Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
File: p75X8mosEHsadWuDFxXr0HqH-5M.mft (raw, json)
Hash identifier: wra1yuCEbylsHQ9jIBCDiuGJ/acyzHliyoxJ1z8rU5g=
Subject key identifier: 24:EE:A9:E0:9B:56:C1:91:54:C4:97:7A:AC:86:3D:69:DD:06:95:8A
Authority key identifier: A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93
Certificate issuer: /CN=a7be57f26a2c107b1a756b831715ebd07a87fb93
Certificate serial: 019A70A4DA0832784CD648B609BB8FD281C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
Manifest number: A3
Signing time: Tue 11 Nov 2025 02:00:43 +0000
Manifest this update: Tue 11 Nov 2025 02:00:43 +0000
Manifest next update: Wed 12 Nov 2025 02:00:43 +0000
Files and hashes: 1: JiAa07vPm_-Pb33la8lIiEVcVsk.roa (hash: LTCDMolpBsWj5ww+QHR47bnfnmdoJo1c8oI26KgxQVA=)
2: p75X8mosEHsadWuDFxXr0HqH-5M.crl (hash: wAojBNhwcYQn+snD2CGkPSe/5HzNjAfp6oEGQGunOJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:da:08:32:78:4c:d6:48:b6:09:bb:8f:d2:81:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7be57f26a2c107b1a756b831715ebd07a87fb93
Validity
Not Before: Nov 11 02:00:43 2025 GMT
Not After : Nov 12 02:00:43 2025 GMT
Subject: CN=24eea9e09b56c19154c4977aac863d69dd06958a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:74:88:6d:17:3e:17:c3:71:f5:55:4f:21:
a4:cb:19:8d:e1:91:b0:02:17:a5:1f:0c:bd:4c:72:
53:04:76:c8:32:36:ad:10:4d:83:32:d9:fc:d4:52:
f8:0b:11:4f:83:b6:65:6b:e9:01:25:5b:e3:c2:05:
98:90:30:d8:f3:48:f7:64:9b:d2:fd:a4:c1:cc:d6:
36:cd:37:6c:71:1e:9d:5b:4f:21:97:ff:a5:b6:65:
4a:b3:f1:eb:1f:8e:dd:db:db:ed:61:7f:4f:1e:9f:
73:77:c2:19:85:ae:58:42:ab:62:9f:93:c2:02:36:
b7:45:68:98:ed:7c:5b:81:0a:b0:32:09:52:f0:57:
59:10:05:0b:a8:f2:17:86:0e:53:94:9d:c3:12:a3:
d5:6e:f6:eb:26:59:83:74:11:ce:bf:1c:11:89:e5:
de:3b:33:08:d2:a9:6f:ed:72:12:b1:a5:bd:d3:42:
17:73:26:35:24:e0:42:23:05:38:3e:9b:ec:97:79:
59:95:ab:3c:c7:58:ad:43:19:7e:b8:b0:ec:2e:fd:
ec:e2:ad:a3:a5:f4:64:7b:41:08:a8:18:f9:aa:0e:
da:20:c7:3d:d4:26:e2:12:60:80:23:22:61:af:f3:
f8:11:39:7e:cb:7b:29:62:e2:a9:3b:0d:b7:c9:d7:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EE:A9:E0:9B:56:C1:91:54:C4:97:7A:AC:86:3D:69:DD:06:95:8A
X509v3 Authority Key Identifier:
keyid:A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:b0:8a:c4:e8:f4:a0:78:6b:45:18:0a:5c:e7:57:b1:73:
90:cc:ed:3c:34:8e:2d:b7:7f:0d:da:5a:b9:cd:45:d0:d6:b5:
b3:ea:c9:c0:aa:82:38:05:f0:f9:e6:a5:84:54:4a:d2:13:55:
49:92:06:dd:a8:81:63:cd:8a:96:73:df:e7:71:cb:2f:95:05:
68:25:dd:6d:9e:c9:6e:50:05:5e:fb:e0:60:6d:1b:c2:1a:a2:
99:19:89:f7:e2:14:c8:72:18:94:0f:92:c7:60:fa:1a:f3:b0:
cd:b7:0f:17:e6:ce:d4:76:6a:0e:c0:52:af:1c:4d:74:49:ea:
d0:ba:29:7a:a1:f4:19:72:a4:62:fb:ae:b3:2b:8c:1a:42:2d:
ca:bd:06:ce:1b:bd:11:a5:55:e0:25:60:fe:8a:42:d5:01:e7:
97:3c:cc:7f:8f:93:6f:f6:8f:6b:b2:17:ae:ac:ca:04:19:f7:
e2:c6:59:6b:22:ad:c6:13:f9:86:d6:d6:a8:d4:16:85:85:7f:
4c:2c:17:c9:00:9c:66:18:68:cb:34:e5:5e:1e:c2:93:ff:21:
da:51:b6:b5:61:42:fa:36:7b:ef:76:ad:9f:fe:95:ed:8e:e7:
42:39:2c:83:af:99:b4:ad:bb:98:d4:30:1e:31:e7:f0:79:38:
f7:97:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:51 2025 by rpki-client