Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
File: _7WFJ4AULkE_nxWyTVmRMxGhDsI.mft (raw, json)
Hash identifier: lqRx94rb2PQMcxmloZd3Uonh3brRD07Y7q894AqRHS4=
Subject key identifier: E4:8C:F3:65:33:0D:AC:8F:9A:37:91:A9:C3:A6:F8:FC:3E:2C:E2:88
Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
Certificate issuer: /CN=ffb5852780142e413f9f15b24d59913311a10ec2
Certificate serial: 019A71B929B2CBF4DF504E0B6055A5184691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: I32dN6KwFoewNSfpS4XBjG5myXU.roa (hash: PHYrnIWI7dP/AROY19OnK6Q0ENbOWp8OyZchyzmlbds=)
2: _7WFJ4AULkE_nxWyTVmRMxGhDsI.crl (hash: 4OVtUEB4PwlMakofCfpd+HEpvTlNDegmbVxCZOh3O18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:29:b2:cb:f4:df:50:4e:0b:60:55:a5:18:46:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=e48cf365330dac8f9a3791a9c3a6f8fc3e2ce288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:33:57:24:b1:26:6f:79:d1:de:9f:6f:d5:
4b:c2:bf:a6:42:56:bd:66:de:b7:4b:6d:76:37:c2:
2f:bd:f3:a7:75:c8:75:83:01:ca:42:96:80:ac:f5:
92:5a:63:21:d8:cf:f0:78:02:52:75:96:45:cb:3e:
90:d7:87:37:eb:b7:b4:ff:16:30:f7:13:8d:80:03:
89:f1:d8:91:a5:8a:f8:38:b7:e0:c9:22:58:bf:39:
e3:78:8f:08:2a:ec:a5:cf:c3:1a:a6:a7:8b:1b:0c:
7f:9b:cd:6d:42:19:a8:a5:23:74:65:ac:f2:a1:44:
ed:13:05:e5:fa:b9:0a:69:7b:43:d5:1a:c6:1e:58:
80:2a:2c:e3:25:bc:ac:a1:06:fd:03:30:f7:e5:63:
e6:22:07:19:23:57:b2:39:fe:25:81:4f:25:61:95:
2d:c9:66:c6:c0:21:71:23:83:06:2a:28:72:79:57:
0d:63:4e:44:89:0b:ff:85:68:86:58:8e:4f:fe:cd:
45:05:d1:c3:dc:46:59:fa:cf:f8:9c:77:9a:bd:5c:
e6:61:b9:a3:51:2b:f8:0a:90:d8:f7:83:37:b1:47:
3b:96:1e:e4:ae:34:d3:5f:df:68:27:1c:e2:f9:9f:
ae:2f:2f:5b:c7:03:b6:f5:85:e2:68:5d:30:75:3c:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8C:F3:65:33:0D:AC:8F:9A:37:91:A9:C3:A6:F8:FC:3E:2C:E2:88
X509v3 Authority Key Identifier:
keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e0:52:93:1b:a5:a3:85:ed:3e:5f:9c:8f:7e:9a:b5:b2:49:
b4:34:a7:ae:78:e7:a8:e4:58:57:78:aa:a5:f7:60:fc:e5:e1:
29:17:73:ae:fd:0f:57:94:74:5f:95:09:2b:eb:0b:1a:7c:20:
a5:53:e8:31:3b:d6:a5:5f:b8:75:61:94:e9:ac:2e:9f:f1:c9:
d6:37:a2:a2:59:5a:67:9f:d7:1b:1e:20:86:bd:3f:3a:66:32:
da:e9:ba:c1:6b:85:64:50:76:c0:f1:38:96:2c:d6:96:9f:9d:
e3:d5:31:44:45:e0:ad:88:10:21:94:3f:39:61:91:7e:93:1a:
aa:4c:59:26:6a:ec:89:23:8d:73:03:fb:94:9b:86:8b:0b:2b:
0f:e3:67:99:50:e3:33:1f:8d:ab:d9:ef:d8:5a:1b:ef:34:6b:
5b:4e:42:ed:40:29:12:37:58:bd:c0:a1:3d:26:45:63:6f:0a:
7a:f4:37:aa:4c:7f:03:81:2e:14:4b:bb:35:50:53:5e:96:07:
0e:4e:62:95:7e:07:ce:7a:a2:35:c9:30:1f:20:46:e5:8a:b0:
eb:03:78:e5:b9:9c:c0:2d:87:25:f2:58:25:cc:85:7d:f7:cb:
5e:22:34:69:ec:2d:0d:9b:25:32:87:29:bb:55:4f:78:ac:16:
40:6c:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:10 2025 by rpki-client