Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: dWOBd4fkDOpCnD37EwMrLQw15ZnUUtUvjEEM6IcZtGM=
Subject key identifier: 13:64:FA:06:1F:4C:E7:81:2B:E7:79:F9:B3:0D:EC:46:D1:82:EA:AA
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019A70A4C41351697E5F61FFCC3480A738B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 0EE5
Signing time: Tue 11 Nov 2025 02:00:37 +0000
Manifest this update: Tue 11 Nov 2025 02:00:37 +0000
Manifest next update: Wed 12 Nov 2025 02:00:37 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: hywPCB/RtlBqkIRFjpDu7udyJVRCt12ZyAi9TcYPljk=)
2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:c4:13:51:69:7e:5f:61:ff:cc:34:80:a7:38:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Nov 11 02:00:37 2025 GMT
Not After : Nov 12 02:00:37 2025 GMT
Subject: CN=1364fa061f4ce7812be779f9b30dec46d182eaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:db:28:36:31:8b:44:55:db:24:42:59:2d:
44:b7:c0:8c:06:a7:52:5c:1a:c9:ef:41:a2:1e:87:
ec:bc:a1:1d:76:44:82:e8:40:4e:f6:26:1e:2c:02:
ef:e8:c3:e9:69:2b:c4:05:91:c4:db:8a:db:9d:03:
13:95:a0:2b:3b:27:c6:c2:4f:82:f8:4c:03:6f:7c:
14:b8:e9:d2:61:f6:3b:cb:0e:b6:5b:85:84:e3:f7:
69:a2:30:95:0d:12:d7:99:84:f1:3c:0f:d6:47:e9:
09:11:92:91:c9:cb:91:79:25:80:4f:d2:89:84:28:
9d:9a:b1:b0:27:81:e6:94:1b:be:a2:d3:c6:20:f9:
6d:31:7a:76:89:a1:bc:d7:7f:44:a5:97:62:f7:c3:
c7:72:c0:93:78:89:5b:26:13:58:b0:8d:7b:95:4f:
e7:b4:d7:a2:43:78:a2:58:26:7b:c8:6b:27:8b:cc:
25:53:07:37:21:b3:e0:4a:27:8f:b1:09:16:37:95:
00:be:01:f0:ec:43:56:78:e5:df:4a:37:a4:b4:23:
3a:69:31:17:9b:1c:88:d6:54:53:11:9e:f9:e3:b5:
70:cd:1b:0d:74:f4:40:06:f4:f8:cb:43:ac:08:9e:
f0:eb:d9:e4:3f:d1:c2:48:9e:3c:f4:36:9b:39:45:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:64:FA:06:1F:4C:E7:81:2B:E7:79:F9:B3:0D:EC:46:D1:82:EA:AA
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:de:12:fe:28:f3:81:63:45:05:80:26:44:c4:85:a1:44:19:
4c:e2:87:66:6f:0d:df:5c:16:d1:68:54:87:da:0b:de:b5:e2:
ab:f9:35:94:2b:24:d5:f6:91:0a:38:ea:14:d3:85:43:a6:0e:
44:40:d7:cd:61:6d:dd:65:0f:cd:b0:23:6f:56:9e:ed:d0:65:
31:74:c9:bd:b6:98:6b:d5:78:9a:14:66:c1:16:8c:9d:33:a0:
f6:ef:51:5a:af:52:c2:ac:a4:ab:13:0d:1f:3c:a9:4f:f3:8a:
40:28:83:7c:03:76:55:76:d2:4b:59:09:c1:bf:3d:7f:66:76:
a9:eb:28:0e:9c:32:8c:0a:91:fb:7b:3c:03:4a:8e:4d:ea:6c:
58:ef:d3:a3:ca:32:c0:47:6a:8b:cb:3a:d1:b0:60:61:8f:9e:
c5:12:b2:67:7f:86:ec:65:89:ae:74:67:ad:d2:aa:39:72:8a:
d3:9e:fa:87:e8:8d:67:3b:32:b2:b3:0d:03:56:e9:e0:4f:ab:
06:e2:7a:8b:48:b2:33:7b:3f:6a:cf:c9:30:12:5b:82:38:4b:
e5:e4:e8:a3:ad:cc:b3:68:2f:ef:ff:47:24:09:6d:a0:b2:d4:
38:af:60:e5:ca:77:7e:a1:06:0f:f5:9e:65:bb:7a:db:82:16:
53:74:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:38 2025 by rpki-client