Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: UtQF50BK3sfk6twBTYvE/iYbfKyQXqiLxOF/HLl+Za0=
Subject key identifier: E9:A7:5E:98:A1:50:1D:71:D5:A1:65:5A:C9:E6:47:CD:D1:A0:5E:47
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 019A73380329141A1E138BBE5E42CDE080E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0E7D
Signing time: Tue 11 Nov 2025 14:00:41 +0000
Manifest this update: Tue 11 Nov 2025 14:00:41 +0000
Manifest next update: Wed 12 Nov 2025 14:00:41 +0000
Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: JkjQBMC16SNl4bnmi6SC7FOIJ2u9ti2O2qzxSXYqZWc=)
2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:03:29:14:1a:1e:13:8b:be:5e:42:cd:e0:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Nov 11 14:00:41 2025 GMT
Not After : Nov 12 14:00:41 2025 GMT
Subject: CN=e9a75e98a1501d71d5a1655ac9e647cdd1a05e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9a:4c:98:d3:49:42:63:4b:99:8c:b1:cf:80:
b1:c4:b5:d8:a7:1c:92:62:66:3b:41:2e:9e:6e:70:
9e:24:49:d2:77:8e:23:c1:e6:88:5d:71:5f:17:57:
d9:8a:b4:bc:e3:c3:eb:b3:73:c8:2a:a3:ad:7f:d5:
54:73:4e:cd:3c:58:46:5a:26:51:ec:89:60:3f:c5:
28:37:58:71:fe:98:84:cd:dd:7f:68:7b:96:48:61:
ea:3e:30:a3:bb:e8:c3:26:bc:f7:5d:18:18:b4:05:
08:54:c2:6d:d5:3c:ef:19:92:95:f6:d5:17:ee:e6:
83:fd:5e:e2:fe:11:2c:1e:75:e2:e6:ce:35:58:b8:
4b:89:7f:a5:18:47:8c:49:4e:83:5f:83:98:2d:f7:
23:f3:7d:89:12:84:8a:ea:bc:4d:d4:4b:bc:d8:ea:
b1:3b:f1:ff:44:80:6d:30:24:85:99:bd:84:63:7f:
b5:4c:ca:05:c2:5c:30:41:f7:31:ba:cf:ed:ce:0b:
95:1e:cb:bf:c9:5e:95:2d:74:03:80:a9:52:0a:c3:
8b:f9:b7:3e:25:2a:62:e1:e1:38:b2:98:08:0c:fd:
bf:98:78:38:b1:b9:d6:5b:60:da:ea:98:3c:2a:c3:
dd:f7:5c:8d:7c:da:ff:d7:91:bb:55:81:7d:24:59:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:5E:98:A1:50:1D:71:D5:A1:65:5A:C9:E6:47:CD:D1:A0:5E:47
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:83:29:ed:47:12:19:d2:dc:73:b2:55:90:21:34:54:4f:08:
f0:27:0f:2f:68:84:86:51:52:03:d2:d7:65:a9:0f:ab:9e:fa:
9a:1d:c3:c5:74:20:4e:6c:c5:80:43:83:25:69:42:1f:3e:fe:
82:1b:86:9e:a2:39:2d:5a:d5:8e:fe:57:5d:19:0b:df:09:bf:
39:f4:f5:1b:af:c2:69:d3:b1:5c:d9:e5:f6:6e:5f:f3:17:4b:
03:ae:04:fc:f6:01:e3:e6:b0:af:33:9c:9e:3a:bd:ba:ab:74:
8c:0b:1e:e2:39:1e:20:f7:50:3b:bd:b4:c0:9a:4c:bf:8a:b0:
7d:b6:de:6d:dd:e9:22:06:5c:65:94:5b:55:d4:eb:b2:ea:cb:
7c:8b:17:91:77:ae:2d:8d:6d:44:2d:f2:93:a6:82:91:77:61:
d1:6e:48:bd:73:1d:dd:f6:61:f6:7e:25:f1:1c:e0:d2:2f:c5:
ac:2b:e5:cb:a8:ea:b9:ba:3d:b0:bf:5e:a4:54:f9:53:a3:33:
79:e3:d1:c3:82:12:1a:15:b6:9c:39:d3:77:91:57:08:54:f4:
49:e3:4f:fb:73:64:8e:03:4c:45:82:99:f5:ea:b3:27:ed:63:
f6:f1:0a:60:12:97:c4:55:c5:34:56:84:4a:3b:04:90:c5:69:
31:f9:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:13 2025 by rpki-client