Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: rlfMe0crkKiT2CWL41WpKyq97MBtAOn2EIF+8e+2cDc=
Subject key identifier: 35:ED:AF:ED:26:88:F5:FE:54:E6:D4:DF:9C:7E:8F:E7:24:44:C0:2E
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 019A7149F33846CAAD97D89F9358EF6A730F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0DA2
Signing time: Tue 11 Nov 2025 05:01:03 +0000
Manifest this update: Tue 11 Nov 2025 05:01:03 +0000
Manifest next update: Wed 12 Nov 2025 05:01:03 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: Epgr/bZJeM1djut90Ct15kB02yzbqIP1bt3tu3Veqyg=)
2: cmLjyeJCay-rIpV13cL4nS3umqA.roa (hash: zv80BsoFgYMaUhk2eqxE9kG1WrpCEraiiqsDzPaa4r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f3:38:46:ca:ad:97:d8:9f:93:58:ef:6a:73:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Nov 11 05:01:03 2025 GMT
Not After : Nov 12 05:01:03 2025 GMT
Subject: CN=35edafed2688f5fe54e6d4df9c7e8fe72444c02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:ea:1d:f6:a9:fa:81:94:34:0f:a3:70:13:
2a:f2:36:b1:9a:dc:28:1a:c4:f6:bd:df:bc:dc:17:
ac:b0:fd:c0:26:f9:b5:ce:e1:f3:5a:4a:08:a3:b4:
7c:f7:21:6f:d2:6f:11:9e:23:4c:88:1c:9f:39:9c:
01:d8:44:83:d3:88:5b:ea:3e:82:b3:31:97:b0:94:
f3:c4:64:33:da:c8:e9:dd:4d:28:60:26:f4:cd:71:
04:f4:04:1a:26:88:78:fd:52:3d:c0:4b:a4:04:73:
3a:78:1a:40:9c:a3:09:9c:22:69:d5:09:b2:ff:fe:
89:55:4f:5b:cf:12:20:14:69:e0:3e:fa:a8:58:f4:
50:ff:9e:9d:6d:a3:97:01:00:32:26:1d:50:c2:86:
2c:ed:91:5b:d0:24:01:79:ed:d4:ba:41:8f:d5:41:
17:e5:eb:78:c1:e6:56:ba:44:7e:21:07:f1:de:28:
92:87:d4:f6:ea:06:c0:f5:e3:30:81:f3:2f:80:be:
75:b7:23:d2:98:66:f2:c6:14:ca:fe:d4:a5:88:7c:
a0:b5:25:03:4e:22:71:93:76:8d:6a:85:3e:9c:b9:
41:28:66:f5:10:69:ac:3e:e1:94:60:fc:6c:2e:6f:
3e:66:07:34:ff:e0:5e:d2:5a:e4:58:a2:41:8d:ca:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:ED:AF:ED:26:88:F5:FE:54:E6:D4:DF:9C:7E:8F:E7:24:44:C0:2E
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:90:ea:6b:7b:6c:a3:0b:c0:a8:bd:46:a7:15:cd:b1:f6:ee:
71:98:fd:13:ac:9c:67:45:28:93:c0:1c:ef:ba:b5:5e:f4:23:
27:c2:e6:8b:84:45:15:2e:63:62:c4:90:2d:54:1f:82:30:1a:
3f:48:cb:86:61:db:5d:70:dc:01:06:bb:61:00:df:a2:f5:5a:
da:1e:ed:5c:48:97:ea:66:7a:4d:bb:73:ad:2e:dd:c0:fb:13:
73:d5:54:8e:6a:d6:0f:91:46:26:7d:17:d5:ef:8a:b7:4d:dd:
95:f1:0a:80:27:63:71:74:74:2a:e4:05:d7:d3:05:6a:33:c0:
00:53:1d:da:8d:89:41:b1:c7:e3:a7:8d:0b:f2:4d:62:91:a7:
f2:8b:97:9f:86:fd:72:d6:00:47:46:55:4c:59:c3:be:49:db:
9f:d2:1f:c3:80:88:3a:64:2e:7b:77:fb:14:d4:9f:86:6b:63:
e2:96:fd:f3:27:c9:c9:c5:82:e1:aa:8f:87:56:40:44:56:cf:
b3:3c:d3:e7:73:3e:e3:52:77:ca:8e:47:9c:ed:97:d3:d6:9e:
62:c7:b4:6f:14:0b:4d:fc:9c:45:e6:f2:5b:7e:fa:48:32:8a:
0b:13:df:75:1a:dc:7f:32:6f:65:e0:e8:cd:7a:ce:0d:4c:cd:
e7:8a:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:12 2025 by rpki-client