Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier: WVFOZX9nHLx0saMeb4lUo5A3zDKFyqSJZLlQDh+0OuI=
Subject key identifier: 1D:06:3F:6A:2F:A9:25:D8:E4:38:D5:B0:D8:59:CB:02:38:4A:45:CC
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 019A209BC31C1CAE560A36203E007FE55D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number: 0B9B
Signing time: Sun 26 Oct 2025 13:01:10 +0000
Manifest this update: Sun 26 Oct 2025 13:01:10 +0000
Manifest next update: Mon 27 Oct 2025 13:01:10 +0000
Files and hashes: 1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: r/fD4nz1fHAvu0gVY0YdPH9qDQVtkgJJ5lSeMMh0p+M=)
2: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (hash: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:c3:1c:1c:ae:56:0a:36:20:3e:00:7f:e5:5d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Oct 26 13:01:10 2025 GMT
Not After : Oct 27 13:01:10 2025 GMT
Subject: CN=1d063f6a2fa925d8e438d5b0d859cb02384a45cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:96:e9:33:9e:2b:75:9d:07:35:33:78:ee:
aa:70:a4:65:33:2b:d9:cc:a3:e0:9e:4d:1e:81:44:
df:35:1f:e8:07:74:a4:dd:59:d5:a9:41:5c:1a:f2:
a0:7b:c2:4b:26:98:c8:b5:3d:52:47:a3:03:67:95:
81:9c:79:b5:9c:3e:14:c7:cc:80:cb:74:dd:e0:a3:
cb:c3:5b:bf:b4:ac:74:ac:e5:3b:67:66:0c:db:b8:
48:f4:14:f1:35:0b:fe:a4:5f:dd:26:b6:dc:66:2c:
77:31:b7:8d:4e:f2:ee:62:23:de:d5:48:2a:37:35:
8b:52:0b:d2:24:f3:c9:e2:31:fb:24:74:f6:5a:7a:
92:56:3c:5d:46:b3:70:90:26:78:ff:b0:f1:3d:15:
51:4e:c2:fb:b7:6d:9f:b3:fa:43:56:b6:af:95:76:
98:44:21:1e:33:f6:29:fc:4f:19:16:7a:46:2a:c8:
58:4f:7b:e5:be:09:75:e7:cd:4b:94:64:50:5d:ce:
eb:1e:ea:8b:4b:59:5e:cd:77:c8:fa:c3:9f:7d:92:
f4:09:b7:5a:46:ea:34:df:cb:9d:41:d9:06:b2:73:
37:45:64:2b:8d:2f:30:2d:b4:6e:1d:13:ac:48:77:
76:81:42:ff:29:f2:89:7d:5b:58:ca:75:ba:b1:95:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:06:3F:6A:2F:A9:25:D8:E4:38:D5:B0:D8:59:CB:02:38:4A:45:CC
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5c:1e:5f:7f:96:fe:e0:69:05:46:30:6b:4b:92:82:47:32:
bc:2f:37:79:ae:52:4e:d2:f0:45:19:1d:21:57:55:e6:eb:aa:
7f:11:0b:c6:74:6d:42:11:96:a6:13:f7:78:6f:6f:c8:df:0f:
81:2f:51:f1:0c:3f:03:a4:10:21:60:ef:ac:c8:1e:bb:6f:17:
2e:55:76:71:46:a5:83:50:29:ae:84:dc:5f:ba:0f:36:7d:79:
24:cf:bb:6e:a4:a7:3d:51:c1:19:81:23:9c:ca:19:4a:62:39:
c4:22:87:12:89:11:9b:c8:8c:9d:d3:b3:5d:cc:a9:43:78:37:
a1:e0:ff:6e:8b:39:b2:f0:89:ff:64:9d:f3:8d:73:07:c4:6c:
55:8b:6d:0b:f7:f8:84:dd:c2:b5:95:58:76:35:d5:16:95:24:
2a:36:6b:a8:3a:a2:05:1d:bc:05:89:5c:43:2b:71:f2:55:c3:
8d:aa:14:fb:01:1c:91:46:65:7b:19:16:00:6b:27:04:b1:6a:
cc:b4:4e:45:db:dd:ca:ec:3c:94:05:3b:9e:0f:53:61:79:68:
69:f5:b2:57:ea:7f:96:02:8c:c0:b7:9a:23:8f:81:d5:2d:92:
97:ca:8a:a7:90:26:1f:dd:7a:7c:be:2a:e9:78:60:bb:b7:ac:
4b:7a:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:23 2025 by rpki-client