Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File: 52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier: V+7kxthv5jVmmVfej4r1MjSEwppxS4uXjTCdJZRDjYc=
Subject key identifier: CE:C2:88:2A:34:11:AE:61:24:C2:2D:6F:7E:F5:7E:1C:9D:03:85:E5
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer: /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial: 019A71B8B260649B04E4DE03E474263E365B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number: 06C7
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: pgPF+QOTzTCOeirDZoYeIfGez58FbXyXemihzEPO1dw=)
2: rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa (hash: GqgeMXx+9CHaMaMRbd16hQlhBApo1up4EaH0YwEA5E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b2:60:64:9b:04:e4:de:03:e4:74:26:3e:36:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=cec2882a3411ae6124c22d6f7ef57e1c9d0385e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:80:17:80:66:32:93:b6:81:31:ec:de:23:
27:29:86:8b:96:45:d2:00:90:21:f2:df:b1:93:f5:
1c:a3:e0:8b:08:99:8c:ac:67:16:35:da:3d:af:83:
8e:de:94:2f:ca:6e:a1:e6:d7:b3:a3:b8:3a:9f:0f:
8f:4a:23:a6:cd:98:06:6d:48:80:71:cb:b0:a9:5f:
7c:8a:27:8c:7f:ff:1d:67:a0:2b:f2:a9:c9:19:8d:
3b:0f:60:9e:07:fe:3a:30:9a:11:f6:55:6d:22:02:
1b:3a:e5:3b:70:5a:77:26:c5:90:a9:67:87:1b:16:
52:93:d0:fa:29:f6:3e:78:55:98:f2:c5:da:6b:32:
97:62:f7:b3:1f:17:41:6d:70:b2:60:d1:d5:e4:d9:
8a:6f:c9:00:68:67:51:fa:1c:bf:50:dd:63:5b:6f:
7e:bc:54:57:67:41:6a:f1:ea:5b:ae:41:f7:6d:56:
47:59:1a:8a:d9:44:c1:2f:99:e4:c7:55:a8:13:1a:
1a:70:49:13:6f:28:8c:f1:a5:62:29:14:cc:ec:ba:
e3:1a:d8:83:7e:e0:ef:19:fe:27:59:d5:63:7c:6d:
a2:e8:fb:29:2d:4f:71:76:67:0f:b5:11:60:04:e2:
25:73:ba:eb:ec:92:69:48:63:d7:71:fd:c9:c3:d4:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:88:2A:34:11:AE:61:24:C2:2D:6F:7E:F5:7E:1C:9D:03:85:E5
X509v3 Authority Key Identifier:
keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f2:18:00:e6:bd:4c:46:27:e5:48:e1:c1:23:2a:6a:18:5f:
89:08:e2:29:77:a4:45:8f:ba:19:b3:ff:ca:09:ae:f9:ca:f5:
a0:a0:a5:a4:be:3b:ba:8d:81:2f:13:33:49:e3:c7:eb:fe:5c:
d2:7a:fb:ff:4d:9e:c6:ac:cb:c7:cd:2a:16:34:40:8d:3a:cc:
64:79:91:48:ec:12:e8:f6:aa:db:64:4f:d3:dc:90:99:d8:ba:
5d:aa:11:0a:e9:fe:52:70:ce:5e:c2:fa:5b:a5:72:54:4b:1d:
54:a4:4d:af:59:77:9c:89:10:8c:58:59:82:8d:25:cd:6f:9b:
7e:61:7e:0c:b7:38:f2:4e:37:8d:12:a3:39:7e:cf:c2:0a:0e:
23:0f:19:f1:17:4f:55:da:ce:1b:da:87:ad:60:a6:48:a5:3e:
db:39:7b:15:c6:8d:5b:f6:9b:8f:a4:6f:64:9d:25:1f:ae:b3:
67:d6:8a:aa:73:cc:de:86:cd:94:46:86:76:0c:76:4d:e2:a8:
71:53:97:b7:95:31:23:26:90:d3:e6:55:a2:13:b9:21:34:bf:
ef:e3:82:f5:ef:9e:bd:fa:ef:03:3e:6a:73:a8:cb:6b:ce:05:
97:20:25:62:9a:5c:4e:a5:03:e0:b3:9d:5b:94:da:0e:63:d3:
31:ce:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:22 2025 by rpki-client