Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
File: RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft (raw, json)
Hash identifier: 1ejg4VHdtVCTc6F093t11ipWYgTB7YZAUcnYUKQNW8Q=
Subject key identifier: E8:06:E5:E3:83:90:55:1C:E4:74:8B:EA:07:26:2C:C6:65:11:FB:F8
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 019A70DC49D8697DC7E543839494CB181B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
Manifest number: 128A
Signing time: Tue 11 Nov 2025 03:01:16 +0000
Manifest this update: Tue 11 Nov 2025 03:01:16 +0000
Manifest next update: Wed 12 Nov 2025 03:01:16 +0000
Files and hashes: 1: Gnl9wgih5bkZTu9f-EBtmWB57aI.roa (hash: zbDguLxZjG7MAjNEZMNb7jOZjg/zzl6iQmvjqk6cIOM=)
2: RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl (hash: TOZO9c5VaKFGKllKMTEIUxjFxlxgtFjkW7M6ELgczlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:49:d8:69:7d:c7:e5:43:83:94:94:cb:18:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Nov 11 03:01:16 2025 GMT
Not After : Nov 12 03:01:16 2025 GMT
Subject: CN=e806e5e38390551ce4748bea07262cc66511fbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:cb:8f:11:58:d6:34:64:a1:20:7b:08:ba:
ea:b8:46:b4:e6:e4:56:0b:92:b2:b2:67:cb:12:07:
1a:02:d3:1c:26:fc:2d:99:b9:b2:de:f5:76:5d:98:
d3:8f:25:d2:be:df:93:ca:c4:55:60:14:16:63:bb:
13:24:8a:8b:fa:d7:07:4b:b3:f8:3f:5a:6d:38:12:
04:22:c7:42:b9:09:2f:1c:64:ae:03:73:9a:2d:8e:
cd:bd:e3:15:e9:1e:05:9e:ce:bf:81:03:3b:a7:f1:
1d:b3:0e:47:9e:d0:80:8b:53:e1:aa:95:47:42:2a:
91:f3:ec:a0:67:40:25:48:2e:04:06:a8:c5:3f:c5:
aa:ad:ae:5a:7c:fa:40:f8:b6:8a:5f:ad:ab:90:c1:
85:be:15:c3:cd:8b:ce:68:88:e5:f9:04:1e:ba:49:
e3:0a:5a:be:17:6c:b1:d4:45:98:93:2c:1c:d6:7a:
29:80:2c:51:09:e3:73:f0:00:8a:36:c1:23:43:8b:
11:ab:fa:c6:9e:29:f1:fb:2e:72:fc:07:31:df:06:
72:3c:73:ec:a9:07:73:47:78:62:13:e4:7a:d4:2b:
61:dd:9e:99:70:42:0d:d6:e9:a8:7b:b7:b7:65:fa:
67:1e:c3:a0:82:3e:93:c3:12:3c:4d:98:62:52:df:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:06:E5:E3:83:90:55:1C:E4:74:8B:EA:07:26:2C:C6:65:11:FB:F8
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e2:20:04:67:b4:89:d2:ad:96:78:a1:fb:f7:f3:e4:59:6a:
22:8c:60:0c:32:6f:2a:f6:f5:26:54:8b:7e:af:32:66:3f:3b:
b3:ca:4c:41:c2:be:bf:14:5a:49:9a:c9:e5:d5:68:4b:ca:83:
e5:c6:e1:eb:ac:05:b4:9d:d9:7f:f5:c4:d6:e5:d3:ca:62:1b:
ef:22:dd:d2:fa:85:4b:ef:ec:cb:68:f3:44:78:65:bb:34:11:
9d:ce:63:66:e9:b5:54:00:c8:b2:dd:68:46:4e:82:08:58:d1:
d6:80:94:8b:ca:e3:d6:25:a4:5a:d0:05:95:8d:05:78:12:a5:
49:5c:96:b0:62:8a:00:bf:7f:c7:84:af:55:0c:cc:d8:52:b1:
74:ff:b5:b9:23:32:0e:30:4e:97:e3:56:23:c3:0d:15:68:44:
ff:b2:ef:33:22:00:e4:31:38:2b:e0:2d:c3:38:29:1d:00:9e:
34:b6:8f:b5:2f:e1:86:07:2e:b7:80:40:af:d1:d9:c1:a7:13:
b9:16:a0:05:81:a6:28:73:ff:b1:d2:5e:f8:c7:3d:e7:63:3b:
d9:c9:92:ec:91:7b:03:f5:16:95:09:11:00:37:d3:a2:29:97:
aa:81:a0:25:00:77:ec:95:f7:8f:eb:5b:96:6f:24:e6:46:58:
74:a1:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:56 2025 by rpki-client