Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: Q/7p2dgfVmlO3rD5b6xBvTkEP8A77B4uERU2qP80K5A=
Subject key identifier: DD:A6:6E:07:57:3C:38:18:84:CD:13:AD:FB:75:DF:F2:92:CA:53:B3
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 019A7293EE242354DFAF2A5616D04FD26CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0E16
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: pXx/7SGzylDnolHdcXhxmkYWdnXxRn8Ibyc4Ly5ovHg=)
2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ee:24:23:54:df:af:2a:56:16:d0:4f:d2:6c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=dda66e07573c381884cd13adfb75dff292ca53b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:31:fb:1a:c1:54:43:4e:36:b7:4c:77:11:
ae:55:d4:a3:59:b0:f7:f2:0c:c0:b8:2e:bd:6e:09:
48:26:0c:c5:da:2b:3f:c2:21:f2:ba:dd:79:ac:f8:
e7:77:80:0f:e6:a7:75:d4:e2:c3:ff:e6:f8:1c:ec:
fe:dd:95:ff:c4:3a:cf:72:3f:76:ae:bf:6e:00:2b:
cd:b0:ed:ff:61:9e:a5:cf:9d:70:10:e6:85:45:29:
d3:da:8b:4d:a3:ca:3a:66:f9:26:91:f9:8d:72:f5:
3d:11:c1:38:f4:27:ad:97:6d:36:b3:f1:1a:5f:76:
72:5c:e0:53:ea:2a:88:c5:b5:e4:be:a1:10:b1:97:
ce:79:0d:e9:73:29:26:da:7e:d1:8c:9a:63:8f:43:
b9:0f:d6:5c:4f:89:af:8f:68:ca:a9:1e:ec:6f:80:
b4:e1:73:88:25:be:ad:00:a4:d8:83:f2:e1:e4:b4:
95:81:f9:cb:b2:3a:7e:c4:2e:b0:40:39:31:ba:cd:
5c:d2:9c:51:20:26:5b:4a:88:24:00:a7:4d:2d:70:
15:db:5b:09:f8:dc:c1:66:bf:ad:45:a8:da:d1:48:
05:3a:a0:ac:b9:7a:c7:0c:e2:8a:fc:0e:58:b5:23:
31:e2:96:29:a7:54:e4:66:3d:31:0e:a3:3e:56:2c:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A6:6E:07:57:3C:38:18:84:CD:13:AD:FB:75:DF:F2:92:CA:53:B3
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:14:7a:f7:a7:b2:1b:de:08:e5:90:1e:c6:ee:e4:77:07:1f:
27:4a:79:0d:58:82:05:7d:42:b7:12:7f:49:88:34:20:39:ad:
70:6c:5d:9e:07:f4:32:81:48:2c:a5:2a:b4:d0:ba:28:a0:8f:
1b:8d:24:83:c1:79:99:3a:33:90:6f:04:45:cd:80:24:a7:60:
3b:5c:39:36:ca:7c:77:bc:ec:94:5a:bb:1b:9b:c7:a5:65:03:
a4:f5:45:e4:da:a9:77:8f:a0:f5:3c:8f:46:d0:4d:c7:e5:f1:
cb:09:4d:08:7f:59:19:4c:74:5b:73:82:80:32:79:cb:b0:5a:
f2:f4:cb:38:cf:d9:e2:f3:86:11:59:03:da:ba:83:9b:c1:83:
ef:1c:50:f3:71:6f:1f:4c:7a:f9:49:76:9c:24:4c:c9:05:af:
f5:51:c9:4b:9f:e9:83:4e:36:e8:4a:7f:3e:ca:04:8f:45:1b:
96:29:a8:20:ef:ad:cf:65:c6:6d:3c:d4:8a:7e:27:53:c2:85:
d1:64:6a:74:4e:7a:34:0a:0f:76:ea:77:37:50:ba:eb:c3:d1:
7b:73:67:7a:61:58:87:7f:7f:f5:2f:a6:e1:a6:4f:08:fc:7f:
e0:4d:33:13:1e:a6:19:9f:31:3a:38:67:c1:44:b6:c2:d0:8b:
19:41:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:11 2025 by rpki-client