Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
File: M_RqsXrvI5qWvee2zLcG9-C2K24.mft (raw, json)
Hash identifier: lRQYureA3LvEYQ1/OCeQ61b13FdbyhX+d5NRCy9HZcI=
Subject key identifier: 2F:77:F4:71:04:F0:D4:84:C0:68:7B:F5:8E:5D:3E:38:0C:6A:09:E5
Authority key identifier: 33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
Certificate issuer: /CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Certificate serial: 019A73381D1822405542E1FB74D661544D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
Manifest number: 0140
Signing time: Tue 11 Nov 2025 14:00:48 +0000
Manifest this update: Tue 11 Nov 2025 14:00:48 +0000
Manifest next update: Wed 12 Nov 2025 14:00:48 +0000
Files and hashes: 1: MTamWzlF--uNDyRMLTXJk1Mx0Fs.roa (hash: JMBYVhl1br5C36w4dCy9ILJG/1PRS8u33zsXvftn/Yw=)
2: M_RqsXrvI5qWvee2zLcG9-C2K24.crl (hash: nbLyBhNvrQyHhJJQ3hflDawMlkOhf4qnI8OCn92wmcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:1d:18:22:40:55:42:e1:fb:74:d6:61:54:4d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Validity
Not Before: Nov 11 14:00:48 2025 GMT
Not After : Nov 12 14:00:48 2025 GMT
Subject: CN=2f77f47104f0d484c0687bf58e5d3e380c6a09e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e2:c1:a4:7b:82:db:de:15:90:73:1a:a0:74:
b2:5d:33:8e:5b:e0:59:a6:db:90:48:71:61:b9:6a:
90:c7:f6:19:83:59:6e:4d:fa:b2:de:df:20:ff:91:
6a:f5:43:fd:f7:2b:79:1e:69:a6:fb:60:e6:b9:d0:
34:fb:80:ac:7a:ab:dc:00:04:a8:a4:1e:fc:0a:33:
c7:9b:40:53:7c:e1:61:bb:c6:21:1e:3e:ba:ec:de:
a1:c4:e7:1c:41:95:23:74:a9:af:cb:76:d4:82:ab:
6f:48:35:f9:44:68:35:75:59:ca:15:99:08:69:6d:
b6:fe:0d:c6:2b:f3:f2:dd:d8:a9:99:8f:80:2d:df:
28:74:38:e5:c1:02:07:2a:de:84:48:b5:5d:3e:84:
d3:03:ec:8c:76:a1:fa:82:e3:c2:ae:9f:57:32:e3:
b1:75:36:6e:db:72:27:a0:d6:06:39:7c:e8:62:7e:
63:3a:01:d2:d5:eb:3e:9a:e2:84:0b:b2:cb:8c:50:
12:77:9d:e1:7b:6a:8b:e9:62:15:6a:56:50:d2:90:
26:97:cd:16:3b:96:e2:a5:d7:ef:7c:29:44:7f:50:
f9:b6:86:e2:43:c0:f5:3d:5c:7a:9e:01:c3:b9:e0:
2b:8e:ec:49:6d:34:ec:7c:a6:85:ee:e3:79:a1:67:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:77:F4:71:04:F0:D4:84:C0:68:7B:F5:8E:5D:3E:38:0C:6A:09:E5
X509v3 Authority Key Identifier:
keyid:33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e4:e5:85:32:53:be:fd:ea:d1:d4:f6:d7:d5:af:77:f5:1a:
ff:94:80:4d:4d:d3:c8:c9:ed:ab:c2:ec:99:99:c5:d5:9e:ae:
07:57:c1:4e:49:da:7f:e2:e4:ed:1f:c0:79:da:20:82:03:c5:
4f:ce:e1:17:66:04:ed:57:4a:30:c0:d1:cb:f8:ed:11:3a:df:
ef:a4:af:b8:e6:6d:b9:b9:cd:e7:9c:7e:0d:d5:8c:85:75:9a:
e0:66:b0:0f:37:20:29:d3:ec:41:9a:2c:73:24:0b:f1:f3:2a:
55:e4:63:6c:dc:06:9c:3d:8c:db:aa:04:6f:7c:b5:bd:1e:42:
9c:97:bb:7c:dc:e8:b0:69:a2:b8:31:b7:b1:2f:d3:c5:ed:76:
a9:8f:f3:1a:39:2d:0c:9b:16:b3:64:48:80:d6:85:ce:ef:08:
a7:9e:b8:6f:7c:89:93:0e:c4:bc:1b:64:20:40:60:ec:f7:1a:
1e:bd:aa:6e:e3:a2:46:89:15:03:e1:c6:e5:59:98:e8:45:a5:
a7:4e:ab:62:ab:c3:b5:45:80:9c:74:b2:dd:83:d1:1c:fe:2d:
a7:86:fa:46:02:4c:06:ec:e3:9c:01:16:3b:45:2d:ab:90:e0:
11:f8:2d:0a:e6:5b:13:86:ac:31:0c:af:e0:f2:b9:e1:90:e8:
58:69:a4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:16 2025 by rpki-client