:29:25:6d:fe:1a:64:2f:44:8c:fb:83:
3c:5a:6f:15:10:3a:8b:01:c6:c1:44:81:dd:40:8f:
6e:4f:3f:40:81:76:66:8c:72:73:23:11:fe:c9:b0:
03:f5:2e:5c:eb:ae:03:32:98:0e:ba:1b:db:1e:bf:
59:6c:59:e7:73:5a:8c:83:c1:f2:55:d5:72:e3:eb:
d5:48:22:a4:dc:c5:7f:79:34:ab:ba:01:96:07:6a:
63:59:18:be:f8:69:95:c7:78:28:d8:bf:ba:4c:69:
f9:cc:60:4f:67:83:ef:38:0b:a1:e0:e9:85:54:58:
b0:85:74:8c:67:75:ec:2d:8f:63:c3:cf:c7:d6:f5:
67:e4:35:51:66:ed:37:97:59:d8:d4:3f:ba:a4:a8:
5c:bf:fb:b0:45:9c:fd:2d:54:0c:f3:75:35:cc:8a:
7c:7b:7b:a3:c0:0c:db:c3:31:8c:70:3a:aa:ba:c7:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1C:D7:53:34:03:E6:1C:CC:C7:17:96:0E:3C:BD:D1:A4:DE:F7:C2
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:16:fd:ce:cd:cc:3a:be:80:c1:c5:3d:25:69:6d:bd:35:4d:
f7:4f:23:4f:ec:ab:fd:03:c2:96:15:58:46:e3:12:6a:2a:23:
f0:a8:68:f8:d8:17:89:d8:c9:88:0c:82:bb:51:38:51:df:02:
d5:59:59:2b:12:c4:5c:ce:70:88:66:67:64:4d:5a:b1:42:b0:
8e:21:bc:db:17:f1:cf:7b:51:b3:fd:ec:46:16:16:6b:e2:79:
b5:76:13:15:34:06:cf:c8:be:9a:ff:3f:8e:e3:b9:a1:33:05:
6d:81:f5:7e:df:78:9b:21:f8:3a:97:9b:7f:19:4a:f7:29:8f:
a9:1a:73:77:52:21:ce:08:6a:0e:28:8d:22:c3:57:e1:cc:37:
f5:9a:96:32:5b:c3:1f:98:d8:a7:15:cf:7f:7b:3d:14:09:f2:
9f:6b:f7:9e:f0:fd:35:12:0c:be:24:b3:c4:c8:51:e4:23:93:
da:4f:67:cb:bf:b2:24:b6:69:b0:5b:1d:c3:7d:ff:4c:9b:a8:
41:e8:3f:1c:1b:0c:44:0f:d5:63:8d:d2:ff:63:78:a3:ef:50:
ff:e9:b3:29:82:6e:24:ee:27:31:a7:f4:1c:c6:d6:12:a4:f4:
b4:86:6f:a4:7a:21:ae:c5:be:c6:5f:8e:09:b6:e7:77:29:ed:
49:17:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client