Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: PyXeZn0QUI8Wg5JA79VDuzn0joZ49XxcnKe208L53H8=
Subject key identifier: DD:10:38:3D:2A:69:15:37:D8:2E:B3:22:1D:86:9D:47:69:FB:05:9F
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019A8CC0EE56E13E17E29B59E09CC9DBD389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0707
Signing time: Sun 16 Nov 2025 13:00:45 +0000
Manifest this update: Sun 16 Nov 2025 13:00:45 +0000
Manifest next update: Mon 17 Nov 2025 13:00:45 +0000
Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: La/8c9xFczk7H8rR3npLwGDT1wz8WcPtlw4+kz+xBM4=)
3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:8c:c0:ee:56:e1:3e:17:e2:9b:59:e0:9c:c9:db:d3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Nov 16 13:00:45 2025 GMT
Not After : Nov 17 13:00:45 2025 GMT
Subject: CN=dd10383d2a691537d82eb3221d869d4769fb059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:8c:1c:96:57:dd:85:37:f2:fa:c6:bd:0c:
9b:74:b5:e3:9d:f8:f2:c8:57:75:4c:a8:80:2a:1f:
68:74:05:f7:ea:be:3a:8e:81:6c:24:6b:5f:24:d4:
8f:1a:cf:65:90:22:df:6d:05:d8:66:8b:3b:9f:74:
0c:f8:db:89:4c:c4:0b:e9:8c:c2:f8:8a:76:80:76:
12:6f:81:85:47:8f:f0:4a:56:e0:fd:34:ec:ce:1a:
c3:60:52:d6:97:e0:e9:14:9c:b8:36:2c:8f:b9:4e:
f6:e3:89:6f:65:99:18:99:f6:02:d2:63:4d:1b:0e:
dc:ce:eb:bd:8f:89:bb:12:3e:c7:bc:4f:c1:3f:de:
27:08:01:c9:e9:fe:95:3a:58:13:86:66:69:5b:d1:
9d:9d:4e:4c:85:7a:95:20:f9:b5:64:4c:62:7f:50:
7a:31:91:0b:6b:8c:e5:3a:d9:4a:a1:22:28:79:1b:
15:1d:2f:fc:06:92:ad:d1:6f:20:d4:a1:6d:47:55:
7b:81:c4:42:0e:c0:0b:83:01:79:37:01:51:a6:a3:
f7:c0:9e:0a:4b:90:a4:1f:e5:db:ed:be:6f:0c:f7:
d0:47:00:2b:f8:d1:ab:df:8e:c5:7d:69:60:86:0b:
0a:19:46:82:19:8a:9a:63:27:07:08:12:05:b9:2b:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:10:38:3D:2A:69:15:37:D8:2E:B3:22:1D:86:9D:47:69:FB:05:9F
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6f:a9:41:29:ca:22:3f:1a:9d:dc:08:6e:9d:9c:dc:a9:9d:
87:88:54:4b:4a:a8:0c:3c:78:5f:76:81:34:7e:2d:4c:72:a2:
9a:be:7a:d2:10:80:b8:f8:63:08:fe:f1:32:43:a1:5f:eb:20:
86:93:af:05:cb:7d:90:fc:ff:d9:34:77:25:2a:e4:c6:d5:30:
80:3f:f1:e2:99:f2:5b:f8:e4:1a:26:76:3c:90:33:64:8f:22:
38:ca:e0:ad:92:c5:e5:14:c5:8f:8f:05:7f:31:36:fb:b8:20:
79:15:21:55:f3:bb:10:79:0c:d6:64:50:4e:e7:81:44:ce:2b:
03:79:04:68:3c:7b:76:20:a2:ae:59:8b:0b:bd:9d:8e:f7:e7:
7f:7a:9f:af:ea:04:2a:cf:8a:26:f2:83:f3:a4:21:48:3a:c9:
b6:9a:a6:31:b8:cd:64:d5:a3:89:12:cd:ff:48:88:2a:2d:6f:
f6:2f:02:e4:1f:dc:35:d3:56:cf:dc:9c:7e:37:5d:1d:0d:ff:
9c:0c:02:26:a7:e9:8e:f2:ce:92:63:f8:41:60:5d:6c:d3:b1:
a4:d6:d6:3e:c7:e2:ed:39:de:05:3f:74:e5:61:3b:8c:69:c7:
fa:e2:da:a6:12:1f:cf:4a:79:50:d1:40:a4:89:78:98:a3:d4:
23:b1:dd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 20:22:44 2025 by rpki-client