Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: e6fqMWSbUPj+b8q7doFRCqNW6OLrE4+bgqHm2fNcHgw=
Subject key identifier: 4D:9D:6F:1A:72:73:6F:FC:0E:E9:A7:1B:4E:27:B3:DE:A0:92:01:34
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 019A1F1A6907CD5AAC54CF127286ECE4EAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 0EB0
Signing time: Sun 26 Oct 2025 06:00:15 +0000
Manifest this update: Sun 26 Oct 2025 06:00:15 +0000
Manifest next update: Mon 27 Oct 2025 06:00:15 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: 7gHrZ+vj2PgJok0nRQWA1AoEZz9xaJuknLT+1xBZTkI=)
2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:69:07:cd:5a:ac:54:cf:12:72:86:ec:e4:ea:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Oct 26 06:00:15 2025 GMT
Not After : Oct 27 06:00:15 2025 GMT
Subject: CN=4d9d6f1a72736ffc0ee9a71b4e27b3dea0920134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:a8:b6:3f:28:96:c0:50:78:34:51:b6:d7:
4e:7b:4b:5e:78:72:5f:fe:61:9b:95:2f:58:e9:bb:
27:0d:1f:d4:24:31:29:45:11:fc:d8:62:a6:52:e3:
fd:59:fe:b9:a6:4a:2d:d4:5b:94:97:75:a8:90:ac:
d4:ba:5b:69:4e:4f:ad:a6:b1:cc:71:a1:1a:a8:7d:
18:30:3c:83:c6:02:ab:f2:e0:92:04:52:52:46:d6:
72:9d:6f:b4:e5:c3:77:67:f9:36:42:21:56:3d:26:
b5:a3:ae:0a:3e:5f:9c:8c:02:2d:83:8c:61:3f:71:
d7:66:eb:4c:bd:2b:c9:19:78:93:41:8c:81:08:79:
88:2e:76:00:da:fb:ed:88:8f:15:66:23:1f:ca:ee:
1f:e2:70:02:17:34:03:6e:27:82:45:96:b9:95:0f:
d0:a7:52:02:c4:ac:db:77:28:29:7b:9f:86:dd:fa:
95:60:7d:4b:2d:8c:6a:85:70:12:ab:b1:2a:dc:0c:
74:8b:f5:ec:0a:c7:52:5f:02:fc:96:b5:15:02:d1:
b4:9a:10:af:d5:b9:86:b2:3c:5b:97:ee:42:ab:a3:
82:23:3b:52:ce:0e:1d:31:77:5a:22:e6:27:fe:5b:
b4:f7:f9:74:2f:ff:eb:7a:b8:ab:09:ee:e8:d3:f0:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:6F:1A:72:73:6F:FC:0E:E9:A7:1B:4E:27:B3:DE:A0:92:01:34
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:44:c2:63:ad:c1:3f:14:f6:75:de:43:87:dd:5a:0d:0f:87:
98:73:f0:db:d5:f0:1d:1d:e1:34:ca:5f:86:ea:04:2f:c3:1f:
41:fb:f3:81:5f:09:49:da:3a:b8:31:3c:7e:ef:0d:05:d4:f3:
f7:20:36:51:53:5e:0f:b7:40:d5:c6:5d:ec:ab:25:e1:83:57:
16:58:9d:c4:61:29:ac:f0:0c:91:4f:06:7d:fa:b1:b7:9f:42:
1d:5e:11:5b:b6:d5:0e:4e:d9:a0:71:58:77:da:3a:c3:5c:d7:
e4:3b:af:52:51:c1:5e:f8:d8:cb:fb:33:4e:b1:a0:7d:88:c9:
1b:a0:1a:5a:f2:3a:7d:1a:7b:2b:6c:bf:d4:44:a4:d6:13:20:
14:91:31:28:b0:f3:f3:bd:8f:9c:b3:21:9b:51:69:7d:9a:38:
aa:f3:bf:c5:67:76:45:4b:c4:c9:8e:db:63:fc:d4:cb:37:1e:
f9:80:51:12:9e:a4:20:5f:ab:8e:cd:f7:9b:76:30:c0:f0:3d:
8f:68:8e:37:d3:3a:0a:d8:09:67:9c:0f:ec:1b:8a:ab:15:81:
3d:bf:fd:21:20:f9:dd:41:ed:81:12:68:3c:70:be:05:0d:d6:
03:1f:dd:1e:23:da:fc:5b:13:23:23:8a:ac:0b:3f:e1:df:34:
69:9e:e5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofGmkHzVqsVM8Scobs5OrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNmY2YWM4MmY2ZjI4ZTNkM2U1YjY2NDc1NTk0ZDgzMThl
NzVhYjMwHhcNMjUxMDI2MDYwMDE1WhcNMjUxMDI3MDYwMDE1WjAzMTEwLwYDVQQD
Eyg0ZDlkNmYxYTcyNzM2ZmZjMGVlOWE3MWI0ZTI3YjNkZWEwOTIwMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuKotj8olsBQeDRRttdOe0teeHJf
/mGblS9Y6bsnDR/UJDEpRRH82GKmUuP9Wf65pkot1FuUl3WokKzUultpTk+tprHM
caEaqH0YMDyDxgKr8uCSBFJSRtZynW+05cN3Z/k2QiFWPSa1o64KPl+cjAItg4xh
P3HXZutMvSvJGXiTQYyBCHmILnYA2vvtiI8VZiMfyu4f4nACFzQDbieCRZa5lQ/Q
p1ICxKzbdygpe5+G3fqVYH1LLYxqhXASq7Eq3Ax0i/XsCsdSXwL8lrUVAtG0mhCv
1bmGsjxbl+5Cq6OCIztSzg4dMXdaIuYn/lu09/l0L//rerirCe7o0/C5iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2dbxpyc2/8DumnG04ns96gkgE0MB8GA1UdIwQY
MBaAFDNvasgvbyjj0+W2ZHVZTYMY51qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAt
Y2NiMDE2YWUxNTEzLzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAtY2NiMDE2YWUxNTEz
LzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkTCY63B
PxT2dd5Dh91aDQ+HmHPw29XwHR3hNMpfhuoEL8MfQfvzgV8JSdo6uDE8fu8NBdTz
9yA2UVNeD7dA1cZd7Ksl4YNXFlidxGEprPAMkU8Gffqxt59CHV4RW7bVDk7ZoHFY
d9o6w1zX5DuvUlHBXvjYy/szTrGgfYjJG6AaWvI6fRp7K2y/1ESk1hMgFJExKLDz
872PnLMhm1FpfZo4qvO/xWd2RUvEyY7bY/zUyzce+YBREp6kIF+rjs33m3YwwPA9
j2iON9M6CtgJZ5wP7BuKqxWBPb/9ISD53UHtgRJoPHC+BQ3WAx/dHiPa/FsTIyOK
rAs/4d80aZ7lMg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 12:27:02 2025 by rpki-client