Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
File: M6Udf_AtIfrBk65K7R8MOVbORRU.mft (raw, json)
Hash identifier: ermSJSX4hdvxQM2TcFwUnr3RIroulStXyfU03xcAjHA=
Subject key identifier: BC:1B:A8:65:9F:8C:75:2C:E5:26:15:C9:81:2D:BA:65:DD:D3:13:66
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Certificate issuer: /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial: 019A21403AD8CF236BAD695125FB7CA95609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 16:00:48 +0000
Manifest this update: Sun 26 Oct 2025 16:00:48 +0000
Manifest next update: Mon 27 Oct 2025 16:00:48 +0000
Files and hashes: 1: H2UoMEQTfVfxYbD6DFEWnWSxzqY.roa (hash: oJCJ/WCUnFQh0GodJuWi0NgjkG4tPt6myP/qxDdyB6E=)
2: M6Udf_AtIfrBk65K7R8MOVbORRU.crl (hash: LlMv0IG20kzUCvJutAq5A/y7bdViyNdEDGZ6y0LtAW4=)
3: OcsKAT2NPT0ZOF4-_8aYdFedfrQ.roa (hash: hRZG/6yJi8ntHxlEybLhU4Ft+uUUaPLYRTeNmVj2zdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:3a:d8:cf:23:6b:ad:69:51:25:fb:7c:a9:56:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Validity
Not Before: Oct 26 16:00:48 2025 GMT
Not After : Oct 27 16:00:48 2025 GMT
Subject: CN=bc1ba8659f8c752ce52615c9812dba65ddd31366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:a0:ce:5f:16:39:76:b0:b8:a7:31:64:5d:
1d:dd:f8:3c:0b:82:39:5e:d4:63:2c:83:03:79:17:
72:84:af:bb:7e:a9:47:d1:de:19:b0:7b:c3:7e:00:
b4:c0:15:72:73:ad:f0:47:cb:b3:49:cc:91:e3:d6:
7a:91:80:bf:72:ce:89:2a:52:9d:70:c6:fd:84:6d:
d4:f1:ab:9c:43:66:2c:85:7a:b8:d7:9a:fc:26:f4:
e0:04:bd:23:98:4b:5d:40:86:64:63:a7:9b:e8:d2:
71:ad:16:57:b1:88:16:91:cd:e6:c7:65:bf:d7:e9:
3c:24:75:c3:2d:49:13:6b:5f:20:0a:6b:4c:94:f2:
68:f6:78:d4:b0:40:ab:d5:c6:ae:3f:81:f5:3a:57:
d9:1e:ff:d7:57:aa:e3:90:25:df:21:31:c2:5d:51:
8a:82:63:75:22:7a:1f:b3:42:87:6f:1e:be:c9:66:
fd:23:20:ba:f2:66:0e:63:74:4f:e0:4d:6e:53:5f:
38:23:33:e7:47:a5:f6:28:12:90:74:1f:6c:0f:57:
6d:52:59:5e:68:2d:5b:17:cd:99:f7:2e:cb:7e:0e:
11:a8:1c:4e:62:34:0f:fa:c1:94:99:6d:f3:7b:28:
c3:eb:3d:32:f0:28:94:21:37:50:9a:f1:a1:41:9b:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:A8:65:9F:8C:75:2C:E5:26:15:C9:81:2D:BA:65:DD:D3:13:66
X509v3 Authority Key Identifier:
keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:23:17:83:ee:9b:e5:3e:02:28:16:88:cb:55:a8:99:a3:51:
54:4d:c2:85:bc:05:6e:9b:79:c9:1e:eb:3f:d7:26:48:bf:b7:
ef:eb:1b:51:02:f2:5d:ec:7a:bd:d6:25:37:38:9a:61:4a:aa:
69:fe:e3:4e:f8:d7:1e:46:2a:b4:0e:7c:54:73:43:33:17:fc:
05:87:e8:d0:70:a3:16:a3:23:f4:73:b5:66:e0:2c:1c:3d:d2:
b1:b3:24:86:1e:a5:db:46:dd:ab:eb:91:bf:d0:54:e6:ac:b3:
88:55:6d:e9:10:c1:fa:7e:ec:91:a4:4e:a7:d1:d1:dd:c6:04:
82:a3:fc:fb:38:82:1f:3e:4a:bb:eb:26:e6:42:d8:97:29:cd:
71:ba:52:c2:03:9d:d9:ab:e8:d4:1a:c1:b3:0d:e7:fa:53:7f:
6b:01:e0:f4:64:b0:71:98:ae:bb:7b:41:e6:b4:0b:94:77:30:
80:8c:3a:6f:88:f7:1f:b9:3a:14:4f:9d:84:40:20:ab:95:23:
ac:92:e9:09:13:e8:02:d3:27:98:5d:5b:63:ce:eb:7c:2f:e0:
2d:b8:67:ec:97:2b:92:62:62:8a:2b:9c:54:5a:b2:d2:a8:e8:
1f:52:00:d4:88:d2:c0:7c:ba:64:6a:77:af:d3:86:1c:5b:3b:
7b:7a:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:37:35 2025 by rpki-client