Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
File: RV9UXiqU8FHOuPgPRGwcthwObI4.mft (raw, json)
Hash identifier: N3TEu5OhWnYFnhsoi0snlsOHQIHxUqRzXhjlV9CH834=
Subject key identifier: 3B:FF:D2:AE:C0:A5:B0:52:E1:10:B9:6F:0E:E7:6C:FC:14:E0:85:D5
Authority key identifier: 45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E
Certificate issuer: /CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
Certificate serial: 019A71EED81A12D0FEC286BB763579A61D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
Manifest number: 0142
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: RV9UXiqU8FHOuPgPRGwcthwObI4.crl (hash: I0dJKGeGb7ISXsHQj3KEModCZqj9n2cyEpMoS/TE3hs=)
2: tfcLpKerdpFoXOb5QmMUPRfvX3g.roa (hash: KomNoR2J4PlIML4Y+vVt+wvjHhv9BWoRwvkNwWbeubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d8:1a:12:d0:fe:c2:86:bb:76:35:79:a6:1d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=3bffd2aec0a5b052e110b96f0ee76cfc14e085d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:39:b8:42:3c:83:c7:a3:a9:20:02:7e:94:
90:f0:d4:af:d5:76:00:90:1b:13:c5:0b:c0:0d:02:
5e:80:19:46:77:a7:12:61:b4:39:31:d5:f0:e6:81:
fd:25:40:19:04:7e:c3:db:26:6e:68:2a:e5:ed:64:
18:16:64:27:5f:d7:90:b7:f9:5c:8c:f9:b9:7d:91:
d6:9c:77:f0:05:7f:e1:bd:4e:1e:f3:5e:b0:22:71:
5d:a9:88:c8:ee:4e:bf:f7:b6:a3:0f:01:e6:9f:f7:
29:38:bd:98:e8:ea:a3:5d:15:56:cc:ec:c5:b6:37:
11:61:2d:00:65:cd:9d:34:33:58:ec:4d:4a:f1:99:
6d:1e:4e:d8:6c:32:b8:fa:90:35:24:f3:34:c4:22:
32:98:0a:09:d5:eb:03:21:0c:62:3f:68:6e:ed:59:
8a:78:b3:14:3a:af:6e:bd:2e:aa:58:b8:c5:ed:3e:
37:2d:66:56:ef:b6:cb:fe:0a:74:8c:10:2e:43:e6:
16:b2:fd:e3:47:58:b0:21:90:da:12:20:b2:09:89:
43:ab:d7:29:93:b9:7e:0e:1d:01:e6:ac:f1:d1:8a:
33:70:08:18:78:df:c1:4e:5a:47:4c:a3:90:da:6b:
4c:69:8c:09:1c:32:40:44:ee:53:90:3e:77:3c:d7:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FF:D2:AE:C0:A5:B0:52:E1:10:B9:6F:0E:E7:6C:FC:14:E0:85:D5
X509v3 Authority Key Identifier:
keyid:45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:2c:0f:3c:f6:f3:8a:b2:2d:6e:f2:e7:d4:b3:6f:80:90:
93:aa:60:9c:d6:ef:18:53:f1:f3:75:8e:36:f1:a5:f4:5e:05:
7a:67:75:96:18:a4:85:52:5c:87:96:2a:d3:f9:8c:cc:3c:54:
d2:35:dc:53:09:f3:21:cb:ed:0d:d2:af:56:87:46:01:d5:46:
7a:48:2e:f5:6d:82:28:59:15:b7:7a:db:36:7e:94:6a:13:d1:
3c:a9:1e:c8:43:ec:4a:7f:28:1e:74:24:aa:8a:15:a5:10:b9:
61:af:1b:b7:e5:25:25:bf:ef:21:64:1d:f4:d4:bf:20:5a:a6:
84:7b:7b:8b:50:bc:e3:3c:99:2c:1b:13:44:b8:ae:fe:c2:3f:
79:65:77:bc:ba:a6:03:79:98:8b:42:00:8e:36:f3:a5:15:4f:
2b:f5:99:27:f6:fa:a6:b7:a6:e2:0d:68:76:53:de:12:36:98:
c3:e9:1f:a0:20:2d:01:91:92:bc:ea:b6:81:97:ab:c7:41:63:
f9:89:7c:76:42:3f:5c:63:8c:77:ad:d0:98:61:0a:e1:9f:1f:
87:08:8c:70:15:c9:17:93:fb:94:af:f1:6d:32:b1:c0:a2:a8:
74:90:35:52:6f:43:fe:ec:46:6c:a4:54:bd:4b:fa:e8:a2:a7:
40:92:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:52 2025 by rpki-client