Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier: EmTQiV2mLGgzLmT+lrcvlRP87YSH23e4MpLLfR7St1Y=
Subject key identifier: FD:9E:35:87:64:A8:5A:11:FB:03:51:9B:EC:B2:D6:C4:51:97:45:99
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer: /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial: 019A72CA80F4711D466B091B196BAE0EE8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number: 08B9
Signing time: Tue 11 Nov 2025 12:01:05 +0000
Manifest this update: Tue 11 Nov 2025 12:01:05 +0000
Manifest next update: Wed 12 Nov 2025 12:01:05 +0000
Files and hashes: 1: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: 5WWuQe2DVjXPTwxp0NVOjwcuOhgstOVIP/4herqydzk=)
2: ScldZDNPQSfRnsRt5khqoPE91NU.roa (hash: KUeiCd9GvmA+LCWqv73j10Yntn6kGl4O83uDHMjp9xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:80:f4:71:1d:46:6b:09:1b:19:6b:ae:0e:e8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Validity
Not Before: Nov 11 12:01:05 2025 GMT
Not After : Nov 12 12:01:05 2025 GMT
Subject: CN=fd9e358764a85a11fb03519becb2d6c451974599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:3a:e5:df:42:3e:ae:5c:d8:52:9f:35:35:
18:63:d5:63:02:44:12:1d:32:5c:2a:e0:2f:d5:1f:
ec:d9:d1:29:1c:f1:a9:ca:26:85:37:89:21:1f:cc:
e8:3d:c7:8e:0d:be:15:a0:f5:17:58:6f:96:5b:a1:
87:12:7d:56:22:22:5a:6b:f3:69:2b:82:b6:82:a4:
b1:98:b3:14:dc:78:65:d9:18:b8:44:47:58:e7:0b:
7f:81:7e:01:fa:6e:5d:72:a8:1b:ff:c1:a8:10:54:
4c:14:af:aa:98:20:c0:05:3d:94:a7:93:21:e6:e4:
07:9a:06:60:47:1c:89:6a:0d:e0:43:1c:ab:4e:50:
10:82:f0:fb:89:78:19:34:ed:92:33:71:96:55:ae:
12:96:4f:56:be:b8:a3:f6:b5:b5:7e:f8:73:0d:31:
4e:31:2b:c6:ce:2d:d9:e0:e9:7e:71:91:76:22:d3:
fe:b2:c7:59:ca:a1:71:35:7b:45:cd:a4:16:04:46:
4e:9d:fb:b1:11:10:a1:cc:d8:69:b1:4e:29:84:85:
88:27:f4:6a:03:79:86:86:d7:57:9b:fb:0c:ff:70:
63:f8:0a:27:49:6f:8d:e5:7e:a0:56:9d:7c:6e:97:
24:1f:73:e4:0f:bf:09:99:77:77:d1:dd:28:3b:67:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:35:87:64:A8:5A:11:FB:03:51:9B:EC:B2:D6:C4:51:97:45:99
X509v3 Authority Key Identifier:
keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ec:ec:59:6c:7b:ba:1d:f6:ed:35:e6:e1:54:41:76:7c:a0:
c8:28:50:c5:8c:bb:34:a7:98:15:2c:6c:a4:bd:6b:1b:b9:fe:
5d:a4:8f:49:2c:07:07:5d:1b:35:58:0c:a0:7b:6a:2c:35:09:
18:45:21:74:cc:bb:b8:e2:86:3b:6a:2d:20:32:29:53:a5:35:
e4:37:b0:54:6a:3f:84:e8:d0:54:45:47:7c:80:86:c9:80:85:
4e:3f:ae:ef:1f:b5:cd:60:48:04:a8:0d:c1:55:4e:60:e2:4d:
d0:7d:aa:0b:31:b4:94:a8:f0:1e:66:bd:90:fc:59:d0:43:d1:
20:ca:67:95:5a:25:55:c2:3b:1d:f2:08:39:0f:3b:a3:36:ea:
e3:b9:5a:bf:63:8f:84:19:a4:a3:87:44:fa:ff:c1:56:79:6f:
4c:23:d1:54:de:63:18:3c:68:9e:47:84:91:bc:a2:86:7e:c4:
70:d8:ce:8e:ee:4a:00:13:d4:bb:67:eb:2b:a0:7d:86:80:13:
fc:1f:a5:51:11:8a:1d:dc:42:28:72:55:51:0b:5a:e1:16:b6:
8a:3a:a4:ad:5e:6b:f9:27:1b:34:95:fb:1d:52:4c:c3:fe:13:
d3:31:43:0f:43:7f:1a:40:46:5a:80:98:ce:fc:90:d1:c3:57:
f2:61:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:18:01 2025 by rpki-client