Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: FxNGnmorEMcyGZ1BlK9GKsXPBHe0OPabrBPv7YOwixI=
Subject key identifier: 86:66:58:CF:76:B4:C0:7C:96:9A:31:B4:35:7E:EB:AA:46:78:39:BC
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019A71EEDFF84B73677739F886A3FA236CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 1685
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: lC3wDDDWkn/6Ea8ty1zFs1EL+FQJxC9t4EHnp3cvUJY=)
2: sK3XQwXTL-mqzvI7V9STOh1mdbY.roa (hash: VWu2Ff9vBiTjacxsepFTzMs84GfrYTJ/rH9rluBzGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:df:f8:4b:73:67:77:39:f8:86:a3:fa:23:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=866658cf76b4c07c969a31b4357eebaa467839bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:33:a7:7d:0e:5f:de:4f:02:94:6b:1a:51:
b5:85:06:07:02:57:65:61:9b:a9:55:69:b0:9f:40:
d0:9b:5d:99:22:f2:ea:da:12:ef:37:9c:ec:b7:1c:
a2:b0:2a:cc:00:db:02:46:34:7a:bf:ec:eb:05:7d:
2c:5c:ea:51:45:b8:d9:81:b3:3d:0d:5e:d9:93:b6:
c4:e5:fa:b6:12:26:2f:6a:4d:bb:2b:3e:59:96:89:
c9:38:d2:0b:ff:81:9c:7e:2b:e3:ab:66:5f:bd:b2:
20:54:b2:10:08:cf:2c:dd:cf:ea:73:40:13:58:82:
6d:07:66:30:a1:1d:00:68:ab:31:49:b7:8a:cb:99:
c4:51:5c:2a:63:86:9b:78:b5:0c:ff:ce:02:8d:5f:
43:69:ab:fa:69:51:23:bf:75:bb:db:42:6f:e8:24:
1d:f0:db:03:fe:98:67:90:2d:b4:d6:8f:1f:dc:4a:
3d:7c:0c:b9:d0:44:f7:4c:d9:90:82:b3:da:1e:b8:
f1:e3:c3:dc:5f:41:f1:e6:ca:68:76:1c:5c:d3:8e:
63:7d:d6:82:c9:80:0e:ce:f5:df:93:b2:30:bf:88:
a1:1a:26:7b:95:18:4f:0c:77:e3:e1:bc:36:d3:4a:
f5:5d:f5:a9:13:b3:c3:92:b6:c1:db:8a:a7:bd:8b:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:58:CF:76:B4:C0:7C:96:9A:31:B4:35:7E:EB:AA:46:78:39:BC
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b9:06:c5:bf:02:2a:c7:1a:e5:c6:5d:dc:29:a5:90:d3:05:
69:d2:86:fe:79:34:84:2e:27:f4:df:00:19:f0:f3:7c:05:7a:
75:92:20:3e:fa:38:7a:3e:6b:1e:5b:47:51:ca:f1:9b:78:8d:
60:b6:1b:07:b7:0c:25:7d:68:db:a8:33:c4:0d:32:d2:6e:ae:
db:e0:da:86:14:f8:5d:f0:8d:38:b6:e7:8b:93:93:3a:ee:62:
2c:5e:3f:28:cd:8b:47:f0:85:ad:c4:1d:a9:30:ad:23:34:54:
b9:7e:b7:7b:0b:5e:18:76:68:6e:44:07:b4:ac:e5:78:92:be:
b8:f4:43:e0:f8:6d:e4:5b:f6:2d:87:43:fa:54:59:35:f3:9b:
4a:5f:fe:f4:00:1e:49:96:e6:20:31:54:e2:c0:2a:10:86:ac:
d3:06:ad:88:cc:53:01:27:ce:4d:ba:72:09:ed:84:d3:6c:00:
42:3c:ef:c5:1c:ee:5b:d3:41:6b:4b:8e:2f:0c:43:07:d7:78:
8d:2a:ab:27:99:d7:2f:ad:3e:23:9d:7f:ce:13:43:34:20:1b:
ee:29:24:e1:81:c4:7c:6f:7c:12:9d:bf:e1:0f:84:17:6f:8a:
67:fa:e6:73:62:8f:d7:b9:40:43:ff:e2:c5:13:28:e0:69:9a:
7f:a2:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:47 2025 by rpki-client