Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: XhC3zuIiABGSCm4OAdneWMk1Mx4y9hwachCB2AfQkN0=
Subject key identifier: 04:45:0C:B4:6B:0B:7A:96:8F:F6:C9:2C:62:87:91:B9:AC:73:54:89
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 019923A05773628F189414D2772EEC444E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0D53
Signing time: Sun 07 Sep 2025 10:02:14 +0000
Manifest this update: Sun 07 Sep 2025 10:02:14 +0000
Manifest next update: Mon 08 Sep 2025 10:02:14 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: MsnH8NgD7MVkBYstUA4Rf0c5AgyyTzFmJElqgK5UrLU=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:57:73:62:8f:18:94:14:d2:77:2e:ec:44:4e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Sep 7 10:02:14 2025 GMT
Not After : Sep 8 10:02:14 2025 GMT
Subject: CN=04450cb46b0b7a968ff6c92c628791b9ac735489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:5c:30:33:f2:d7:27:30:36:08:1a:c1:07:
cc:7b:9c:10:1e:21:02:fd:ab:7b:97:a1:64:cd:eb:
8e:fc:ff:c6:12:2a:a5:f4:e7:b5:ff:c8:90:4e:d8:
2b:9f:1d:8c:5a:1b:0a:6d:de:f9:ac:18:6f:b2:53:
f7:b6:63:7e:73:e1:62:09:ca:95:80:b4:0b:c3:a7:
e1:6c:01:a1:75:39:aa:5e:1b:6a:07:73:47:98:3d:
54:96:0c:e0:d0:aa:f6:13:de:1e:b7:e1:7b:e8:ed:
88:6e:a5:48:77:bb:70:cf:a3:1b:10:1e:bd:c4:bb:
a3:8e:da:0c:17:75:a0:02:dc:09:01:03:97:0e:7c:
ec:0c:11:19:a0:4e:87:8f:56:ce:59:f4:71:67:a7:
c9:3b:65:09:9b:e9:ae:1a:60:db:6e:64:63:da:56:
8a:e9:08:57:81:58:43:58:70:54:7f:8b:de:8d:8d:
06:f0:fa:d6:5e:d0:30:9c:d3:27:a4:2b:ea:68:43:
58:a0:2b:bf:a3:95:87:2e:c7:49:9d:fa:54:7a:02:
75:50:6a:40:36:4a:fb:9d:29:ea:8a:42:97:d3:b0:
3d:9d:0c:79:fd:aa:a2:27:2e:66:79:ad:79:9e:09:
7b:74:7a:1e:6e:38:fa:5c:1c:0b:af:4c:e9:13:bb:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:0C:B4:6B:0B:7A:96:8F:F6:C9:2C:62:87:91:B9:AC:73:54:89
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5c:be:48:bd:81:ae:17:64:7b:5f:cf:95:37:d1:c8:7d:f0:
80:bf:a7:be:f6:98:cb:a6:85:a0:57:00:f0:e1:66:40:e0:7a:
55:ab:85:8c:83:8c:11:01:3d:e6:84:93:cf:ef:26:ec:fd:af:
8a:6e:d4:b0:99:1b:7a:f2:35:5d:79:d1:18:2a:ae:af:b5:cf:
96:3a:ae:59:6f:da:05:fc:e6:c4:6c:08:9b:7a:67:0b:a1:ce:
15:19:5c:db:db:c2:55:0d:3c:ad:c3:15:08:78:4f:2a:39:69:
a6:15:d5:fe:45:7c:59:44:c7:e8:c4:65:ee:d2:d6:8a:d8:34:
68:fd:fe:36:37:a1:0c:c8:b9:b7:8f:90:cc:4c:97:2e:fa:1c:
6c:5a:34:04:b0:d7:a6:53:bd:65:ef:84:51:c3:76:e6:45:80:
50:51:55:da:b6:82:74:4c:8b:8d:20:a5:e3:dc:98:ab:12:39:
3f:43:ba:b9:f9:0f:98:63:83:67:d1:f7:f1:2e:4a:1c:b2:6c:
5c:9e:c7:bb:d5:be:58:80:53:e4:26:8a:45:d3:b3:8b:42:e9:
ee:2b:76:35:48:46:8e:ff:6d:ab:28:ab:c2:5f:15:b4:b6:c9:
b5:97:7c:a6:b7:b5:e5:e8:48:8f:07:89:1c:50:33:b9:a0:39:
b3:ea:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:31 2025 by rpki-client