Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: ok4O9tvtqm+Ph7v6KyJdtvZMroUMD6HjbMlqsYU7KXY=
Subject key identifier: B1:DD:FE:5A:45:BF:4D:AD:18:71:7D:D4:CD:D1:2B:D3:5D:62:C8:65
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019A7225D55BD5A10A7ADC167B650D1FC87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0A67
Signing time: Tue 11 Nov 2025 09:01:13 +0000
Manifest this update: Tue 11 Nov 2025 09:01:13 +0000
Manifest next update: Wed 12 Nov 2025 09:01:13 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: nJbRmsOqWvsevG9rpHhMb5Gneij/PWXDMcT00O02cUo=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d5:5b:d5:a1:0a:7a:dc:16:7b:65:0d:1f:c8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Nov 11 09:01:13 2025 GMT
Not After : Nov 12 09:01:13 2025 GMT
Subject: CN=b1ddfe5a45bf4dad18717dd4cdd12bd35d62c865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:83:a4:59:0b:53:01:9b:59:03:05:17:86:
5c:65:a5:37:35:d5:b2:d4:69:c4:ee:a1:e2:65:29:
5b:c6:53:6f:92:d9:5f:33:40:6c:78:fa:b2:71:7d:
9d:09:8c:e8:2f:f6:71:02:eb:e8:38:0e:2b:7e:ce:
f3:7d:13:f7:9b:f3:7c:d8:ce:b5:82:07:f3:f3:f6:
d0:11:22:04:eb:15:59:71:0b:d1:f4:11:ea:be:e2:
8c:c3:33:76:d5:f8:08:62:d9:09:60:7f:b1:50:f3:
12:f3:eb:6b:e2:3b:1a:23:d1:4c:3b:af:6f:4b:f3:
04:37:be:93:4c:b3:db:75:de:3e:bc:1e:2a:da:6f:
77:ff:b0:65:0f:99:97:b5:c5:b9:0f:58:e1:f9:82:
aa:b4:01:dc:9b:6d:3a:05:e1:3a:a5:f6:73:90:a2:
36:e9:1b:de:ed:9b:a5:a5:7b:c9:dc:7b:f9:05:af:
d7:21:64:81:6e:2d:82:76:96:85:e7:8f:f9:f6:e8:
8b:80:86:3c:76:ae:9a:3c:18:d9:fc:23:2c:f1:a3:
84:fd:d3:26:fe:5b:a9:96:c0:21:6e:55:d8:d9:d1:
57:b7:72:dc:2d:2e:a6:d3:c2:2e:9b:33:f9:13:c7:
ee:54:26:1f:a1:df:1a:6c:81:c5:0e:f6:08:2d:ea:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DD:FE:5A:45:BF:4D:AD:18:71:7D:D4:CD:D1:2B:D3:5D:62:C8:65
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:51:f5:d2:4f:2d:84:f6:97:8a:43:03:99:24:74:26:14:
54:89:43:1e:7f:1c:e0:bc:c9:57:85:56:ce:3a:05:34:d8:d5:
7f:27:93:9f:03:af:ea:0e:8e:70:b4:1f:41:0f:ec:f3:f8:1d:
cb:4f:92:44:42:37:6e:33:e7:49:82:f5:75:ea:f9:df:c4:0c:
1e:f6:36:7d:98:12:95:56:b5:90:df:75:6c:5e:b7:80:3e:b1:
bc:f5:82:60:b5:12:cd:4e:30:eb:79:87:97:9f:cf:24:cd:1a:
10:d3:b4:48:c5:b5:6c:ee:47:f1:3f:76:57:84:c4:40:c3:9f:
0a:cf:fb:70:23:50:85:ec:5b:3e:3a:de:df:95:7e:7e:15:13:
a1:1a:a6:5f:0a:48:21:06:ff:55:32:45:81:24:0f:01:10:b7:
98:35:66:ea:c3:8b:54:0d:53:bd:db:f6:7b:bc:96:6b:9b:8f:
1f:ef:b6:8d:87:4a:7c:5d:75:1a:e1:bc:d2:cf:2c:c4:8f:27:
b6:1b:8a:07:fa:ee:5b:b6:c3:ec:9e:44:2c:94:6f:14:87:33:
0a:82:e5:e2:77:2e:97:1a:fd:e6:0e:5c:b3:fa:f7:2b:74:ec:
9f:2b:1c:a0:5a:ad:c2:59:f1:2a:3c:d0:31:bd:b7:38:26:bd:
03:5b:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:05 2025 by rpki-client