Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier: HaUXPVRRlpNrFseHoAGXkaApbV5uRUQiYiSCcs3o8iY=
Subject key identifier: 74:13:62:49:26:7E:2E:3A:CA:DB:6A:94:76:98:CB:57:1E:F8:AA:D6
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 019A71B7B1981D9CAA0BC9E6B8336AF2CAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number: 10E4
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: E6xeE6AZdBYr+OmobZk5S7y1+3aUKZ+t5hn8UXMgVGc=)
2: wMviITx4-Ydrde8DagnvJudrSTQ.roa (hash: Bhx7NILq0TmOVBjEhBEQzkx4nDg+vAlvQ+Bo2NSJwBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b1:98:1d:9c:aa:0b:c9:e6:b8:33:6a:f2:ca:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=74136249267e2e3acadb6a947698cb571ef8aad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:24:c9:6c:20:17:47:73:2f:d1:19:2c:21:
60:09:f5:11:98:46:e5:5b:68:a2:b4:49:65:6b:3f:
7f:c1:9e:ad:8f:9b:4c:3c:90:73:c0:79:94:80:3a:
6e:30:9c:13:3d:55:06:54:a8:af:68:94:2f:e7:f0:
33:75:2a:1e:e0:54:b0:be:1a:32:ff:6d:39:24:9b:
6c:0c:d9:f8:65:aa:49:19:b5:a9:f7:df:13:14:49:
6e:8f:e3:7b:b9:85:58:e5:ea:db:c5:72:a4:03:25:
c5:d4:74:1c:73:23:fa:97:03:25:90:41:40:40:94:
50:d3:d2:11:36:17:44:86:bb:2b:27:a3:36:cb:34:
e6:7b:c4:2f:79:5f:0e:61:20:0f:73:a0:05:5b:61:
ef:9e:2f:d0:7d:84:e5:50:59:ed:a8:5c:99:e7:97:
f9:6c:83:01:5e:9f:e6:fa:44:e4:2f:76:85:fb:24:
08:31:67:10:45:aa:31:e9:47:18:cd:c3:91:8a:e7:
8b:4f:12:06:68:ff:98:23:03:f5:93:3d:dc:af:d6:
73:d2:a6:a8:aa:24:34:60:8e:b7:d8:9c:96:97:71:
f0:6d:3d:3e:44:d2:a9:ed:47:0a:e4:a2:bd:91:ae:
1d:76:41:b8:d7:6b:64:ab:fd:95:a2:f5:ba:f5:2e:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:62:49:26:7E:2E:3A:CA:DB:6A:94:76:98:CB:57:1E:F8:AA:D6
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:6c:5a:8f:d7:1e:dd:fa:cb:42:4f:6b:51:83:42:e0:18:
08:d4:3f:5c:5f:7b:4a:c5:14:7a:f9:d7:49:2c:0d:5d:32:13:
3a:05:59:e2:76:38:3f:d0:a7:96:a4:b2:b7:33:8a:7d:13:4e:
ba:f3:f7:07:ba:46:69:d4:1b:ab:b8:7f:f7:3f:4b:aa:8f:31:
a5:c6:3e:df:f0:2a:25:db:3e:54:e2:5d:03:be:41:2e:2d:fa:
0a:6b:b4:12:d5:07:cf:70:5a:ff:bd:48:18:e5:21:e7:ea:ed:
c6:22:1d:b6:79:f1:7e:f4:ab:0e:c5:0b:3b:de:db:ea:2b:32:
88:a4:f4:ba:01:83:ec:a6:75:dd:dd:4f:36:8b:3b:dc:b1:d2:
fc:ca:5b:b4:d5:55:a9:0f:41:94:20:0f:d4:7b:9e:57:c1:be:
92:07:bf:e4:a2:af:2d:5c:2d:e3:21:dd:79:c9:19:a6:30:de:
78:c3:d8:e7:72:6e:83:50:19:ee:ac:b3:d9:ac:0e:b7:f8:e5:
f0:f1:68:8b:dd:06:46:ad:a8:40:43:26:67:d8:57:2a:b0:00:
c6:86:a8:01:4b:d9:8f:f6:ba:4a:96:e7:ea:1a:15:a2:65:0c:
1b:fe:d1:78:71:dd:d1:79:2a:e9:68:fc:6d:83:20:0b:99:8e:
f2:fc:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:00 2025 by rpki-client