Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File: SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier: yVnb+Pu4TyrN0nAvjSLIInCGWnoBHvhriOzdsZkWlUw=
Subject key identifier: 75:37:F7:E5:64:D7:D6:F3:AE:F4:0B:CD:32:EC:4E:63:B3:50:98:40
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer: /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial: 019A7225EC77C5A3E616F13493686C24FEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number: 0CFB
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: KzKkuaWIoCJCidFpTjY6s9KRUpASPYaysbmtkjeFiFk=)
2: t2TSolMpe1MqepO7ZiAhihdiw7E.roa (hash: 6XLtwGEoBLRfiwM7FwJJWhjDjtkkFPk9hmuRlaKNmqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ec:77:c5:a3:e6:16:f1:34:93:68:6c:24:fe:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=7537f7e564d7d6f3aef40bcd32ec4e63b3509840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:d1:ed:41:3d:04:12:dc:1b:7c:52:72:17:
37:9f:22:d8:13:26:2b:08:bc:9b:aa:3e:e6:68:a1:
dd:73:18:2d:e0:53:b6:7e:68:2a:98:2f:42:d2:59:
16:f7:85:86:f6:e5:8a:65:5c:4b:28:32:fa:a7:05:
99:39:09:b0:59:10:3f:33:a4:ba:b9:2b:ce:76:ae:
f1:ae:0f:14:75:f3:27:76:1d:27:99:c8:d1:7d:ec:
8e:b7:92:a8:4a:2a:55:1d:42:e5:65:bb:89:5f:d2:
f1:2d:59:63:10:b2:58:98:6b:4a:a1:53:c0:ab:95:
74:e8:db:ff:7d:c4:58:d9:6e:a3:75:08:b5:e1:9d:
f3:03:b2:22:49:86:a5:03:5d:da:cb:80:d4:12:04:
93:8c:be:3a:2f:00:ed:7d:eb:34:72:3f:a2:85:28:
91:62:fa:e5:6a:c0:ea:87:73:7a:6a:3e:e0:25:be:
96:34:2f:16:04:be:16:86:4a:24:75:6f:17:07:dc:
ec:e1:54:b8:3a:ab:13:b9:30:db:45:6c:91:0e:67:
5a:e1:10:4b:52:2f:dc:31:cf:dd:c4:f4:95:04:1f:
9a:24:55:4f:d0:84:6d:13:de:98:c4:cf:c2:b0:e6:
09:49:9a:05:e1:07:f5:84:7a:98:c1:51:11:80:f6:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:F7:E5:64:D7:D6:F3:AE:F4:0B:CD:32:EC:4E:63:B3:50:98:40
X509v3 Authority Key Identifier:
keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4e:9d:9f:df:7f:46:96:02:b3:c8:3b:54:8b:fb:58:1d:73:
09:6b:42:75:5b:67:d7:6a:a6:3e:2b:8b:fd:83:92:4b:d4:57:
8f:ae:a8:00:17:0b:1c:17:8c:10:7d:21:f1:23:c7:9c:be:ee:
e8:98:77:dc:f2:d3:0a:4f:1a:28:f0:34:73:f7:41:cc:c0:32:
1e:08:ad:e5:54:a6:2a:f9:24:f1:9a:18:5d:46:53:0c:e6:c9:
66:14:a0:8c:f9:c3:20:71:3c:bb:e9:6e:58:1d:80:0a:43:0c:
2d:fc:07:56:e6:1c:ef:db:68:8a:38:87:6f:a6:77:3e:24:4d:
8b:8e:fa:1b:d7:15:53:84:f8:4b:f3:d3:37:4f:09:42:3f:a9:
db:e4:aa:c1:6e:4e:4b:b7:57:22:fe:15:3e:75:c6:78:a8:81:
c7:3b:0f:f2:ca:6c:b5:86:48:9c:c3:bb:6d:8a:2a:ff:ac:b4:
64:63:1b:71:f5:f6:12:5f:bc:aa:c4:43:89:d2:8a:d0:7a:36:
4d:11:de:b4:84:58:25:2c:6f:39:af:6b:02:fb:4b:c4:6f:c0:
26:98:69:c6:7f:98:3f:9f:a8:96:fd:be:23:46:6e:95:80:52:
17:56:6f:52:a0:21:fb:f2:92:c8:58:3c:d6:f3:81:f1:b8:8e:
f2:8b:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:56 2025 by rpki-client