Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: 6MpiyIPTaJUUjPKNMRO5y5U0WtbugGfw74nkWBN47p0=
Subject key identifier: 35:13:FF:E5:93:89:11:88:2A:32:A9:ED:9B:C7:A9:09:D8:49:CC:EA
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 019A73382BE41E5F583D967BB7CBB39D2088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 13B2
Signing time: Tue 11 Nov 2025 14:00:52 +0000
Manifest this update: Tue 11 Nov 2025 14:00:52 +0000
Manifest next update: Wed 12 Nov 2025 14:00:52 +0000
Files and hashes: 1: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: X1O7lkvBtgKE8UnLdTxFod0h7iEjYCAGdpdX2NaWVeo=)
2: w5RgxPZJeCHJ32aZdxHuHtsDhQo.roa (hash: Uc4RlDE0xm/vlOwUXxqVD6EiTzssOmMkcQ4YcA/6FLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:2b:e4:1e:5f:58:3d:96:7b:b7:cb:b3:9d:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Nov 11 14:00:52 2025 GMT
Not After : Nov 12 14:00:52 2025 GMT
Subject: CN=3513ffe5938911882a32a9ed9bc7a909d849ccea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1c:68:29:e4:89:cc:0c:fa:05:3b:a3:13:c8:
d5:a5:40:7f:12:b2:78:3a:98:c9:c8:9a:8a:74:ea:
55:f4:2f:b1:c5:c5:f0:46:6c:0d:54:e0:3a:43:65:
0f:73:f2:c3:5d:7e:f8:7c:9f:71:74:be:d1:ca:d3:
62:3d:5f:3b:c0:f5:35:09:c3:a0:2f:de:8a:cb:8d:
5d:68:21:3f:03:45:7e:d9:4c:45:68:26:9f:da:9c:
4a:84:a8:0b:07:94:2d:f0:c3:74:99:bd:07:57:4b:
21:b1:4a:af:30:da:ba:75:3c:a4:84:99:e7:52:f7:
91:3f:ec:40:87:8c:8c:ca:62:55:30:65:1b:57:25:
6a:9c:0f:bd:c2:77:08:a6:97:3a:ef:4c:c2:e8:f2:
02:99:cb:27:74:81:95:a3:57:c7:c6:28:41:9d:53:
99:22:ba:cc:40:a4:78:73:2e:28:59:3e:cf:c7:03:
4d:68:c5:af:fb:0c:6f:a6:e9:04:1c:3c:2f:58:4b:
5e:1d:19:2a:00:11:72:7c:d5:58:20:bc:89:74:f6:
cf:71:72:d1:63:72:58:c1:c9:15:79:49:58:c1:a4:
44:99:5b:9f:94:80:17:64:3a:36:c1:c6:05:0c:60:
d0:f2:ed:45:b8:47:f7:a6:16:89:23:2a:2c:88:de:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:FF:E5:93:89:11:88:2A:32:A9:ED:9B:C7:A9:09:D8:49:CC:EA
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9e:3e:a4:9a:f2:c4:bf:6d:db:1b:c4:ae:2d:d3:ff:da:42:
d3:e2:e8:a3:32:90:44:c1:87:35:bb:71:6b:6d:72:66:40:72:
18:7c:25:43:bd:b9:de:70:1e:b6:5a:3c:fc:5d:00:87:6a:cb:
fb:cb:1d:3a:97:85:17:9e:7b:7a:f0:62:5e:d1:38:24:9d:24:
6a:83:1a:56:6a:49:d2:8e:b1:0f:76:1c:86:19:0e:bf:be:32:
6c:5e:06:fd:38:5e:5f:81:a0:cc:88:6f:12:3c:e0:05:fc:50:
01:ac:68:9a:10:97:e4:e5:37:11:4a:5d:8c:86:f0:d4:c9:2d:
1a:10:77:72:ce:38:c8:e6:35:d7:a5:99:39:9b:8f:df:10:87:
74:45:00:83:0a:d6:14:49:58:c7:35:d8:ff:e2:68:46:93:b1:
38:cd:c7:45:51:a3:d5:fe:4f:f0:72:f9:90:f1:15:46:8a:8d:
e1:94:af:68:b3:1b:dc:c6:d1:10:5d:ac:00:d4:0a:fe:be:21:
67:1e:f8:39:f3:9f:3c:7e:cc:50:cf:2e:95:08:8b:2a:ce:78:
fa:04:f9:68:8a:ed:2e:d2:8f:ac:7f:64:ea:99:92:3e:e3:0f:
e1:c4:75:ca:b5:33:5b:c7:f0:c1:9d:3d:c2:3d:e6:9a:b8:84:
c2:d1:86:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:24 2025 by rpki-client