
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File: M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier: Wu7ZPa2A8gEdI+70nerQptna2OgeXAZ8PNO0H70zA3A=
Subject key identifier: BE:B2:DF:21:46:9A:73:EE:07:58:7B:ED:35:C4:22:40:33:50:94:58
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 019A0D4B05A158C31CD026723946876AAE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number: 0417
Signing time: Wed 22 Oct 2025 19:00:11 +0000
Manifest this update: Wed 22 Oct 2025 19:00:11 +0000
Manifest next update: Thu 23 Oct 2025 19:00:11 +0000
Files and hashes: 1: 1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa (hash: db4gyVqkpYj83v8Ta45ebJbS66bcnTwGceaLvdpuYxc=)
2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=)
3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: q1FcQiBw8LBeT8Zs+lpNbwewDXsHvWlAEfYbsJwcGxs=)
4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=)
5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=)
6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 16:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:05:a1:58:c3:1c:d0:26:72:39:46:87:6a:ae:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Oct 22 19:00:11 2025 GMT
Not After : Oct 23 19:00:11 2025 GMT
Subject: CN=beb2df21469a73ee07587bed35c4224033509458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:e8:79:ca:0c:33:75:84:4e:1a:78:6b:11:
f6:ce:ed:92:98:66:35:a8:7a:6f:0a:3c:3b:fa:3b:
fe:08:f2:64:35:ce:56:7a:3a:fc:9e:d2:42:f0:6e:
98:2b:e4:7a:c1:50:f3:db:68:8a:b3:95:d0:96:6d:
9e:5d:c3:be:f8:45:73:e0:13:ba:53:93:5f:30:c0:
10:09:c2:ff:5e:de:cc:23:85:09:2b:6e:e2:eb:54:
66:bf:04:f3:9a:ea:07:6e:69:9b:27:46:b9:bd:9e:
dc:b8:9b:48:0b:a1:52:1b:43:bd:8e:c7:75:6f:a9:
58:5e:39:22:28:0e:01:fb:c3:0a:7b:21:30:9a:42:
36:38:20:8c:28:c7:54:a5:df:29:86:23:51:32:38:
47:fd:24:be:d8:57:e8:c5:b7:7f:c5:e7:09:af:60:
7f:65:31:bf:86:c9:27:02:ac:69:8c:9f:f0:f7:55:
08:40:91:38:0c:c2:77:35:4c:81:f0:67:cc:f0:15:
03:bd:c6:41:96:c7:cd:20:e3:d3:69:56:50:d8:40:
75:d8:e8:83:46:83:b1:c6:b7:7f:1b:5f:3c:4f:d5:
67:6a:a3:0d:c5:63:df:a1:25:b8:da:5a:9e:77:52:
ab:51:1e:6e:53:75:70:f1:a3:eb:82:de:5e:b8:18:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:DF:21:46:9A:73:EE:07:58:7B:ED:35:C4:22:40:33:50:94:58
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:02:e9:22:16:cc:b3:74:73:bb:ab:48:84:3c:42:63:c7:e1:
4c:9f:74:45:62:ad:3d:62:9d:db:76:a7:70:d8:9a:f8:df:b4:
b5:68:26:5a:4d:cb:02:bf:e9:3e:10:ae:29:e1:0f:84:29:d1:
84:95:64:80:18:c6:4c:ae:82:c5:ee:72:60:ed:33:b0:9d:6f:
24:c4:1c:a3:4f:79:89:4e:a9:98:a6:1d:20:0b:f8:4c:9b:73:
53:70:c3:2b:10:24:5b:a1:ab:56:78:01:fa:34:de:2b:f7:b9:
a8:a8:43:6a:d2:fd:d0:4c:c2:9d:0f:8c:c5:f6:73:cb:93:d4:
41:2a:f2:f4:a6:e3:69:f7:2f:fe:a8:5b:db:66:42:02:bd:df:
79:c1:51:f4:17:af:5e:61:d0:61:d9:09:dc:e7:8b:bc:7b:0f:
fe:1a:d1:44:5f:34:03:cb:fc:4b:fa:ea:5f:bf:fd:f5:51:2f:
b7:fd:79:c2:89:39:7c:6d:eb:9e:e3:b8:91:e1:6a:57:3d:0c:
98:82:94:bf:63:eb:9b:43:91:6c:a6:45:36:19:19:01:11:8f:
d2:d0:d6:86:d8:51:37:e8:9e:e1:bc:a7:c1:8b:75:17:33:f4:
a7:67:fa:03:bb:19:5c:24:72:02:9d:4c:6a:eb:90:96:9f:93:
6e:81:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 00:43:51 2025 by rpki-client