Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier: v/ItbZ91HeVSeVJOIqEtM1qrZutFNGfV+y36Rfxmc0c=
Subject key identifier: 4D:86:9E:A3:1A:0F:92:F1:EA:4A:18:CB:A0:55:E8:24:D1:69:4A:7E
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 019A299E3A0D7BF319A5ECE8877A89C485D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 07:00:26 +0000
Manifest this update: Tue 28 Oct 2025 07:00:26 +0000
Manifest next update: Wed 29 Oct 2025 07:00:26 +0000
Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: 3fle/2nFLZ28pwcbbK9a8IdvaJ4jhhnswP/VHDYjAG4=)
2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:3a:0d:7b:f3:19:a5:ec:e8:87:7a:89:c4:85:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Oct 28 07:00:26 2025 GMT
Not After : Oct 29 07:00:26 2025 GMT
Subject: CN=4d869ea31a0f92f1ea4a18cba055e824d1694a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:47:44:01:8e:f3:d6:78:f3:a4:cf:23:27:
e0:8b:4a:fa:70:a9:ed:3c:29:b4:ef:b3:1d:55:e3:
ae:97:2f:ad:6a:60:7d:3c:2a:41:fe:21:cb:10:f0:
d9:37:33:81:59:47:52:65:5d:7b:51:9e:3b:02:aa:
2b:58:28:bf:a4:4b:fe:18:57:cf:22:5e:7a:d9:70:
ad:9e:ef:75:7f:c7:9e:85:c3:8b:83:42:97:3b:0d:
3a:1f:2a:76:e1:23:05:0e:99:65:ca:b6:89:18:7e:
d5:33:2a:6c:bc:3e:70:80:78:8e:00:77:51:f7:92:
21:16:aa:1e:0c:70:96:ac:3c:f9:fc:f7:9e:f6:be:
66:dc:9d:a3:eb:a7:18:c7:ac:1b:8f:6a:1b:e3:2b:
3e:d8:bf:8a:8a:a7:c1:bc:63:7e:67:cd:dd:77:6b:
59:ea:29:90:a9:7b:65:99:fa:c6:0c:44:02:7d:45:
22:d8:49:a1:fb:f2:ec:59:8b:4d:c0:55:1b:c6:eb:
db:49:b0:d4:78:94:bc:f4:dc:10:e7:34:bc:2d:b3:
a6:d2:31:40:f6:15:f0:66:97:f0:2b:b7:9e:95:a2:
36:37:fb:43:5d:6f:b7:ae:e6:e1:0a:f4:84:a3:36:
aa:d2:8d:c6:c0:49:ef:ef:8e:b6:18:d2:e1:02:29:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:9E:A3:1A:0F:92:F1:EA:4A:18:CB:A0:55:E8:24:D1:69:4A:7E
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:98:72:82:7f:4b:cc:b6:cc:11:85:66:47:6c:ae:05:09:55:
05:10:42:6d:f4:5d:5e:cd:f5:4b:ab:9b:42:f9:77:84:0f:3b:
c2:10:de:15:f5:3b:01:6c:79:14:48:ea:bc:a3:1b:e1:e2:16:
81:9f:59:91:ba:5c:e1:20:ba:0f:2c:1f:b9:4c:ba:3e:4f:53:
63:ca:72:c4:20:a8:11:76:68:54:3f:59:f8:78:5a:d8:03:ef:
3d:27:e7:29:93:57:27:98:c1:bb:2c:16:f0:82:b1:cb:71:c7:
1d:3e:14:00:6c:dc:2a:cc:80:bd:50:e2:e1:ef:3e:74:60:2c:
ac:7e:95:64:c3:e3:be:44:64:c0:27:f5:b1:87:bf:0c:c9:53:
20:a6:6f:5f:f5:55:0d:d5:ab:9c:1e:e0:a8:0d:12:02:e5:7c:
21:bd:a3:90:74:23:f6:6a:19:6a:9c:75:25:c8:20:3e:21:a5:
a2:a3:86:a8:04:18:29:f9:cc:10:b0:a2:4a:6a:7b:df:00:c0:
27:d5:1f:27:72:8d:c1:5b:8f:2a:40:11:cc:73:bd:8a:59:77:
3d:6e:e9:c4:6f:3a:eb:aa:c1:60:34:91:6d:19:57:fb:92:13:
c2:21:39:ed:69:d4:9d:e7:3e:da:27:a7:1c:9f:fd:80:63:c5:
12:4d:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:37:13 2025 by rpki-client