Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: BH6rsHv++YXhoe2E8ZMce9BaeQHyav/f3YqwgntdLUE=
Subject key identifier: 81:E8:AA:8D:3E:2D:2D:9B:5D:EB:C8:E9:3B:9D:A9:51:D5:E1:E0:6D
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 0199228C5A8B7FBCDDAD7494729E83CA655E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 1045
Signing time: Sun 07 Sep 2025 05:00:47 +0000
Manifest this update: Sun 07 Sep 2025 05:00:47 +0000
Manifest next update: Mon 08 Sep 2025 05:00:47 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: kZi/8hd6rEiOTkSEh//E+iHeiUh9vXS8LZvq4Ts4ej4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5a:8b:7f:bc:dd:ad:74:94:72:9e:83:ca:65:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Sep 7 05:00:47 2025 GMT
Not After : Sep 8 05:00:47 2025 GMT
Subject: CN=81e8aa8d3e2d2d9b5debc8e93b9da951d5e1e06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:e1:c2:04:7d:7a:57:99:2d:25:be:c5:4f:
13:de:83:d0:9e:97:e7:69:21:0f:3a:79:b7:d7:ff:
c9:6a:2c:bc:8d:a2:cf:94:3b:10:bc:69:14:93:85:
58:f6:07:56:4e:df:67:e0:fc:dc:42:54:07:39:1a:
28:06:15:bc:0d:96:34:c3:56:c1:50:73:f6:5a:f0:
2f:ba:2e:97:c0:79:c6:62:1f:5f:ca:96:1f:b3:64:
1e:d8:5a:cb:2b:7e:db:14:13:cc:c7:60:b0:32:f4:
90:17:77:b5:ce:01:e8:07:e7:4b:bf:3f:61:0c:77:
0c:89:cf:08:a5:9f:76:65:cc:9a:40:f0:11:c5:29:
34:06:9d:51:ab:a6:71:aa:bd:40:41:6f:14:c2:0b:
e0:79:71:7f:57:27:ff:e5:db:79:19:34:e2:31:bc:
8d:68:a7:c3:13:b1:12:19:c5:0c:76:99:de:b8:cc:
5c:38:3d:e7:b8:2b:a4:6e:c0:c7:0a:5a:37:f5:b8:
35:7a:13:bc:ee:2b:f4:6f:80:62:64:24:51:2f:3b:
dc:03:c3:ff:a9:c0:a2:f0:24:8b:6a:3d:42:ed:9d:
c5:85:1d:da:4d:13:51:fc:82:9d:39:d1:34:3f:49:
f4:31:67:29:d9:c0:f8:74:21:3e:e7:0a:aa:9e:b0:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E8:AA:8D:3E:2D:2D:9B:5D:EB:C8:E9:3B:9D:A9:51:D5:E1:E0:6D
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bd:81:41:63:fc:2b:06:92:02:21:72:0c:09:17:84:cb:9b:
58:77:65:35:e6:24:92:c6:0d:a0:ff:9f:c7:a4:94:a5:84:ad:
b8:dd:69:2a:e0:6a:49:5c:64:bb:34:b2:03:7e:2f:1c:3d:fb:
44:ec:3e:f9:b7:3a:65:73:e7:f6:5a:3d:21:43:f2:94:77:1a:
70:29:c3:ed:51:31:ab:b2:0d:49:db:0b:c0:c5:cb:aa:5c:61:
8f:95:b3:ea:f0:a7:01:f5:bc:aa:bf:93:a4:94:6a:a7:da:56:
33:0c:d6:09:58:b2:df:03:26:cd:50:06:91:4c:19:57:17:f0:
7e:b3:6e:cf:fb:46:67:ba:69:94:dc:48:78:75:73:29:ef:96:
0d:48:fd:72:a4:4a:77:30:73:c3:a9:9a:9d:4c:e9:2b:ef:f4:
1d:1b:e8:0a:cc:92:6e:f8:62:0d:d9:c1:7a:ff:5c:5c:89:64:
d1:89:90:d2:30:f1:08:73:fe:f4:1a:e0:d2:cc:5d:08:5d:23:
6e:b0:26:31:07:65:29:44:cb:5a:4a:a7:b9:df:07:c2:58:b1:
3a:b0:1c:6e:3d:b2:dd:a9:95:05:95:fc:7a:67:4f:60:b7:70:
5b:55:dd:b3:a0:8a:fa:8c:e9:39:dc:c3:e3:78:d5:db:86:4e:
b1:f8:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:36 2025 by rpki-client