Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
File: M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json)
Hash identifier: vCLWJG5O8hStTExgK7rwSqZilzuk2yhfcdy01lD1iZw=
Subject key identifier: D0:B5:8A:52:E8:31:C1:FA:53:E4:FC:9C:8F:7F:B5:FB:B2:77:90:96
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial: 019A70A57EBBD481F42AF15DF20E839FC8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
Manifest number: 1633
Signing time: Tue 11 Nov 2025 02:01:25 +0000
Manifest this update: Tue 11 Nov 2025 02:01:25 +0000
Manifest next update: Wed 12 Nov 2025 02:01:25 +0000
Files and hashes: 1: FVPUO_4e4I5-OcVJQIXU4CRRPVk.roa (hash: q0KHYdYKhmIsDVg/gFGOj9HyFrWEATNN4eGecvRkCEk=)
2: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: ALepv9girufyXMPaRA26nsU3kuZt+vayNgw0Pikeoco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7e:bb:d4:81:f4:2a:f1:5d:f2:0e:83:9f:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Validity
Not Before: Nov 11 02:01:25 2025 GMT
Not After : Nov 12 02:01:25 2025 GMT
Subject: CN=d0b58a52e831c1fa53e4fc9c8f7fb5fbb2779096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:58:6a:44:b4:b0:6b:19:c6:79:23:5c:70:
df:6d:95:8a:79:cc:bd:c3:7d:c7:95:29:71:b0:bc:
c0:6b:f7:08:7c:4b:20:3d:fa:a8:96:37:fe:90:d0:
e1:e6:eb:ff:d5:6e:c7:19:6c:4a:0f:a0:2d:bb:d5:
9a:5d:82:d1:43:a7:cf:ac:9a:a6:ec:51:02:0d:88:
12:db:41:4a:89:81:dc:1e:11:76:fe:11:ef:b8:7d:
1f:31:9b:3a:94:04:84:89:db:4a:e6:c1:d9:56:c6:
e5:bc:9d:c0:9c:8e:9e:bb:a0:b5:9c:02:7d:8d:7f:
19:1c:2e:fe:04:9e:c6:19:68:9f:d8:ca:17:29:5a:
b8:e6:35:52:3e:fd:56:8a:0b:20:4d:34:56:67:c8:
b1:45:74:9c:f4:7f:e6:08:21:25:b7:47:c7:45:ee:
33:c1:61:1f:5a:f3:a4:99:fd:74:c7:67:cc:b2:8a:
2d:f2:0c:c9:02:a5:6e:4b:c8:0d:49:9f:aa:eb:23:
2f:4d:6d:09:4b:65:92:fa:90:69:85:83:ee:a4:b7:
4a:7f:c5:63:59:bf:d4:64:a6:ee:eb:28:be:c4:b3:
5e:81:2c:c5:89:c1:43:90:26:99:c3:5e:65:1f:8a:
2a:a1:e5:78:df:31:c0:17:f5:62:46:1c:0e:d6:56:
16:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:8A:52:E8:31:C1:FA:53:E4:FC:9C:8F:7F:B5:FB:B2:77:90:96
X509v3 Authority Key Identifier:
keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:65:18:10:64:9a:f9:67:31:0f:17:21:b0:9c:38:25:94:5f:
cc:b7:33:bf:43:38:7c:5a:45:bf:9f:7f:80:79:29:41:91:ea:
3c:50:92:06:3a:0b:bf:03:94:f9:ce:e5:e2:81:3f:22:9f:72:
9b:50:37:69:21:9e:90:f6:a5:56:f0:b8:4c:be:d7:60:7e:12:
02:63:e5:86:07:d0:4b:60:ce:4a:bb:4a:2e:10:fa:f9:70:2d:
9e:06:95:f2:32:fb:1f:de:ad:16:4c:f1:bc:c8:41:b2:cb:ec:
62:f8:cf:c6:eb:4a:e7:68:10:6c:d7:f7:2a:9d:8b:ad:2f:da:
40:98:a1:46:9e:05:a1:d6:be:50:b1:a1:f5:2a:c8:a1:3a:3a:
4a:26:7d:54:d1:cb:01:da:bd:75:9c:4e:1f:c1:52:ff:69:09:
ab:19:82:69:9c:da:1a:49:1f:fa:71:e3:b6:29:9e:bf:79:30:
45:5f:fa:b2:14:23:25:37:99:a6:dd:d6:fc:f0:ad:b9:cc:f3:
3a:de:a0:e8:f4:28:20:76:cb:be:3d:b4:83:bb:d8:21:eb:12:
6b:a1:dd:73:c0:fa:76:bb:44:bc:f0:85:7f:42:67:c4:a1:68:
9b:d3:92:6d:bc:10:06:54:01:f2:12:3b:33:97:a0:a9:dc:0a:
57:b1:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:24 2025 by rpki-client