Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
File: _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json)
Hash identifier: KAwcEWp/Ng+a1eM5jdklqUsNvGDb+Xq7zQQS9EAZWJw=
Subject key identifier: 1D:99:CE:B2:5F:B7:73:72:E4:67:E4:29:CA:A1:11:A0:79:00:EE:2F
Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Certificate serial: 019A71809EDC1B50A60BFE407F37C5524203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: gUnjwv+ypRBv+0BYMnBgvId59FxYIUmvFgJDAWr/lPo=)
2: f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa (hash: wIswSAYWyn5DfKJXI+1/UX9k25/3bD/WegnGLFLzMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9e:dc:1b:50:a6:0b:fe:40:7f:37:c5:52:42:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=1d99ceb25fb77372e467e429caa111a07900ee2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:1e:40:bd:69:dd:07:77:42:a1:ed:6f:67:
d2:65:74:14:c1:59:cb:2e:b0:1f:43:22:8d:b7:37:
2b:81:15:81:8f:2c:57:7d:ad:0b:26:d2:47:21:fd:
48:4b:e4:94:40:40:8f:e3:55:c2:e6:42:be:72:95:
28:ea:37:81:52:4a:07:7d:45:ba:07:ff:30:ec:8e:
3f:41:73:47:1a:ac:e7:e8:81:aa:27:25:5e:08:79:
7c:01:56:63:87:9f:ea:ad:37:56:f9:76:54:14:2b:
03:a2:27:0f:4b:03:80:e9:27:a3:58:f8:a8:98:a8:
6d:e6:42:9f:b8:4e:25:78:2f:d7:9a:d1:5e:e1:d7:
5c:63:ed:b8:b1:dd:42:05:ed:f3:47:97:47:11:4a:
87:a3:b5:37:e3:af:83:59:76:60:e3:b3:ff:07:32:
91:1b:c1:a1:cd:a5:30:9c:e3:96:b9:56:30:de:be:
32:d9:9e:38:13:6b:f6:5d:3f:06:15:65:75:89:b9:
04:06:0e:26:b0:21:27:65:dd:3d:03:4f:11:54:a7:
1b:a2:c1:c5:80:c2:01:85:f3:d0:9e:db:8b:9c:d4:
e6:12:3b:5c:b8:b9:88:ad:1c:b9:8a:01:b6:ce:ce:
1a:6b:e8:a6:9f:a1:62:0f:e4:06:d3:75:2d:fc:37:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:99:CE:B2:5F:B7:73:72:E4:67:E4:29:CA:A1:11:A0:79:00:EE:2F
X509v3 Authority Key Identifier:
keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:88:a5:43:6f:20:3f:2d:cb:28:cf:a1:cf:8e:e2:43:7f:19:
b7:e9:7f:c9:0d:3c:1e:5a:05:fc:a3:96:4c:7b:09:90:ee:d4:
cc:42:65:a8:b7:ed:a4:ac:54:29:a5:da:4d:af:e2:4d:7a:7f:
bb:0d:53:40:e6:6f:84:93:b7:2d:f7:45:90:94:ba:fa:96:92:
41:db:3b:11:8c:06:1e:d2:3b:ed:65:32:a8:62:4c:3c:e0:62:
a5:ee:00:46:a3:fc:e3:7f:e8:8c:41:51:c7:aa:c6:47:77:ab:
d3:8d:64:e5:5c:7d:92:b9:e6:e7:9b:7c:1b:5c:f7:87:ee:9e:
8e:04:a3:37:93:a9:1b:99:d9:46:39:cb:2a:08:cb:a5:4a:6a:
d3:fc:21:24:4b:43:ea:1c:87:e0:ae:7d:a1:1c:21:8b:ea:3c:
19:df:b5:99:ea:6a:2d:88:07:36:ee:a9:bd:2e:12:28:d1:f4:
06:0c:83:11:06:a7:fa:9b:e8:58:51:b4:35:68:b0:21:0a:35:
bb:e3:14:1d:02:f8:2f:e7:28:b0:9d:bf:88:26:60:90:65:9d:
d1:8c:51:01:a4:2b:cb:fb:19:c4:75:42:44:4b:83:da:41:17:
51:15:7a:fc:62:15:06:9d:be:77:8a:d0:f0:c5:f7:19:90:a9:
19:65:30:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:43 2025 by rpki-client