Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
File: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft (raw, json)
Hash identifier: EgO7lbWkaB/DtJwko4nFsJn1uJEa5fbcG4T1UwkgKbE=
Subject key identifier: 55:D6:56:7B:49:7B:7B:9F:46:B3:61:BD:9E:23:F4:43:A8:06:60:A3
Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Certificate issuer: /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Certificate serial: 019A71B90F0BDDF0D84F253A476936D2852D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: 2vNXSPhqGzkcVvfumaqzoQwZMt0.roa (hash: eL4GW0LkIf6gTx0hvW09DQfbQa9hDU0uyvNBC0IgCZw=)
2: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl (hash: U2G5Kqn8fx7Lh/GPbBqqOwhmipW6Yhi3q3id4IhmEGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0f:0b:dd:f0:d8:4f:25:3a:47:69:36:d2:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=55d6567b497b7b9f46b361bd9e23f443a80660a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:40:3e:83:75:5f:5e:27:03:b1:ef:38:a9:
1f:e8:61:c3:fd:e3:48:6d:d3:7e:2b:95:e6:91:5b:
cd:72:f7:c5:7b:43:57:df:4c:eb:16:55:c0:1e:f6:
85:51:b7:12:df:5a:40:0d:15:8b:85:86:cf:d0:0b:
9e:09:ba:54:b7:f7:f3:02:b3:f0:69:df:a1:d3:71:
7d:c4:1c:12:1b:24:a2:8d:ad:ff:f3:bd:81:ae:59:
74:28:3d:ee:0a:95:4f:1b:bb:7b:c3:8a:b3:44:f0:
2f:2b:0a:48:06:76:22:42:d3:66:1a:30:33:1b:a9:
ad:aa:fd:ef:f9:91:c8:a5:56:71:6c:ed:cc:05:1f:
e5:cd:61:db:5b:32:1f:b0:e9:71:e0:6e:97:5e:74:
03:8a:2e:14:09:c3:79:1d:bf:91:b1:01:27:1c:26:
82:98:0b:a0:27:22:e5:a1:38:fa:eb:4e:42:a0:60:
78:f5:83:ce:28:ad:9d:bf:06:33:43:7a:62:76:e1:
c8:41:5f:c4:7f:2e:1b:8e:01:fc:fa:58:6d:eb:d5:
9e:b7:d0:ff:f5:d0:cb:fd:80:67:5b:44:e6:b0:69:
fc:fa:cd:5b:ce:70:d9:e4:8b:0d:53:23:43:20:4f:
57:fa:b4:bf:c3:42:cd:2e:f2:b1:80:f1:4e:a8:1a:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:56:7B:49:7B:7B:9F:46:B3:61:BD:9E:23:F4:43:A8:06:60:A3
X509v3 Authority Key Identifier:
keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:71:a2:10:5d:6b:40:c8:5b:10:e1:24:b7:81:94:f4:8a:44:
15:c4:0a:51:47:af:a4:e6:95:70:76:47:56:b1:10:8d:d8:ea:
63:0c:6a:28:91:13:e7:b8:2a:95:af:27:63:af:ef:b1:87:f2:
ec:f9:90:e9:5e:d0:f4:58:b3:5d:c3:75:dc:23:1c:3c:c8:6e:
4e:4d:41:cb:98:a2:59:89:74:f3:35:ce:80:8b:2e:63:b6:8c:
fc:d2:3c:8e:3b:fd:a4:43:14:82:db:2e:de:8b:28:e7:a3:5c:
14:99:0f:dc:0d:2f:73:89:83:55:06:06:ed:56:2f:0a:0d:4f:
7f:89:53:e0:b3:f8:b9:4b:94:68:d9:25:85:26:2f:59:a3:d2:
c9:5f:bd:fe:2a:ea:14:a0:55:4e:43:49:5b:fa:e6:97:7c:d6:
a7:94:4d:d4:55:ad:0a:31:73:50:d2:2b:de:c0:8e:c4:c4:c9:
91:b1:f9:70:e2:cc:04:fc:01:d4:91:c4:2e:bf:41:e5:7d:d1:
66:2a:06:fc:98:6d:3f:1d:20:f0:02:a4:19:e6:b7:3b:7d:be:
bc:8f:ca:48:27:5e:18:b4:f2:da:8a:45:45:d2:4c:c3:00:d5:
30:7b:d8:fa:4e:6a:4e:ca:22:bd:db:be:3b:8c:6a:ca:ca:6e:
1c:fa:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:53 2025 by rpki-client