Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: h2UmJBdvz/h6Xj20csrXS8W/6V09P7e5zuP5v33qW8g=
Subject key identifier: 7D:D3:4C:FA:E6:B7:2C:D9:46:FB:E1:F9:BF:E5:E6:DE:95:EC:56:3E
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 019A228A35CF4A847A76E20E769854BC77FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 071B
Signing time: Sun 26 Oct 2025 22:01:14 +0000
Manifest this update: Sun 26 Oct 2025 22:01:14 +0000
Manifest next update: Mon 27 Oct 2025 22:01:14 +0000
Files and hashes: 1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: IxvEQEuqIkqwVfQkUKG3TrYakXhGx3HQ6kqRRvtIHZE=)
2: ObpPyrV6nY3VTY_MJsA9gywrfek.roa (hash: 07jwwjcg4kll9zheibcZqtF5uLcKvWgF1fQLeGthDhs=)
3: rMVByUHiw-CJF8yDvID9Hv00TsU.roa (hash: W4FOiMzNAns/15Ks3q0b2X4cmgwlITeZp0cOOWz/tew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:35:cf:4a:84:7a:76:e2:0e:76:98:54:bc:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Oct 26 22:01:14 2025 GMT
Not After : Oct 27 22:01:14 2025 GMT
Subject: CN=7dd34cfae6b72cd946fbe1f9bfe5e6de95ec563e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:47:76:f3:5b:eb:3c:c8:dd:98:eb:80:7d:
b4:dd:13:ee:4e:be:e0:50:19:e8:0a:aa:da:0f:6d:
10:d9:33:bb:e1:ae:d6:85:a2:01:66:9d:07:1e:33:
55:0f:f9:3a:a1:8f:29:6f:7f:0d:ec:23:65:31:17:
55:8c:1b:c0:0d:35:79:f1:7e:e8:b3:95:26:12:6b:
27:f0:80:ce:ce:b9:34:9d:40:c7:9f:2a:db:53:60:
40:65:dd:2a:85:dc:67:83:d1:09:12:dc:ef:77:e0:
1e:f1:0b:a0:38:94:93:f5:c3:82:83:65:37:3e:b8:
5d:cf:c8:dc:35:cd:1f:f6:68:bb:a0:f2:3d:10:10:
c1:09:80:61:73:b4:16:f7:26:2b:0e:33:8d:f4:19:
cc:cb:e6:39:a1:56:eb:2f:56:87:0a:c7:12:9e:f4:
35:ec:70:e1:49:47:b6:9b:10:12:f7:77:fe:d8:ec:
f3:53:c4:93:3e:2a:ad:28:06:0f:6e:ef:15:31:ec:
01:57:94:f1:0c:15:f9:dc:a0:2f:af:df:21:1d:cf:
4c:4c:70:bb:f4:6d:17:e6:bd:f2:a2:94:09:1b:7b:
4f:bf:19:50:28:84:e1:98:e7:14:b6:f7:5b:37:23:
23:20:90:fd:de:c0:0f:ab:a6:8c:76:c6:cd:f9:aa:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D3:4C:FA:E6:B7:2C:D9:46:FB:E1:F9:BF:E5:E6:DE:95:EC:56:3E
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:df:ef:a2:1f:95:91:cf:66:c6:4b:8a:a0:3d:a2:b9:b6:e7:
f3:9f:e1:71:29:60:32:c6:d5:9a:69:03:5e:48:61:1c:de:b7:
1a:76:a4:f9:b0:12:63:e9:2d:45:a7:e6:42:ab:02:43:cc:44:
ff:2b:ba:6c:04:4f:6b:81:e7:78:0a:c8:14:c8:6d:c9:31:8d:
92:3d:37:80:c3:65:cb:89:10:69:27:f5:d7:24:84:34:b8:2c:
26:f9:f7:38:e9:3f:c8:92:d3:1e:e7:c1:78:e0:8f:3b:3d:bd:
19:03:87:d6:28:c5:4a:20:ae:8e:59:db:9b:bd:ff:0d:27:2f:
62:7d:8a:bf:a8:a0:c4:30:51:e4:03:83:ab:63:e7:0b:84:61:
c5:a7:56:15:e7:29:cb:cc:4e:53:ca:6a:10:1e:a9:a8:1e:d9:
28:91:b5:a5:6a:c1:3c:5e:a2:b2:8c:d4:7f:b2:57:07:52:c4:
6c:c3:b5:80:90:42:ab:5b:d5:c6:ef:9c:73:5e:d5:65:18:f7:
3d:c7:e0:b7:71:3f:40:d9:74:37:b8:39:46:21:a1:1b:9f:47:
df:5f:ac:fa:0d:08:0e:7b:c1:cd:c9:9c:fb:e0:e4:b2:86:f3:
02:20:5a:7b:2e:70:b3:7e:7e:14:73:6a:8f:19:a3:f2:54:e2:
4d:2a:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 02:58:16 2025 by rpki-client