Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File: M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier: 1aWAsn3E56uqv6/qWv4x9kr7peArEYA6IMyE5hO5n3c=
Subject key identifier: DE:CB:43:54:58:57:0F:D7:D1:4E:E9:9B:09:58:01:83:BF:31:49:63
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer: /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial: 019A71B80384A6AC2A22982B80738333B696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: tIx8ffjEdPqMHMLi/z/LD0zeD2Rvz/DsPlsqtLHWSpk=)
2: m9KlvtpTq4Ql79O_O_rULA1w-zY.roa (hash: +h4/STkGCXYgH/sIOVE5dquJUDdEfzAIpbql2yKK20U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:03:84:a6:ac:2a:22:98:2b:80:73:83:33:b6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=decb435458570fd7d14ee99b09580183bf314963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:c7:c8:b1:37:d1:c3:80:89:51:0c:b2:a6:
dd:aa:12:99:fa:de:fe:bc:80:57:c0:d0:f9:50:17:
f4:c1:f5:2e:a2:1f:63:cb:17:d3:e3:47:0c:9e:49:
7e:5b:0f:30:b1:31:a8:43:11:fc:4e:9a:e6:54:6d:
6e:72:a4:db:db:9a:21:e8:ff:80:42:1f:3d:51:c5:
4a:ab:2e:b0:51:7f:bb:86:1a:c0:c8:8d:a4:51:0b:
d6:82:24:fa:1f:f8:aa:45:fc:4b:05:93:df:5e:72:
3d:31:7f:c3:1a:ed:9e:9f:1a:de:c0:1c:a5:77:ab:
0c:b7:8c:fa:ac:45:d5:b5:01:71:1f:c2:c1:d0:12:
e9:09:6c:3b:63:f4:40:0c:7f:c4:d4:84:bb:bc:ec:
e8:ba:a7:0e:37:e5:af:20:79:ee:60:e3:b9:49:98:
97:bc:f8:c3:e7:94:48:67:11:b3:c0:6b:32:8e:be:
68:44:2f:11:dd:47:50:3a:62:0e:02:95:dd:22:f5:
20:7c:b4:5b:c8:18:44:9e:32:69:43:24:63:c5:c1:
cb:0f:e5:96:6c:4e:69:91:9f:1d:98:51:61:16:9f:
f4:62:2b:48:7f:7d:36:6b:6c:21:28:63:77:2e:a9:
0c:96:88:51:83:23:d9:18:05:d7:a7:28:39:80:ef:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:43:54:58:57:0F:D7:D1:4E:E9:9B:09:58:01:83:BF:31:49:63
X509v3 Authority Key Identifier:
keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:50:09:31:11:d2:14:f3:86:2c:9a:08:cb:64:b1:c0:e4:be:
ff:fc:61:46:65:95:81:0c:44:fe:78:e9:b3:c6:dc:31:e5:80:
81:0b:1a:26:e9:f3:2e:aa:70:29:6d:41:5a:75:ff:d6:ae:fc:
ca:56:98:48:e3:e6:64:f3:80:77:55:d9:11:48:07:b9:3f:b0:
3b:22:4c:0d:4d:47:65:e2:23:ff:d2:9e:a3:c2:d1:b6:cc:69:
ad:a0:fc:72:b9:cd:e3:63:55:e5:95:a7:9a:9e:01:e7:79:e7:
9b:48:d0:19:55:bb:a1:a6:86:c2:6d:86:56:49:20:43:69:e6:
d9:21:8c:58:3b:e7:95:01:7e:9d:72:b0:78:af:d7:cc:69:4e:
52:07:bd:f3:2b:48:50:be:02:9c:60:c3:e9:bf:5e:86:82:67:
b9:7f:95:f4:b7:53:92:2b:e3:9b:ff:dd:27:bd:21:bc:f7:06:
18:2c:bc:0d:1c:e1:b1:91:13:4e:e6:d0:5e:8e:2c:eb:66:77:
2e:4c:df:c7:69:4a:23:08:f7:ef:95:d3:16:86:b9:27:c6:74:
3d:98:29:e1:90:9f:4d:90:3d:d9:3d:41:76:09:34:21:db:6a:
a1:d2:25:a6:51:11:d8:e3:30:e7:5c:f6:1e:87:cb:e9:b4:c4:
41:d8:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:28 2025 by rpki-client