Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier: wPll1ljhkOTZn+iAv+OM85/3CFM4csAYdMysY1G37gI=
Subject key identifier: D7:E8:56:1D:68:A7:34:D9:D4:D3:1A:B0:BA:49:05:F7:23:ED:B8:5A
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer: /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial: 019A725C4E11FCC0CE6293D234F2AC93644E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number: 13E0
Signing time: Tue 11 Nov 2025 10:00:43 +0000
Manifest this update: Tue 11 Nov 2025 10:00:43 +0000
Manifest next update: Wed 12 Nov 2025 10:00:43 +0000
Files and hashes: 1: H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa (hash: vyyHUtBQsEXAg98AdmKq411tDHnSJnqHMROP1JZFAyQ=)
2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: Ivdd8hKTbY7DTsIKXMP+Mjgucc9gYJtYIRsl21JKuoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4e:11:fc:c0:ce:62:93:d2:34:f2:ac:93:64:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Validity
Not Before: Nov 11 10:00:43 2025 GMT
Not After : Nov 12 10:00:43 2025 GMT
Subject: CN=d7e8561d68a734d9d4d31ab0ba4905f723edb85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:c2:f8:8a:ba:9e:c5:e5:a6:23:79:1f:b5:
3d:c7:ed:d9:0d:da:e3:4a:54:75:42:a5:e2:cd:30:
8a:54:14:39:0b:b1:2d:e8:7d:1f:b4:4c:37:23:66:
6e:72:1b:88:b0:8c:32:95:70:a5:ca:23:64:56:ef:
1d:43:4e:a5:48:c8:6f:98:24:fb:be:e8:b1:40:cf:
5c:39:73:05:b7:03:91:be:47:84:ae:05:d8:15:6d:
7e:49:da:ff:3f:c9:0a:c6:b5:68:c9:4d:5e:77:02:
97:86:d9:67:06:f8:16:46:ac:77:f2:57:51:ff:37:
e5:fd:74:00:02:78:2d:31:7f:0d:a3:6f:1c:f2:81:
e9:b0:e3:4e:17:f4:05:a6:ca:d2:76:c3:bd:68:cf:
96:ed:6c:dc:a3:02:ea:2f:eb:cc:8f:25:c5:e8:70:
39:2f:e1:37:71:8c:cb:7c:96:9b:36:3f:47:fd:0e:
71:8e:8c:4e:15:7b:6d:55:0d:52:73:59:89:a7:5a:
47:21:40:ac:50:41:9d:1c:74:9b:e1:b9:f4:f6:ef:
3e:3f:da:ae:bc:4e:b7:29:9f:ac:8b:b4:8b:76:ed:
8c:31:50:4e:a7:9a:61:e4:b7:2e:24:84:96:e4:b4:
ec:e2:89:af:16:ce:13:d0:8c:7a:06:5f:86:2a:8a:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:56:1D:68:A7:34:D9:D4:D3:1A:B0:BA:49:05:F7:23:ED:B8:5A
X509v3 Authority Key Identifier:
keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5d:90:7d:71:00:ec:bb:82:06:38:e7:8a:4c:47:9f:46:a8:
4e:68:c5:a2:1f:19:2d:42:a0:bb:87:5f:a4:3c:fe:b1:2a:5d:
0f:e3:47:87:82:93:60:e7:2c:d8:75:c1:97:da:a9:39:ce:6b:
20:b2:b5:b6:40:8b:32:f0:b5:87:81:7e:3b:af:cc:01:92:aa:
d5:a8:20:8d:38:c0:ec:6e:48:e5:c6:80:c6:76:8e:06:02:06:
09:86:c9:ce:69:af:e5:3a:12:41:02:f7:46:03:44:c9:41:50:
bf:6f:07:56:53:0d:de:27:4e:45:e0:85:f8:d1:3c:c3:a1:7f:
5d:8e:78:80:71:97:23:06:6a:a2:a0:91:9b:74:2f:de:19:eb:
1d:27:95:17:da:46:60:36:6a:52:1d:df:69:b0:7e:eb:79:ea:
e7:9b:b3:c2:4a:a5:97:e7:1c:f7:aa:8d:2b:3d:ec:21:2f:f0:
71:04:b6:cc:f2:5c:c7:56:83:2b:c8:43:5d:86:22:dd:ea:5a:
94:24:46:de:77:82:1a:54:ca:8c:fb:7b:d2:93:00:26:bc:5e:
03:85:d2:e3:5d:b8:d6:5b:41:89:b7:1b:62:50:7d:49:a4:b4:
71:2d:59:36:68:19:b5:20:1f:15:10:27:df:86:a1:00:df:14:
6c:32:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:47:25 2025 by rpki-client