Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: yRYfqK3S0eQ6GS+f5Ec4V0AO4cYY/0zWNlAhy1ZDzTk=
Subject key identifier: 3F:FC:FC:97:30:61:D8:C8:F3:9F:F5:DD:2F:E1:D2:A5:7D:BC:86:CC
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 019A71EE62B903350ABACDD3B782194C47C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 105E
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: 5YNraT97kHCQRZIQ9VNwIFw8SDAO6WTB1MLx42Z6AhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:62:b9:03:35:0a:ba:cd:d3:b7:82:19:4c:47:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=3ffcfc973061d8c8f39ff5dd2fe1d2a57dbc86cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:a9:3f:3d:6e:46:a7:9c:11:77:f7:69:95:
10:e2:21:ed:11:8a:76:4c:89:1c:6e:1b:c2:0f:49:
ba:97:37:88:76:3f:7a:99:e9:f7:f6:8b:bf:10:9c:
d3:ba:09:c0:15:94:f6:ef:03:6d:a0:f5:0d:fd:59:
7c:4e:53:9f:75:40:6b:b7:d6:29:cc:d1:bd:91:1c:
a8:7a:13:de:0e:90:a2:e6:c3:8a:86:ef:f1:59:08:
d5:41:8a:cd:84:b0:16:e8:8c:1b:4a:b6:1b:44:7c:
31:37:8d:c4:41:69:4f:4f:26:03:8c:ed:ac:2e:d2:
a4:da:84:33:d0:8b:5d:77:38:c6:25:f8:97:3a:3f:
c8:dc:cc:fb:44:e0:46:49:1b:4a:69:e9:0b:23:d7:
e3:9d:95:b8:70:ad:33:33:b3:5b:ea:4c:6f:c6:da:
06:82:45:4c:92:d3:1b:fd:4d:cd:7b:1c:a4:d6:86:
ff:ec:22:25:15:d1:67:33:f7:51:b0:2e:92:e6:49:
69:06:6f:62:04:b0:88:a6:77:7c:43:06:b9:df:15:
37:18:dc:5f:11:38:b5:c1:48:65:d4:74:95:48:37:
e3:c7:06:33:30:72:81:30:cd:c7:44:c0:5c:17:8b:
77:04:ca:f6:5b:b5:f8:d6:3c:f3:6c:f9:a5:6e:3b:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:FC:97:30:61:D8:C8:F3:9F:F5:DD:2F:E1:D2:A5:7D:BC:86:CC
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:f1:19:94:6e:3e:23:58:ae:ed:7c:d6:42:36:69:43:31:
ae:5d:59:1a:c2:b1:77:ea:b8:24:41:33:26:07:22:2b:b0:df:
cb:cb:d8:19:b5:fa:3a:52:11:d1:3a:e6:ff:d6:b6:d2:9e:f5:
2e:bd:51:ce:1c:db:6f:da:e7:38:27:09:74:f8:ca:4d:c4:64:
ee:f5:a5:a5:fb:35:eb:d7:1e:35:6f:5b:51:a9:00:4f:8a:0a:
6c:62:6e:d2:58:b3:89:02:0b:b0:e5:22:7f:5b:f3:78:4c:54:
89:17:87:c3:e4:c9:5e:05:1e:46:86:b2:e8:4e:9c:cf:46:76:
52:34:aa:71:c0:e8:cc:63:17:07:f0:e4:47:14:eb:a8:48:18:
42:df:34:eb:ac:b7:61:3d:59:ae:0f:b2:79:68:8f:e3:60:c5:
09:eb:b2:17:5a:10:ce:50:99:ff:c0:fa:af:a9:d7:d7:39:cf:
5d:35:b0:cd:c0:d0:01:23:7d:7a:01:59:3a:bd:32:02:a0:12:
05:90:76:4e:ee:50:6e:19:8b:73:f9:6b:15:64:0a:f0:f6:3b:
09:5a:f8:12:51:66:f3:33:bb:30:a3:8a:38:4f:27:69:2c:29:
4a:63:5e:68:46:5e:b0:0c:6a:16:7a:b3:f4:0e:6f:fc:bf:f4:
50:76:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:10 2025 by rpki-client