Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: zPCT2WoXwK39z+jrmpsYKGJTd2rBFMI721kX+17eU4w=
Subject key identifier: EC:55:A1:88:40:EE:0A:36:A7:FB:C6:C8:5D:B7:E8:19:54:E3:F1:DC
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 019A71B8865711A0F9899225E8D6B6D16E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 09A0
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: O5Xjtn54eMXtIP7HWSZC5HlrWg4yMYEfusS7IADU9/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:86:57:11:a0:f9:89:92:25:e8:d6:b6:d1:6e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=ec55a18840ee0a36a7fbc6c85db7e81954e3f1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:fe:29:0e:3e:62:8e:bd:15:15:c3:fa:bf:
19:05:7e:e8:da:83:aa:7a:17:b2:5a:8b:e7:2a:71:
45:d7:3e:b0:b6:27:aa:77:e9:e6:91:a8:5e:d7:fd:
3c:0a:bc:2d:60:8f:8a:b0:e5:6a:d8:5c:3b:23:e3:
17:4a:56:4b:1c:27:6c:8b:7d:bd:07:53:4e:52:20:
4c:0d:36:81:56:f1:cd:d7:27:a4:89:5b:47:d3:d2:
b7:eb:ba:7d:2c:27:b4:23:ab:e1:0d:c7:3a:8d:bb:
58:17:da:f1:3e:2e:62:54:fa:d1:de:6d:e5:f1:2d:
83:04:90:80:92:f6:40:bb:75:c3:01:94:4d:4b:3d:
d1:eb:21:3a:7d:3f:1d:fa:90:be:01:05:cd:8b:fc:
a4:79:04:fd:65:c6:54:02:29:0e:25:1e:89:6d:e5:
16:71:6a:08:9b:32:20:b3:26:03:53:5b:ff:ab:19:
86:ee:c5:42:5d:ac:6a:6b:68:f2:1b:1b:5b:95:ba:
03:ed:f4:bb:f1:22:c1:79:97:6b:44:6b:85:0d:35:
24:06:fa:e7:49:08:0f:43:10:fc:00:d3:8b:07:94:
32:6a:50:11:c2:80:d0:27:c0:36:69:32:40:ed:99:
aa:89:b8:62:b1:3c:51:18:1f:85:3f:9c:24:ec:1d:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:A1:88:40:EE:0A:36:A7:FB:C6:C8:5D:B7:E8:19:54:E3:F1:DC
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e9:63:77:7b:20:6f:67:a6:7b:73:d6:a7:3d:77:88:a2:65:
0f:be:46:f5:ec:94:ff:50:f3:06:57:98:73:7e:3e:53:ea:57:
6e:65:d4:bc:e8:ea:63:18:e4:10:ad:fc:2d:0e:81:5b:dc:a4:
cb:5b:de:71:a7:ad:dd:56:37:c4:ca:35:5b:f3:33:6b:28:a5:
ba:01:29:f1:03:4f:4c:98:48:35:a2:af:15:5e:9c:20:90:28:
a7:b4:33:f3:df:92:d9:97:6d:98:21:b5:77:4b:08:19:46:5a:
59:84:f0:c7:c2:bc:c1:fe:b3:7d:22:8c:f4:6d:51:ca:dc:09:
4e:81:f1:01:dc:72:a1:47:c6:52:c2:1c:d6:98:7b:ce:aa:cb:
8c:96:05:4b:49:02:a4:5f:e5:08:14:b0:3a:86:95:e5:8c:11:
81:5b:d3:ea:a7:91:ed:cd:f4:ad:3a:b8:5c:9a:8b:91:12:12:
f2:ea:41:d9:54:b8:ea:98:0d:88:cc:9d:98:5a:51:82:4a:c6:
d7:4e:54:d6:4b:51:cd:44:95:92:3c:6a:88:8d:6c:99:53:68:
da:16:0d:90:c8:b5:1d:f6:b0:a2:b2:2d:b4:74:cc:ac:df:f1:
35:34:ea:bf:e1:e3:be:31:42:04:64:00:80:50:f7:23:ce:3c:
72:ab:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:04 2025 by rpki-client