Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: MUULwZF3mj+5io0Eb3ndoyilhXcNimlzbxpHEozfyQw=
Subject key identifier: 93:BE:21:F7:09:75:88:DD:C4:CD:45:B1:9F:BE:D9:DB:5D:B7:E1:8E
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 019A71B90C89DDAD06880434E11AE83B3EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: 80CDHeK+5SEP5dVAMarB4K+Nk1l6QvpGQ3JMc+bWOu4=)
2: uPPSCEPI-zYe8c4juKISlbYTsmI.roa (hash: ItdA3QN2L+hecSiCaaiQJ/fE6U5Bp5eLGhZQrMhDtVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0c:89:dd:ad:06:88:04:34:e1:1a:e8:3b:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=93be21f7097588ddc4cd45b19fbed9db5db7e18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:65:53:77:85:04:7f:82:f2:51:3a:a5:82:
ec:6c:13:fb:3b:24:fd:68:4a:3e:7c:d5:00:e2:ea:
e3:76:8e:e0:65:ab:81:6d:a5:99:44:ce:5a:ae:e7:
b9:3d:ac:45:63:33:b0:5d:b0:4b:c2:96:18:a0:eb:
0d:9f:ec:2f:f2:af:07:fa:cd:79:25:4a:3f:f1:15:
76:93:ee:82:3f:be:35:79:6e:6c:77:d1:53:4f:3b:
97:63:7e:0b:ee:43:9e:4e:fb:62:26:eb:d1:a0:db:
ad:31:19:11:05:38:2d:83:8c:fa:d1:4e:29:67:4b:
b6:b7:74:17:49:c9:4e:6e:a9:de:e2:a8:28:59:50:
68:44:5c:53:b7:8f:f2:d0:2f:2d:56:59:8f:af:b7:
d6:5b:13:3b:76:c6:bb:73:53:8d:52:30:55:ee:05:
1f:1f:65:fc:de:13:6d:ad:ca:5a:01:1b:ac:86:e4:
0d:6c:68:94:b1:06:1e:f4:84:66:c5:de:b6:99:3e:
cc:7f:23:cc:98:9d:88:e6:96:9a:62:b8:84:a8:23:
87:7b:d1:8e:aa:75:63:04:7e:01:b3:90:90:85:c2:
e0:62:96:c4:ed:85:bb:5c:67:46:6a:bd:34:da:dd:
c5:57:0f:86:73:6f:89:be:3c:7e:76:52:7c:80:2a:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:21:F7:09:75:88:DD:C4:CD:45:B1:9F:BE:D9:DB:5D:B7:E1:8E
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:af:2a:6c:8e:e8:78:9c:e4:d1:c7:9a:93:6b:bb:b4:a7:d5:
42:b8:c1:a6:e9:1f:02:67:ec:c1:b5:0b:4b:34:0b:cb:1b:b7:
f6:21:4f:ad:c2:fa:8c:a5:6e:67:8c:0b:1d:b0:24:51:e1:c3:
be:c8:8a:bc:15:87:ac:19:ea:65:04:a9:5e:fd:ed:be:9f:0e:
e2:21:57:b7:1a:1c:cf:6c:d8:07:2d:9a:3d:79:bd:35:03:17:
5c:db:00:6b:98:77:81:66:7a:b2:93:11:95:17:b2:a0:0d:5f:
11:99:a3:d4:54:d9:a8:ed:71:6a:93:d8:f1:25:61:e8:79:04:
83:cf:d4:79:b8:13:fe:53:04:f0:9a:41:0b:32:43:7d:c4:9b:
28:08:1f:da:48:4a:4c:9c:66:52:77:db:20:61:35:8d:a3:69:
86:99:67:58:6b:11:33:4a:6b:df:53:ee:5b:7f:86:8c:0a:90:
4d:3b:20:3b:9f:68:7d:79:0f:d4:b6:30:36:20:ff:36:31:78:
1f:08:fb:1f:86:2f:55:54:29:5b:5d:5b:d8:ac:b8:9b:9a:da:
03:ed:23:b8:64:1d:3e:b3:a3:b3:5f:cb:4a:de:c4:b8:01:46:
86:a9:98:41:e9:a1:01:7e:ba:b4:ad:9d:cf:05:a6:69:9c:d9:
90:5b:f0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:45 2025 by rpki-client