Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: 10r4H5AItFGQKuaBsKCZclPhnqsJ3X99wxEfoTxgk18=
Subject key identifier: EB:0E:35:49:CD:01:EB:B2:F6:A6:B0:EB:DE:F5:4C:48:4D:E8:68:DC
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 019A2C32C8403B7B138C638BEF9140BB2BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 19:01:56 +0000
Manifest this update: Tue 28 Oct 2025 19:01:56 +0000
Manifest next update: Wed 29 Oct 2025 19:01:56 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: yb+ratRgpPZ+OZIKJ9OuxDRBThumy4xXB2vtAAUuTEg=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:32:c8:40:3b:7b:13:8c:63:8b:ef:91:40:bb:2b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Oct 28 19:01:56 2025 GMT
Not After : Oct 29 19:01:56 2025 GMT
Subject: CN=eb0e3549cd01ebb2f6a6b0ebdef54c484de868dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:ea:ab:a7:6e:6a:11:23:9f:d6:c6:82:d9:
9b:b8:87:b8:d3:7c:5d:ad:ad:0b:44:3d:a5:9e:44:
80:8a:df:57:a5:17:b2:03:32:03:b0:e2:0a:ca:6e:
2a:ed:13:13:1f:46:23:50:be:20:45:85:2c:08:c0:
b1:ec:e5:d4:39:d7:51:94:46:4a:d7:2b:68:60:5a:
17:85:a4:c8:f8:92:0b:3b:99:32:83:d9:43:96:10:
da:a8:09:46:81:a5:b7:59:3d:07:23:52:ac:7e:84:
b9:1f:99:e5:66:f2:c9:eb:af:1c:d7:2f:58:be:3f:
da:26:78:1f:18:e6:0c:3b:77:14:b5:be:08:83:b2:
87:a8:bd:ab:af:33:c6:94:a2:53:ca:7c:f3:27:55:
61:32:7f:7c:ef:b9:b6:fe:60:ff:31:cd:80:6b:a3:
79:2f:10:e2:af:52:79:3c:95:43:70:1d:8f:0d:a4:
62:31:31:ba:50:b4:7d:ba:e8:e1:6c:5b:a5:3f:a2:
cb:af:55:ab:b7:c9:41:f4:eb:b3:c2:95:1a:7c:7b:
3d:d3:aa:1a:68:b2:b6:00:f5:a7:f4:03:87:20:18:
07:a3:ff:f1:47:cc:d5:ee:fe:ad:8e:6c:88:9a:03:
53:91:d5:37:5c:97:4e:8f:1e:6a:97:59:e4:f2:95:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:35:49:CD:01:EB:B2:F6:A6:B0:EB:DE:F5:4C:48:4D:E8:68:DC
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c5:9b:65:45:f3:9b:1e:59:8b:6e:40:01:18:b2:dc:b2:95:
62:c3:12:f8:e2:e7:61:d4:9c:30:fe:c2:e7:cb:ec:63:bb:3d:
ff:39:96:90:61:b4:9f:91:cd:99:f1:1c:84:db:1c:b9:75:c9:
e3:ac:f8:b5:de:38:a0:20:86:d6:d1:11:75:91:e8:11:c7:5b:
59:81:a3:e7:89:26:c0:61:a0:c5:15:07:ae:d1:c9:b4:b7:db:
7e:83:e7:fa:2e:f3:ad:93:e8:c3:38:53:ed:de:00:70:cd:77:
57:01:61:09:71:65:cd:13:7c:7b:0d:9a:37:56:81:11:85:c8:
0e:4e:31:d1:0f:0b:f9:5d:af:d0:60:96:bd:6d:40:8a:3c:d0:
c6:cd:68:ba:30:31:62:3b:3b:6b:ff:d8:d0:be:a0:01:7b:49:
f0:e2:ce:db:c6:a0:b1:28:3f:93:af:88:c3:e3:e5:d5:e0:72:
93:ab:04:2f:4f:53:96:50:6a:33:78:6e:35:d1:ac:ed:3a:03:
b7:e6:3f:8c:c2:32:15:4d:8e:ca:54:df:f7:03:04:a0:f9:f9:
eb:e8:1f:2d:15:f2:3c:34:95:17:4b:06:16:b6:18:b8:77:87:
04:8d:31:6d:10:1d:84:b6:1a:71:b9:c5:b3:de:88:40:9c:e3:
c4:ff:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:08:45 2025 by rpki-client