Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File: _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier: Xl/+cFb577jYIld7vqprDFKgzCaXflWyNmt00jSks0M=
Subject key identifier: E7:DD:7B:8E:4F:C5:2F:B0:35:A0:B7:90:89:FE:5D:C3:BC:84:DA:B6
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial: 019A72CA96B052AA4D098B92A9AC1BC3F0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number: 06ED
Signing time: Tue 11 Nov 2025 12:01:10 +0000
Manifest this update: Tue 11 Nov 2025 12:01:10 +0000
Manifest next update: Wed 12 Nov 2025 12:01:10 +0000
Files and hashes: 1: 9iTVcABMKXRZ-jDsWu-61gCPaTM.roa (hash: np3kCerAysjg7QMTKvS1rZseKRBoSzKlF7Gczsl6PKA=)
2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: BoldmWoyk8+w/Z4CqsQC6VW9VEoQJ4laUY5ypNupuqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:96:b0:52:aa:4d:09:8b:92:a9:ac:1b:c3:f0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Validity
Not Before: Nov 11 12:01:10 2025 GMT
Not After : Nov 12 12:01:10 2025 GMT
Subject: CN=e7dd7b8e4fc52fb035a0b79089fe5dc3bc84dab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:e8:39:08:3b:2f:d8:24:a6:ca:62:20:f2:
e5:cf:2b:f6:d8:b2:4a:0c:71:27:ab:c4:58:40:f9:
db:fb:44:5a:5e:a7:0c:93:ee:ad:79:45:e9:66:03:
8c:f1:81:51:fe:36:0e:c5:9a:a3:ea:bf:30:c5:03:
07:18:9c:38:eb:14:8b:75:e1:3f:54:93:06:55:62:
d9:3f:bd:3f:c4:a6:9d:66:1c:45:b7:b8:7c:37:b6:
5d:50:0c:56:a9:c2:55:45:5e:f4:ed:b7:ef:e6:02:
be:a5:ca:d9:36:eb:56:7e:1a:81:ab:7e:13:69:22:
bf:e8:26:45:ca:be:9a:b3:59:ba:1a:84:e3:af:2c:
48:b8:29:ca:72:5f:e2:4d:4d:18:bf:4c:7f:9f:0b:
4c:ab:9d:d8:eb:3a:c1:17:b9:58:7f:be:e7:1b:31:
fc:61:bf:2f:24:c3:4a:63:a4:cc:98:e2:31:5b:e9:
85:e4:21:0a:8c:c9:ba:b3:c9:5e:49:5a:e4:98:b9:
65:f8:38:eb:7b:cd:f8:d6:d0:db:95:da:a6:c2:77:
a9:f1:77:aa:e8:7b:c8:1a:34:91:5a:39:3d:bd:d5:
fe:2e:dc:0f:29:57:54:cf:a3:4a:70:5f:2b:1f:c8:
83:62:cf:9f:04:b9:da:1c:19:49:95:53:e0:ed:37:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:7B:8E:4F:C5:2F:B0:35:A0:B7:90:89:FE:5D:C3:BC:84:DA:B6
X509v3 Authority Key Identifier:
keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3f:fc:37:95:0a:17:31:8a:49:ae:e5:37:76:61:6d:8a:27:
12:d6:da:85:3e:24:87:83:d2:99:6b:43:56:f0:a8:97:7d:63:
d9:54:31:ef:a1:fe:68:3d:a3:1e:a2:13:0c:80:f1:1f:a5:7e:
2d:42:09:b1:0d:1f:c4:10:03:89:08:0f:b2:fc:e3:21:06:30:
7b:85:6b:a3:77:8f:36:1e:3c:e6:cb:b5:f8:74:ee:09:b3:d6:
72:13:67:4f:18:99:f2:24:1b:51:aa:6c:81:4b:c6:f2:e9:22:
16:46:1e:81:9c:a4:88:2e:c5:18:8a:11:b0:f1:26:21:a4:f7:
75:1f:18:30:0e:4b:ed:25:30:e0:6f:41:cf:b0:1b:5a:e8:0a:
29:60:e3:a4:1a:12:a0:0e:8a:a8:83:23:d7:d2:f4:d1:66:c7:
fa:09:a6:7b:88:2d:1c:e5:21:6e:d8:99:90:d6:b0:61:df:62:
1e:9d:dd:ad:c8:8f:74:dd:13:04:c8:1f:5f:32:bd:b5:e2:26:
f8:2b:30:ae:b2:8c:04:cc:90:2a:00:d5:58:40:0a:80:5c:db:
d3:b0:de:f8:d3:78:e7:af:3f:a7:48:23:8e:b5:bb:30:f6:19:
4d:eb:44:cf:3c:82:9d:c2:ab:79:a7:ba:a8:f8:c4:95:b2:ee:
b1:6f:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:41 2025 by rpki-client