Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
File: 01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json)
Hash identifier: xcw7/mIPgN/bJIHR56fSwWNDBMqebO5V/iWNGyEdIHI=
Subject key identifier: 76:52:42:FF:A4:0D:3F:08:B9:D3:44:51:6D:E6:A3:5B:92:A7:2E:86
Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
Certificate issuer: /CN=d3530c144f592cfa891babf195a817900cd6d916
Certificate serial: 019A71B822F5CE3EB3E27AF0BE0134C5715A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: aUxxLeA2UVubGK1eeyR2Whx/a2Uhf68VA4ABGwF2hP0=)
2: r_GfDo9ZWQ7myQ0iViJXzfWcph4.roa (hash: x8B6QTHVzWahPni+0i08daL7qF7EoN+d+/45THjKk0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:22:f5:ce:3e:b3:e2:7a:f0:be:01:34:c5:71:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=765242ffa40d3f08b9d344516de6a35b92a72e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:d2:92:4a:9c:ef:77:ad:f7:e8:29:91:b2:
a0:d8:e9:ca:f2:dd:14:a0:2b:70:7f:74:7f:5c:d7:
bc:8d:4d:1a:bf:7a:8a:69:19:f6:ca:a6:c9:c5:6f:
19:1c:77:b9:12:42:4e:d6:e4:e8:20:c1:d9:8e:15:
6d:08:7a:a0:a2:84:6b:b3:dc:7a:9f:cd:59:d5:b6:
a9:ee:cc:d6:a6:d4:de:1e:47:4c:8f:8c:ec:b5:31:
82:65:89:45:e9:bc:a6:77:1d:b4:98:e0:70:dd:e7:
76:c0:24:94:5e:43:6c:e4:5f:45:1b:de:e4:1f:22:
e7:47:cf:7b:9a:40:80:8b:d4:ba:70:71:42:ed:1a:
69:2c:57:70:7b:6a:e7:2a:e8:75:f6:45:cf:0b:61:
1c:c4:fe:b1:83:e1:ec:2e:23:c9:41:e3:b4:78:78:
0f:e9:f1:1e:4a:ee:08:bc:a4:ba:93:0a:76:ff:1d:
5d:38:75:e5:68:1a:e7:76:11:db:9c:d0:24:c2:af:
8f:1e:88:9a:af:66:ae:ef:8b:51:59:29:b7:d9:2e:
e5:4e:e6:b4:79:6c:47:9b:a0:84:94:fe:53:5a:be:
a8:5c:78:a6:a4:97:a6:03:ed:56:7b:db:cc:db:a7:
f3:76:aa:69:82:ce:13:93:78:f4:cb:2d:25:21:da:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:52:42:FF:A4:0D:3F:08:B9:D3:44:51:6D:E6:A3:5B:92:A7:2E:86
X509v3 Authority Key Identifier:
keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8d:f3:27:6c:93:09:39:e2:0c:f2:a9:52:91:77:c2:b8:8e:
95:a6:30:78:f7:64:40:82:7a:c8:0d:83:cf:f8:45:21:cd:99:
8b:30:23:32:98:4c:64:a4:ef:a1:2a:7e:45:18:98:0d:22:ec:
1a:03:15:0a:e2:cc:4f:53:75:5b:6c:a1:ad:f0:a3:f0:d8:5f:
45:02:af:a8:df:32:8b:0b:a0:6a:c1:b1:dd:e9:24:46:94:06:
f9:aa:07:a1:6a:ba:04:29:da:88:61:00:5f:0e:ac:fd:c8:dc:
7a:b1:fd:32:15:3f:05:1f:7c:3f:7a:ea:20:7c:cb:ca:28:80:
fe:74:08:8f:71:29:0c:c1:f0:49:c8:d8:83:8f:b7:7b:fd:a5:
68:94:97:0c:0b:b6:b8:48:5d:b0:24:43:26:65:4b:cb:1a:11:
ec:f0:2d:d9:5e:89:34:93:26:86:4b:39:e1:e6:9f:57:45:f5:
f4:1e:84:e7:f8:79:f7:c8:4d:04:0f:59:c4:bd:5a:44:49:3f:
d2:90:84:b8:a9:73:1a:20:42:da:6d:fd:27:ba:08:05:12:6f:
42:b6:29:3d:4a:e4:b3:62:27:cf:3f:9c:79:3d:e1:54:34:72:
ad:16:06:2a:d2:58:f9:77:90:89:ff:2c:20:1b:8f:d4:3a:78:
2d:41:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:03 2025 by rpki-client