Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: /Qfi/gmPdYjiUDHbQgL/TCPNlaHqmo9ZhC7HYu1isEk=
Subject key identifier: 5D:80:A5:E6:36:76:CB:F6:F6:F0:92:5A:0B:2C:E4:17:B1:73:5E:E7
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 01992331473E04E16BFBE0F2C03979E12F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 1304
Signing time: Sun 07 Sep 2025 08:00:55 +0000
Manifest this update: Sun 07 Sep 2025 08:00:55 +0000
Manifest next update: Mon 08 Sep 2025 08:00:55 +0000
Files and hashes: 1: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: BNp1wRlviWLMDuR0a75IqnQB//ay/3JYme68YqjMYm4=)
2: w5RgxPZJeCHJ32aZdxHuHtsDhQo.roa (hash: Uc4RlDE0xm/vlOwUXxqVD6EiTzssOmMkcQ4YcA/6FLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:47:3e:04:e1:6b:fb:e0:f2:c0:39:79:e1:2f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Sep 7 08:00:55 2025 GMT
Not After : Sep 8 08:00:55 2025 GMT
Subject: CN=5d80a5e63676cbf6f6f0925a0b2ce417b1735ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:35:62:c6:15:3d:9f:ab:55:20:34:22:7d:
0e:f2:1b:a1:f8:f3:ef:b8:fa:f6:b0:22:be:0b:7b:
23:e1:38:de:1f:01:a4:42:73:52:7c:d0:84:4b:3d:
0f:b7:58:2a:5a:7a:6e:e9:4f:3b:14:da:19:6e:a5:
e2:0a:7b:06:b0:f4:d0:27:15:05:3f:f5:95:82:f7:
cf:04:74:dd:6d:59:85:3d:04:f0:8d:92:16:12:18:
3f:45:af:87:55:a5:57:7c:75:29:c2:d7:c4:fc:bf:
9d:e9:33:89:1c:0e:df:16:f3:93:5e:55:8e:cc:5d:
3f:16:d3:c4:98:60:2e:0d:43:b7:cc:8c:37:f0:b1:
91:9b:42:17:92:68:9d:0f:81:6d:ae:4f:ad:10:aa:
45:5d:2b:63:9a:6e:7c:21:77:e7:68:a3:86:7e:87:
0a:bb:27:26:fe:49:4d:09:36:98:4f:0f:ff:ca:4d:
4f:2a:c0:a9:a6:6b:1f:6d:9a:8c:98:49:03:9e:72:
9c:7a:64:03:e5:b7:5e:aa:62:df:50:56:4a:96:61:
89:8b:5a:e5:cc:68:ed:76:1d:fa:e9:ec:b9:73:d4:
cd:68:64:80:a8:c2:70:06:bd:c2:3b:18:30:ab:ae:
9a:2a:98:b3:4f:b8:21:2f:bf:48:cb:bb:19:3a:29:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:80:A5:E6:36:76:CB:F6:F6:F0:92:5A:0B:2C:E4:17:B1:73:5E:E7
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:78:a4:43:10:7c:8c:f9:0e:68:66:8c:86:17:d1:c9:d1:63:
30:84:25:7c:02:6d:89:e9:9e:da:8c:60:51:be:25:58:7e:0f:
e5:42:fe:62:40:2b:21:85:91:27:c4:d2:19:68:bf:24:56:5e:
d4:2c:94:f1:e8:d3:76:e1:07:60:07:1e:fd:6d:a2:5d:e6:1f:
5b:ef:c1:15:5c:b2:36:c4:29:7e:d7:8f:8b:55:29:7f:f0:03:
cd:5a:78:72:dc:c1:35:77:74:9d:c2:a9:db:09:0d:3c:09:88:
8b:4c:b5:fb:e7:fa:6d:72:d5:61:be:00:c7:f3:37:fe:2c:17:
47:73:55:02:10:51:c1:8d:bc:9b:55:a8:eb:c1:fc:2c:5b:ca:
41:9b:c7:13:8e:07:ab:cb:5c:42:10:7e:e4:46:cd:58:0f:be:
83:8f:7b:2f:f6:95:71:53:5b:cf:ae:80:e3:a7:4a:d3:94:f8:
0b:cb:a0:12:9b:7e:82:5b:2f:bc:0f:6c:5d:1e:83:b5:eb:85:
19:1b:4a:0d:82:36:f5:40:5a:0e:5a:8e:3f:b1:13:cb:da:cb:
b4:ce:a3:dc:97:a8:7a:ae:f9:9a:a2:ff:0c:11:a2:ee:30:5f:
68:71:ec:07:b3:04:13:a9:97:d9:a1:f5:02:cf:7e:8d:38:7f:
69:dc:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:27 2025 by rpki-client