Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: qH/bn+ua/nJChEhT/20EnXUiRgK4EEV6c0Nx9ZDKbBk=
Subject key identifier: 5D:A8:81:7E:E7:56:B7:76:09:E1:9F:5A:6D:D0:FF:B8:D9:CC:8B:21
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 019A71B9229CA71609CF9682789A72C91BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0E00
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: aLKebp9eqBH1BJc3mPk+lTZCKukZqs93pd0FK+HCagc=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:22:9c:a7:16:09:cf:96:82:78:9a:72:c9:1b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=5da8817ee756b77609e19f5a6dd0ffb8d9cc8b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:de:8c:04:fb:43:bd:1b:4a:7d:d9:38:ed:
58:d3:22:46:7b:b4:94:4c:10:fe:4d:fd:c6:25:97:
8f:14:37:f5:41:43:ff:bd:86:9e:26:e3:5c:0b:00:
02:f5:c9:07:d9:0a:40:f3:7a:9b:27:ef:dd:b9:03:
7d:90:f7:69:59:b9:b1:ab:63:86:ae:50:c4:7b:fd:
cf:04:ea:9e:a0:8d:f3:18:7e:be:c5:da:65:39:b3:
0d:50:6f:c2:99:66:ae:5b:d7:3c:03:3d:61:0f:b8:
71:38:04:b4:0d:31:27:76:54:62:50:d8:aa:03:b4:
78:cf:3d:be:a4:8c:1a:3f:78:08:03:d6:d5:61:91:
7d:63:31:c5:2e:d1:5f:11:53:2c:a0:8c:f0:9a:7b:
7e:3f:c2:5f:3b:cf:4b:f6:4f:0f:6f:5c:31:99:c8:
5f:4c:e7:f6:5b:10:fd:b0:36:c5:53:17:85:82:c5:
61:1b:3a:72:61:bb:f0:e7:e8:ba:fc:b9:88:52:4b:
17:2e:87:bd:8c:87:e5:c9:3c:1d:fb:9d:b1:fd:4d:
0b:57:8b:60:49:8f:73:94:17:47:44:a9:79:d2:08:
2e:8e:84:d1:4c:c1:a4:f5:21:5c:23:61:b6:af:ed:
ac:31:35:0c:c0:1d:a1:11:6a:07:f4:4d:a9:b0:50:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A8:81:7E:E7:56:B7:76:09:E1:9F:5A:6D:D0:FF:B8:D9:CC:8B:21
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:da:43:b4:73:df:43:0d:c3:cb:38:2a:fe:ed:bf:75:42:67:
af:18:fb:a4:62:9e:d9:64:d1:b3:d2:09:07:d2:ff:f7:8d:d7:
a3:25:95:b3:b7:d1:e2:8b:c4:60:fe:ba:47:26:76:53:92:1a:
60:e6:20:fb:20:fe:00:63:3c:4c:d1:96:e2:1d:8e:cb:8e:e5:
d4:a1:1a:63:0c:4c:20:28:f0:31:d0:4b:78:8c:e7:23:6a:2a:
8f:ea:24:15:27:6e:2d:fa:58:27:b3:1d:71:cd:6e:ac:1d:7a:
6d:17:04:a4:59:5b:65:5b:95:d7:3a:b8:2f:b0:05:00:f3:5c:
df:e7:86:01:77:5b:27:02:6d:9c:7b:9c:cd:41:7b:c9:2e:2b:
0e:c3:b8:12:43:13:6d:e7:3a:d9:32:ce:06:7b:0c:93:40:1f:
0c:3e:13:51:d3:57:78:98:24:f8:55:d8:14:27:c6:09:d5:23:
cf:b3:bd:d8:8e:1f:5a:37:b4:7f:19:a6:94:76:c4:eb:35:0c:
ed:3d:ae:06:21:6f:e5:42:e3:fb:5a:fb:0a:14:cf:af:32:59:
03:4a:7b:c1:08:e2:82:09:8f:48:24:fc:e6:f9:bc:a2:ed:a0:
34:0a:b4:61:6e:fa:a0:96:29:2c:30:5e:ee:af:e4:ef:c5:95:
04:a8:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:36 2025 by rpki-client