Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File: M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier: wkyZN68l1ZrYeQHmDseSM0mzfvRCqXyiAUuSRVNgUL0=
Subject key identifier: 46:DC:17:28:E4:CE:9D:3A:1D:92:F0:DC:79:8F:09:31:4A:22:31:63
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial: 019A4EF4AD85066E328A90CF0FE8E003A50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:49 +0000
Manifest this update: Tue 04 Nov 2025 13:00:49 +0000
Manifest next update: Wed 05 Nov 2025 13:00:49 +0000
Files and hashes: 1: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: RxpHFqXvDU/irqVlUjlKFzsoYRmb1iOOpTCUIgp165Y=)
2: ya6fLqZqW9YiSMq0_70IzMeFSTc.roa (hash: xJjaUPhHWHICcif0SwgfpErfhFmKOtPZjx5JM2GQnhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ad:85:06:6e:32:8a:90:cf:0f:e8:e0:03:a5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Validity
Not Before: Nov 4 13:00:49 2025 GMT
Not After : Nov 5 13:00:49 2025 GMT
Subject: CN=46dc1728e4ce9d3a1d92f0dc798f09314a223163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:b5:23:12:4b:f1:52:82:65:2b:97:1c:72:
f5:b3:00:0e:e2:1e:c7:26:51:24:ba:e7:4c:57:4d:
ce:47:66:c0:32:c7:8b:8c:b0:47:f1:3f:c1:f0:17:
aa:d3:8f:94:81:10:d7:31:70:f7:e2:f2:ba:d7:4e:
46:e6:40:34:af:22:d4:f0:56:a9:28:23:2f:ec:77:
51:d7:0a:fe:48:3b:ca:dd:19:11:01:18:ef:bc:80:
28:92:52:e4:7b:d9:80:e5:c3:17:17:70:cf:9e:4e:
25:8e:3b:ae:90:b0:95:61:5f:ef:32:09:1b:28:6e:
19:45:48:82:68:1b:47:b4:9f:5d:3b:54:1d:24:bb:
98:df:45:7a:2a:1f:8c:cf:08:b8:16:f2:07:08:35:
8c:07:c8:8f:80:da:f5:17:a7:96:34:f6:13:85:81:
40:9c:23:e7:3f:fd:55:bc:23:d6:1f:8a:ee:40:bd:
14:ca:02:f8:12:b1:ca:09:12:45:34:3a:5e:77:40:
f1:8b:04:ca:b1:64:7d:92:82:14:46:7b:f3:dd:ee:
92:df:d9:7b:74:a8:d1:96:2b:1d:af:fe:4a:6b:4a:
44:e8:e3:d9:16:21:15:69:e0:0f:03:07:91:65:e4:
e8:e3:38:dc:77:1f:bb:2c:87:ef:3e:bb:7e:30:3a:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:17:28:E4:CE:9D:3A:1D:92:F0:DC:79:8F:09:31:4A:22:31:63
X509v3 Authority Key Identifier:
keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c5:63:27:97:53:97:ab:3b:37:24:29:7b:36:cc:da:13:71:
5d:84:0b:40:a7:8f:f5:e2:72:e4:5d:96:96:b1:59:65:8b:c6:
c1:f2:df:b1:71:da:cc:25:bb:0c:9a:45:0e:09:22:7b:36:70:
75:95:aa:96:f8:6f:4d:24:ed:e2:ec:80:6e:96:12:50:28:c5:
0b:44:2a:be:4a:2d:c3:53:73:50:b4:b0:30:df:e8:2a:27:60:
68:25:e3:07:d2:b9:3c:81:52:48:d9:cc:e8:f6:21:26:b6:6e:
fb:0e:d5:d7:e2:7f:13:59:d7:98:d0:c0:29:43:49:64:c7:31:
f7:d8:0e:74:b5:81:6f:89:5e:b3:cd:cc:ac:c5:ad:f4:75:53:
36:b9:8a:8c:5f:a7:06:11:a3:31:c2:2c:d9:38:ff:27:3b:fb:
fa:02:51:ff:26:85:d7:04:45:bc:42:29:83:e4:2c:d1:78:7c:
3a:27:7e:f1:82:ee:40:f1:ac:b9:8b:38:c1:0d:79:b4:a1:1f:
36:ad:95:10:b1:b0:de:18:e6:90:19:28:37:19:4d:10:09:a6:
bb:cf:e3:ae:2e:69:38:c2:19:23:b3:f9:95:12:2f:81:e4:69:
82:bf:fa:7e:77:46:98:cc:f4:0c:b9:aa:a8:ae:22:65:bd:74:
eb:86:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:31:03 2025 by rpki-client