Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: ID5mA/9PsNswCpOsuUgVHjS255E+vU5UNyr6IDU96gU=
Subject key identifier: F0:11:CA:8C:C7:01:B1:41:B8:25:73:FF:DF:E3:7A:CB:FD:AD:83:19
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019A1F1B1FA79F784F3AAF361D9891592F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 06:01:02 +0000
Manifest this update: Sun 26 Oct 2025 06:01:02 +0000
Manifest next update: Mon 27 Oct 2025 06:01:02 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: sgBMyjvfDrDvVQu0Ikfljhs4KmUpc0nfwVo7QIMDX5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1b:1f:a7:9f:78:4f:3a:af:36:1d:98:91:59:2f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Oct 26 06:01:02 2025 GMT
Not After : Oct 27 06:01:02 2025 GMT
Subject: CN=f011ca8cc701b141b82573ffdfe37acbfdad8319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:29:81:bc:8b:7f:5d:0e:d5:70:d9:63:24:
cc:94:2e:85:d7:03:67:e3:2a:e9:4f:04:d4:70:02:
f3:ed:50:32:aa:a7:5c:23:b6:3d:11:81:57:ee:11:
93:b1:46:f9:34:87:15:44:24:b6:d1:61:e8:f8:52:
b8:de:ed:92:30:93:70:2a:c5:0c:38:49:29:49:77:
d5:47:98:07:f1:d1:61:b2:ba:62:6d:b7:b2:b8:36:
79:fc:42:f9:93:df:2d:7f:ed:93:a9:1f:da:e6:f4:
e0:f6:ec:5a:27:08:7b:a5:dd:cd:97:e2:9e:5f:4b:
d1:d9:58:03:cb:13:4c:d8:87:52:41:11:80:26:08:
e8:38:9a:78:79:81:ce:6d:1a:01:50:74:92:e7:91:
3f:e6:d6:61:dd:26:98:b5:b3:95:28:17:18:1d:88:
55:84:12:76:61:40:45:b3:db:47:6a:04:97:ab:7c:
b3:f8:fa:15:74:9b:f1:61:27:4a:ea:2c:ee:d4:c4:
c6:85:ac:6c:26:f7:43:56:37:81:8e:b7:82:5b:bc:
4e:a4:6c:83:83:4c:09:40:43:ef:36:04:ac:1a:f1:
da:89:e2:45:4f:7f:de:ce:1b:d0:31:14:29:a4:f5:
60:3b:94:9c:c7:6c:70:e5:95:d3:49:42:13:3d:c8:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:11:CA:8C:C7:01:B1:41:B8:25:73:FF:DF:E3:7A:CB:FD:AD:83:19
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a3:26:21:e3:30:07:dc:3c:3c:1d:41:c0:6e:ef:13:5b:7c:
86:4b:50:01:d9:b5:9e:8b:a5:81:cc:c1:b0:21:70:c1:98:1b:
83:a1:7d:ed:9a:b1:56:4d:a9:70:20:a7:45:93:f2:fd:d0:ed:
b0:3e:f4:42:0f:99:cf:6b:31:2e:0e:9f:d1:13:c0:62:d5:d1:
8b:78:0e:fe:ba:a6:f3:70:ba:85:5c:fa:69:20:0d:87:39:e7:
05:11:f6:a7:c9:9e:92:c8:5f:78:a3:dc:02:30:7a:9c:25:0b:
7a:9b:c6:f0:55:93:72:b8:1a:5a:d8:13:63:f6:9d:d5:11:e9:
3b:3d:ea:bf:22:39:8d:72:01:29:e8:48:a3:f5:84:56:2e:ae:
b0:54:f9:6f:54:13:be:88:38:23:b2:0e:0b:24:b3:b9:cf:cc:
c8:ae:7a:fd:91:76:72:72:d8:29:ef:b4:97:c0:d1:0d:cc:88:
4e:f8:43:2c:58:e6:74:05:53:89:fc:c1:28:94:66:56:ba:e1:
56:87:75:b4:9c:43:c2:03:c0:aa:c6:08:8e:30:42:51:ba:f0:
b3:48:d2:f2:20:6f:0b:33:b8:13:c4:78:a4:1f:ea:0b:fc:ba:
81:15:49:09:b4:f2:02:f3:f7:10:c8:a9:66:dd:4a:73:3d:69:
31:1a:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:34:21 2025 by rpki-client