Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
File: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft (raw, json)
Hash identifier: t3liwbanX7msK2sXZm2weCYblkeU1HE4KbdCckCaX8s=
Subject key identifier: 8B:77:D8:1D:E2:45:9E:98:DD:09:9C:A2:30:ED:E1:F7:06:89:06:47
Authority key identifier: FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
Certificate issuer: /CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Certificate serial: 019A71EE75D9792528C8EEF164F362D44668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl (hash: iNiEe0sNhP+p1Fx01lwl81Ggg4oGsLBBrjQOSe1ROUY=)
2: jvYIR4cGI1xTBTMHiHmlslGT8ss.roa (hash: XYWrze0y1RSFOkB9yC9oozCL7v1si1KQCdXxbKpu5VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:75:d9:79:25:28:c8:ee:f1:64:f3:62:d4:46:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=8b77d81de2459e98dd099ca230ede1f706890647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:ad:82:1c:3d:1e:6e:d8:ff:1b:e0:11:b9:
5b:88:9d:8a:12:b2:ff:d7:b6:82:03:2c:f7:ca:1e:
ba:07:3e:b0:fd:13:90:68:a9:bc:fb:98:f6:84:a4:
ff:b7:ef:d9:d1:8e:fa:52:f1:96:3d:b6:ea:9b:68:
82:23:e4:a9:fa:79:f1:10:7c:31:cc:56:00:d4:9e:
9e:68:a3:9b:8b:23:52:a3:3d:2a:39:d8:cb:82:5a:
2c:54:5f:0e:7e:77:f2:df:92:90:4a:13:54:aa:d8:
b6:6b:61:aa:83:01:4a:71:86:0d:89:f1:b2:c7:48:
9a:bb:4b:b5:b1:24:50:2d:d6:ec:89:c2:ac:e3:e7:
6b:3a:c7:84:41:1c:ad:68:d7:36:40:5d:cf:6f:2e:
4a:87:4a:f9:f5:50:c2:76:00:b1:90:63:29:0a:7a:
f6:56:75:76:84:fa:95:46:a1:da:a8:7a:df:0d:ce:
69:c2:38:77:8c:77:82:26:68:55:92:e3:19:81:16:
7f:8b:5f:f2:23:b9:34:77:91:a3:58:bd:87:60:cc:
29:e8:39:5a:f6:6a:e2:bc:78:fe:cb:61:7d:ed:fa:
45:f9:ba:51:e7:fc:49:47:57:3d:b3:ea:eb:65:e7:
8c:a3:45:37:65:2e:55:59:93:02:c5:ee:97:fc:d0:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:D8:1D:E2:45:9E:98:DD:09:9C:A2:30:ED:E1:F7:06:89:06:47
X509v3 Authority Key Identifier:
keyid:FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8f:0d:6f:ab:2c:95:b5:2e:cd:75:91:c3:b2:4f:e5:18:43:
de:87:57:f4:ec:29:72:11:51:36:4b:ad:63:bd:4f:27:2c:cb:
74:1f:d1:fb:64:d2:64:24:13:cf:ec:08:8c:ed:3c:20:95:4e:
56:0d:5f:e5:bb:ca:8f:d6:1a:16:f4:77:f7:5c:57:d6:6c:a5:
b1:d9:79:e9:b9:a5:92:c0:e2:6d:c9:a3:6b:59:b8:c9:88:72:
15:62:12:f4:7b:51:22:db:98:58:dd:1d:30:4e:f5:f0:0b:42:
3f:24:d9:08:ff:03:bf:f5:05:4f:a7:38:ce:d9:e6:d4:db:21:
5a:2a:4d:5a:c4:cd:1f:8f:43:57:75:4e:79:83:e9:70:7c:3e:
58:e5:c6:45:a3:a8:d1:27:1b:63:f9:83:9f:39:3f:6c:6e:d8:
1b:80:89:01:3c:56:16:04:1f:e7:cc:d5:ef:d7:dc:1b:ff:2b:
3c:7a:b5:4c:96:e3:f2:b5:95:72:35:d6:79:38:2f:31:0c:a8:
1f:15:00:38:d9:28:32:e1:68:c1:bb:d0:87:70:47:f8:8d:d5:
9e:49:88:b3:63:32:79:31:8d:9a:b1:aa:5e:6a:79:d9:d3:21:
16:ea:c7:54:a2:b5:2e:f6:35:04:5c:1c:8b:7f:cb:78:b4:73:
3a:73:4c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:03 2025 by rpki-client