Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
File: sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json)
Hash identifier: Bo+hvQ2oXFtsrqCuejPGNUsJWjZvRwAw3bHQpKsB3/4=
Subject key identifier: D9:C5:B1:3A:1D:1C:52:DE:C4:2A:B5:0A:A4:B2:1C:DC:03:3F:6B:FF
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Certificate issuer: /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial: 019A706E6C9067333C19B1DB152B28DF3DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
Manifest number: 07E2
Signing time: Tue 11 Nov 2025 01:01:16 +0000
Manifest this update: Tue 11 Nov 2025 01:01:16 +0000
Manifest next update: Wed 12 Nov 2025 01:01:16 +0000
Files and hashes: 1: ALNKyGQyY09MK9vl3O2X07J6-JA.roa (hash: H9wbzE6PP25p3vlBAxK5eVjK/F1/4ACUWAsYKWxNkUQ=)
2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: /z+4r170s18Y31MF29cpN2CqyqQYgbHL26Dham1karE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:6c:90:67:33:3c:19:b1:db:15:2b:28:df:3d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
Validity
Not Before: Nov 11 01:01:16 2025 GMT
Not After : Nov 12 01:01:16 2025 GMT
Subject: CN=d9c5b13a1d1c52dec42ab50aa4b21cdc033f6bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:88:75:9e:75:7a:fe:66:61:6a:e8:c5:f0:
bb:12:8f:82:ea:22:d2:73:92:da:a5:1b:56:e3:58:
44:27:70:1a:c1:42:f7:22:68:1d:aa:97:37:68:d9:
76:e0:9c:7e:2e:a9:22:2a:36:39:d3:94:f6:3e:3f:
fa:9b:5b:65:1b:75:2f:a1:c6:24:4a:1c:2b:3b:33:
2b:67:8e:d2:bd:8e:d1:73:1b:8b:20:10:8b:f0:21:
a4:57:ea:ce:cd:0e:ad:b1:82:93:08:d1:91:e4:f6:
5f:92:3d:cc:1e:38:13:54:5e:3d:21:0a:7b:a4:d7:
85:ef:7a:4a:7b:91:d0:53:78:f2:b6:0e:96:81:55:
76:08:b8:92:4a:2f:a3:77:5e:18:e8:00:f7:5d:34:
54:76:d6:fa:48:fa:b8:fa:45:b8:c0:2e:c8:70:72:
a9:59:33:c3:e1:c3:1e:41:95:ba:ba:b6:d5:06:46:
ea:89:c2:80:5e:35:c9:e6:bb:da:08:09:ff:09:ec:
94:4f:0f:f6:5c:32:c8:c6:cc:da:17:8b:11:5a:30:
c2:d9:d7:34:7a:75:70:00:63:1a:e1:c0:b1:ea:2a:
a8:5a:10:c3:03:55:67:2a:9e:84:25:ee:85:83:89:
a7:30:03:11:3a:70:0e:02:cb:2e:b3:a0:13:00:58:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:B1:3A:1D:1C:52:DE:C4:2A:B5:0A:A4:B2:1C:DC:03:3F:6B:FF
X509v3 Authority Key Identifier:
keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c2:d4:2f:d0:a8:a5:d3:fd:48:22:b4:95:67:61:48:c0:7b:
1a:fa:ef:94:79:f7:06:b2:b4:00:3d:3d:dd:6a:0a:5e:56:89:
57:38:6c:99:6a:8f:2f:9f:0b:e2:0f:80:71:01:28:6d:a8:9e:
0a:0c:1f:48:8a:6f:51:5a:ee:82:6a:2a:52:d5:60:35:83:98:
9d:44:04:49:7d:f0:49:cf:69:7e:90:d5:4f:88:97:a5:01:a4:
3a:2b:db:d1:6d:c1:6c:69:34:30:5a:1e:5f:b2:c9:a7:f1:75:
f7:66:3e:ad:9d:87:48:68:a2:58:16:11:7d:8d:a0:49:5d:bf:
42:25:5e:db:e6:a9:be:61:ea:bc:9a:49:8f:a4:f7:ab:7d:8e:
67:10:24:c9:f9:6a:70:13:34:9c:00:e7:67:3c:0f:58:8c:78:
93:ed:ad:3b:dc:82:0d:9f:23:09:47:fa:20:93:63:80:ba:b0:
c8:1a:2e:2d:66:55:d8:de:1b:90:20:f4:d7:cc:18:c9:fa:72:
af:71:04:b7:4c:f3:11:79:67:77:b9:29:e4:e6:15:e8:f4:01:
71:f7:d1:32:c3:6b:f1:bb:86:b9:7d:34:ab:9c:7e:8a:7c:21:
b2:be:33:23:15:5e:e5:03:d6:43:44:27:79:b6:a1:90:1b:01:
2a:88:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:31 2025 by rpki-client