Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File: 484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier: wA/kwJf7GGd1XKfu+ycDXHySbaC9dJDXE/8t4CbKp84=
Subject key identifier: 2B:78:C7:96:DF:BC:0D:44:3E:6A:2D:91:CF:3C:6C:B0:5C:82:12:56
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial: 019A72CA22E17258F7F5E7C999AADD2014DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number: 0DB2
Signing time: Tue 11 Nov 2025 12:00:41 +0000
Manifest this update: Tue 11 Nov 2025 12:00:41 +0000
Manifest next update: Wed 12 Nov 2025 12:00:41 +0000
Files and hashes: 1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: 63MAm/UtUAqy7V2fF3g6z0nYya3ELzNVZycoskgs9jo=)
2: qcoI9QRYFLMa_u8cjDZFd9W6S20.roa (hash: G2neLmn+8/k9VBrxT3PrvfgosA6NhKRornhd6evsbec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:22:e1:72:58:f7:f5:e7:c9:99:aa:dd:20:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Validity
Not Before: Nov 11 12:00:41 2025 GMT
Not After : Nov 12 12:00:41 2025 GMT
Subject: CN=2b78c796dfbc0d443e6a2d91cf3c6cb05c821256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:4d:fe:96:0a:ec:12:09:0a:43:d9:66:0f:
5f:0f:1a:37:ef:83:fd:c2:df:b6:17:fd:b3:6e:e4:
4e:3b:cc:27:94:73:09:76:54:24:71:9a:e7:33:2f:
cf:34:5f:b0:bf:86:a8:a0:ea:ed:ca:00:fd:44:90:
21:1a:8a:15:98:23:3c:bd:5a:a8:f4:af:79:13:44:
4f:6a:ce:85:e6:e6:6e:1f:75:27:d6:ef:a9:9c:4d:
0c:29:57:c2:4e:a5:e7:13:5e:a6:22:f7:f4:2c:c1:
89:c1:ea:07:c7:24:f9:fa:89:bc:3c:7a:58:f1:b4:
01:9d:16:fd:9b:ca:bc:06:7a:c6:28:88:5e:33:2d:
49:d8:39:17:0e:bd:4d:09:d3:94:96:52:a7:f0:29:
41:6d:af:cb:f8:61:8e:e5:5c:b1:4a:2b:03:e5:12:
1a:77:fd:c0:78:9d:42:eb:8e:12:90:25:6c:9f:37:
11:35:94:e1:be:4c:67:11:f3:df:18:63:00:fd:e9:
62:4f:01:66:5d:a6:7b:72:36:a5:a9:a3:fa:e4:c3:
44:f9:5f:3e:bd:fe:62:f3:5d:35:73:f2:7b:8d:69:
4f:71:c7:8f:98:e8:a5:e3:ab:9e:88:84:c1:3c:a8:
f7:c7:bd:c0:1b:2f:39:d7:7d:40:c7:0f:9c:09:5d:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:78:C7:96:DF:BC:0D:44:3E:6A:2D:91:CF:3C:6C:B0:5C:82:12:56
X509v3 Authority Key Identifier:
keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:91:3a:89:be:36:8b:92:69:6c:88:94:f1:f8:cc:19:ee:e0:
84:60:65:b1:6b:23:a6:91:68:75:29:68:56:9d:73:59:43:a2:
3f:5a:a8:d5:e0:30:a2:45:50:1b:2c:4a:61:af:03:20:9f:1b:
13:d8:0f:80:e8:b7:be:b1:0f:0f:9e:d8:a0:5f:c0:90:8e:16:
29:a0:a3:0d:fc:8b:b7:1f:53:3f:f0:2d:9b:5b:41:19:4d:65:
98:7d:42:6d:b7:4d:54:26:fc:ce:f4:c8:6c:cf:33:3f:e3:5c:
66:0b:51:36:5e:54:b3:2b:8b:c7:11:9f:a8:d7:0a:03:2e:a8:
c8:39:73:fb:80:5a:9f:60:29:61:64:a0:fe:8d:3e:ab:cd:c6:
8f:5a:69:93:47:c0:e9:0e:13:19:d1:10:d4:2b:d1:b3:eb:83:
98:30:fe:0f:e4:be:e0:05:c5:a6:71:37:fd:2e:79:8e:25:b5:
93:25:38:f3:7d:5e:24:28:de:35:e1:15:22:92:38:2c:74:85:
f4:27:ce:98:01:f5:6e:84:95:e8:46:5c:eb:c5:fc:b6:fc:89:
0d:40:23:e0:69:c3:b3:88:40:06:ef:d9:b3:29:03:56:be:1a:
ce:4c:3f:6e:79:fc:d5:17:c9:50:a3:e9:89:64:70:0f:6e:b3:
b4:c4:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:55 2025 by rpki-client