Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: ypWFJsxIBHaaJr/1K3KWug9e0jhksJ048tsiVHpXmeQ=
Subject key identifier: CB:3A:33:C7:3A:06:B7:4F:02:2A:73:85:16:7B:E1:50:23:3A:84:20
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 0199319179506D53C7B906581143EBF3DF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 0E35
Signing time: Wed 10 Sep 2025 03:00:41 +0000
Manifest this update: Wed 10 Sep 2025 03:00:41 +0000
Manifest next update: Thu 11 Sep 2025 03:00:41 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: 0hcx2BHwphWnhlfFzAGa66zZ5DnaLi8XF/DPiuNpPso=)
2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:79:50:6d:53:c7:b9:06:58:11:43:eb:f3:df:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Sep 10 03:00:41 2025 GMT
Not After : Sep 11 03:00:41 2025 GMT
Subject: CN=cb3a33c73a06b74f022a7385167be150233a8420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:bc:7d:b8:53:99:cd:87:44:7d:c4:ec:d3:
22:cf:94:b2:c6:7d:c4:d1:5c:a0:ae:d9:20:9b:c7:
73:32:49:5b:12:0a:34:a5:fb:bf:15:e7:ff:be:39:
e9:9e:96:29:23:c8:39:08:d5:9a:d4:7b:ee:1c:03:
75:e0:d6:f0:c9:08:bb:1a:70:40:c7:7e:d0:64:70:
89:3e:37:c9:dc:7e:b4:b1:97:b9:ec:d2:48:19:f4:
5e:b5:10:22:a7:b9:6e:ab:77:0f:e0:55:78:53:0c:
a7:33:c4:48:c5:87:1d:1d:fe:34:f7:46:f9:f4:3b:
25:e3:4b:cf:96:69:d3:8d:b3:cb:0c:66:05:00:2f:
b9:f2:5a:d0:46:88:ea:89:b1:a9:9b:dc:7a:f3:93:
24:04:4d:e9:bb:43:95:60:0d:aa:dc:a5:5d:59:c5:
74:c3:66:4b:7e:62:6d:f2:df:bd:e1:f2:3d:de:3f:
aa:e0:a2:27:fb:90:64:f4:e7:91:d8:b5:e4:43:6b:
36:41:06:33:b1:e3:a5:05:a2:57:c5:db:48:8d:c9:
1c:12:8c:60:62:61:1b:eb:0e:85:e8:ec:49:52:88:
1c:29:ed:99:d3:79:8e:e3:81:01:ff:4f:5d:2f:3f:
5c:8a:c1:ac:22:30:d4:bd:85:44:77:ad:f5:17:c1:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:33:C7:3A:06:B7:4F:02:2A:73:85:16:7B:E1:50:23:3A:84:20
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3f:d7:46:5b:2d:37:a8:8f:2f:99:bc:eb:40:38:80:9a:1e:
da:11:04:7d:97:96:a7:81:c1:93:0f:f9:62:8b:ef:b0:d4:cb:
f2:a9:66:02:97:2f:29:ff:82:8b:07:e9:5b:a6:36:51:f2:b7:
e8:ee:39:01:77:46:36:12:53:52:58:72:74:c5:e5:51:81:0e:
59:69:89:4f:03:36:72:ad:3c:6e:10:5f:f8:d5:03:a6:30:62:
25:c9:4c:3f:7d:0e:48:25:30:99:59:b6:e3:41:eb:e1:8f:ea:
1e:8e:1f:ed:1e:14:dd:d0:c0:4f:e7:61:d6:d5:f3:ce:9b:7d:
39:25:7a:d6:5a:a2:ab:49:68:2c:ee:54:18:b9:23:5e:b4:50:
0c:25:68:c0:a5:27:db:a4:5b:25:d2:5e:4c:7c:81:d8:b6:02:
96:27:a6:0b:70:6e:c2:77:cc:d4:63:48:07:1d:7e:cc:dc:ff:
ab:fb:ab:bd:d6:44:49:b0:d3:f1:b1:f1:a1:d9:bd:5e:5f:45:
e6:69:86:dc:26:84:fa:a2:03:b2:dc:23:e3:82:2b:af:07:a0:
f1:ca:a8:17:b1:49:67:98:25:f3:00:77:27:8d:d6:38:d3:e4:
a3:54:b2:6b:ff:c2:ba:bc:67:3c:8b:1a:f9:da:c7:29:52:c3:
99:e8:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:05:52 2025 by rpki-client