Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier: N2O6hYgw9EW8w0UTfleL8AXdlbBdFiYGvUowMS9EgWI=
Subject key identifier: 80:BF:2B:7D:03:21:EA:D3:F3:CD:D1:EC:28:91:D8:38:51:E4:92:77
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 019A7113525FE0EE75831DF1AE00A79CBB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: F3E0kox0yNLNp6GPi3ZmqfgQKTs.roa (hash: UneyfmP6aoU2v1WkHtcA23llsK6rkwb/p+IXrda/FUg=)
2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: 86p2BmBwBHiPWwKMI4ANQN9RCXn8+ZIDRFlSxwsxBlQ=)
3: jukzQpP3Hs9hT3M_u2swPOcw5vQ.roa (hash: /+E7Xpgo8ugKY85NqX64gyU8Uakmwa+zSPYJruYsfmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:52:5f:e0:ee:75:83:1d:f1:ae:00:a7:9c:bb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=80bf2b7d0321ead3f3cdd1ec2891d83851e49277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:70:13:26:0a:8c:0d:cf:48:4c:4f:d9:11:
0b:f2:26:7e:45:e4:c8:c3:cf:8f:b0:86:54:fe:5e:
15:df:2d:5a:bd:49:91:e4:2d:65:8d:14:2a:eb:a2:
71:5a:a4:1e:df:c9:c0:65:4f:a6:00:61:ef:d0:7c:
82:62:73:17:38:45:fa:d6:41:be:2c:88:29:a7:ae:
ef:62:ba:ee:2e:86:ea:90:0d:1d:92:45:c2:a3:3e:
18:d8:5e:47:3b:34:b6:54:f3:9e:d8:79:ad:87:5d:
7e:35:02:55:9c:6a:a9:41:30:13:d2:94:63:4e:e6:
5e:50:4b:1a:88:10:7b:2b:cd:4f:32:88:aa:08:e8:
cf:45:05:31:aa:1c:e9:00:ff:0c:02:6e:9e:23:f5:
b7:cc:87:02:a2:93:6e:e0:79:80:75:cf:fa:82:4c:
64:01:2e:9f:f7:1f:22:4f:ab:e6:c0:fe:20:ef:18:
ad:b5:81:e1:03:2e:d7:0d:8e:ba:b6:df:bf:96:d8:
e7:61:a0:13:9c:f9:da:6e:cf:8e:97:1d:29:91:22:
b5:da:86:54:d2:63:66:f0:34:7f:74:07:64:e0:c4:
29:b7:d0:b0:8d:57:ca:25:8f:1a:e5:71:37:4e:43:
c7:0c:91:a6:71:43:90:05:f9:37:0e:c1:2d:17:1c:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BF:2B:7D:03:21:EA:D3:F3:CD:D1:EC:28:91:D8:38:51:E4:92:77
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d5:da:6f:bb:0f:c5:83:e2:f3:c3:fa:72:16:bb:0e:e3:11:
1e:6b:d5:a7:cf:9f:8d:58:05:57:ff:a0:cf:fc:b7:07:cf:ab:
ee:31:9d:64:b3:22:50:6e:92:30:fe:69:f4:11:76:8f:4b:18:
71:41:07:18:14:2b:1b:d1:f1:74:a6:3b:75:72:6e:9b:82:71:
d8:72:4e:97:f7:12:11:ac:10:24:55:0f:1f:72:8b:b3:8f:b9:
17:a8:72:ee:fe:c1:cd:06:bf:4d:8a:30:c3:05:0a:9f:83:24:
5a:11:6b:e7:5d:95:32:d0:fb:f5:3c:e4:ad:9c:5f:82:f1:51:
13:21:b7:62:57:a4:99:6a:d7:66:5e:8f:2c:80:9c:82:f9:2b:
a2:47:3f:b7:6b:00:fc:0e:29:8e:0d:86:d7:87:15:e0:fe:20:
4c:87:bb:29:dc:f3:c5:ad:15:35:f7:0c:36:e3:54:c1:39:0b:
4a:a6:f1:2c:2d:88:3f:2e:2e:45:89:ea:fa:e9:b5:8b:aa:a4:
d8:41:92:61:ad:9e:f3:05:f7:3e:3d:0d:97:a2:ee:b8:15:b3:
35:f1:93:29:59:dd:64:2f:ac:ab:54:11:06:b8:e2:94:e7:12:
4c:72:05:03:13:bf:7a:66:14:d4:d7:f2:a5:2a:7c:f1:ca:c6:
8c:3a:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:48 2025 by rpki-client