Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File: cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier: nOT7ZuXETsI1KDD7aplz4MXQPMWJGMvqLxSkqGgl8MY=
Subject key identifier: 90:D1:BD:9A:F2:D3:89:6A:04:6D:CB:7B:D0:EF:4B:8F:DF:6F:23:65
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer: /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial: 019A7225E120EF7A89011182CC7CBAECAE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number: 0E1B
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: _VNZcr3EYGlXqjzpoEk_KD5xeQo.roa (hash: q7OjuouQNM7VgrvgHXW4IBw772Y+anjbTLeMEEPFDVg=)
2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: p+eSO77MbVsYf8VW8ppaQV7yGl760vL+5TSoleuXJos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e1:20:ef:7a:89:01:11:82:cc:7c:ba:ec:ae:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=90d1bd9af2d3896a046dcb7bd0ef4b8fdf6f2365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:7c:24:ef:5f:1b:e9:03:ce:8c:dc:9c:db:
1e:3a:af:f2:9f:37:1e:8a:10:f4:9d:81:e2:52:73:
a0:26:23:82:7e:89:20:45:eb:47:44:63:8b:4b:ec:
1f:9f:cc:8e:54:e3:da:e1:a2:b7:51:e3:c6:ef:05:
c9:9e:3c:ae:1e:a0:12:72:9b:a4:0b:0b:74:21:45:
09:50:2d:e6:0a:63:04:42:08:33:50:95:09:30:e0:
0d:d6:68:db:df:fc:fb:9e:76:e4:a9:48:cb:dd:35:
13:c2:19:95:01:3d:f9:17:3a:3e:ed:55:2c:17:2b:
0f:56:83:52:8b:e5:d8:58:d3:94:cd:db:db:ab:82:
63:42:47:76:f4:06:43:6a:3b:58:92:61:83:f3:8e:
a0:6b:34:0b:dd:44:b4:ee:77:b1:ae:f9:32:e9:d7:
da:51:9b:f6:d2:4a:77:31:34:c9:a2:84:22:42:f1:
6b:aa:32:48:35:52:b4:42:6e:ed:e7:9d:e7:c7:0e:
c8:3b:f2:90:75:d2:3b:af:98:d0:30:27:8f:5b:2c:
1a:5b:86:15:0b:1f:2c:08:05:30:fe:38:c5:c9:50:
36:4c:be:f9:91:ce:18:fc:57:0b:33:35:95:48:1e:
4b:e9:c3:66:02:f1:d3:88:46:6c:04:6c:48:80:32:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:BD:9A:F2:D3:89:6A:04:6D:CB:7B:D0:EF:4B:8F:DF:6F:23:65
X509v3 Authority Key Identifier:
keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:31:e1:83:08:6a:53:34:92:bc:69:50:71:81:c8:72:97:61:
21:48:62:37:e8:92:67:ae:72:df:3e:98:3e:cf:98:ab:6d:43:
83:72:ab:c4:be:8d:49:0a:7b:f9:18:cb:38:21:7c:72:3e:81:
bb:a7:0b:20:2c:a4:57:ca:b1:7a:8e:6b:4c:6d:73:f4:5d:9b:
4d:ed:d4:f6:2c:d4:5f:d9:b4:b4:3f:ee:39:9f:b8:ac:ec:b9:
e9:5b:db:d1:d6:a7:2a:d7:8f:0b:96:64:bf:64:74:e6:92:64:
a1:1a:54:22:58:4c:52:9c:5f:16:af:3c:73:e4:5b:ef:7b:26:
45:01:0d:f7:49:e7:24:07:98:a3:2e:a4:83:c4:d4:9c:b5:81:
ae:e3:84:57:62:74:c9:9c:81:1d:49:4f:b9:e7:dc:56:c0:a8:
a4:ad:42:34:e5:c4:95:7b:a5:6a:6b:ed:6b:2d:27:46:bf:08:
13:0e:96:66:af:fb:b1:0b:c0:7b:cc:bc:47:48:28:ce:65:60:
0c:27:60:ce:60:47:f9:d0:82:e0:d6:23:c1:1e:07:b3:65:12:
0d:4f:c6:f0:97:c5:6f:cf:34:e0:46:ea:a5:7a:d2:f3:b1:94:
d5:95:e9:6f:59:40:4e:12:f5:cd:f0:64:08:c0:ee:ac:b7:b0:
e9:34:b1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:13 2025 by rpki-client