Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: JwZ3aM0grdvDd+/oYV027fnVGK+RB7rGq6ekT4W0hDQ=
Subject key identifier: EC:1B:FA:83:26:C4:10:61:E9:FE:B8:D0:E9:85:6B:20:27:3B:3C:37
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 019A25F82C26B362C3DD5AC0522A0B0C45C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 105E
Signing time: Mon 27 Oct 2025 14:00:12 +0000
Manifest this update: Mon 27 Oct 2025 14:00:12 +0000
Manifest next update: Tue 28 Oct 2025 14:00:12 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: WGfQe9C3fBMHjbdFxX339KB7xcdFj6AasdjbAKweml4=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:2c:26:b3:62:c3:dd:5a:c0:52:2a:0b:0c:45:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Oct 27 14:00:12 2025 GMT
Not After : Oct 28 14:00:12 2025 GMT
Subject: CN=ec1bfa8326c41061e9feb8d0e9856b20273b3c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dc:0a:42:10:3c:49:80:b7:65:a4:17:63:23:
b4:04:99:07:1c:18:1d:a8:27:75:76:9e:17:97:e4:
d0:64:2b:04:0d:76:cf:9d:d0:8e:f6:13:1f:86:15:
5d:e8:b0:d2:09:90:6f:03:39:15:20:87:a1:bd:46:
08:bf:77:68:18:7d:8c:0e:03:3c:b8:f9:a4:22:cb:
f9:3a:64:9e:a5:08:31:1c:6b:4c:bb:fe:55:af:21:
40:a2:8d:c4:5b:3a:f8:9f:ef:b6:56:02:7d:48:ef:
9d:14:58:ea:e3:7b:c8:c8:8b:02:d2:63:70:17:f5:
44:fe:e6:fa:d5:b3:7d:d2:b9:52:43:c8:57:7f:0f:
9c:42:d0:68:f1:5a:a7:ea:50:56:47:0d:2a:f6:42:
03:a6:18:68:9b:4e:bd:cd:10:31:09:32:40:dd:6c:
b4:d3:51:db:87:77:46:0c:1f:1d:3f:73:40:9a:c4:
e3:4b:9c:52:6c:00:8b:99:56:22:dc:80:4a:9b:88:
ed:d5:22:96:39:48:c6:77:8a:2c:9f:c1:37:c6:52:
87:d0:79:92:85:63:9b:8d:42:20:d1:83:0b:5b:03:
da:a2:da:6c:a4:b1:fe:e4:79:ff:dd:0c:a2:b4:83:
e6:fe:48:54:57:90:9b:5f:58:dd:6e:37:df:21:71:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:FA:83:26:C4:10:61:E9:FE:B8:D0:E9:85:6B:20:27:3B:3C:37
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8f:fe:9d:5e:f2:3a:44:8d:f1:a1:c0:cc:50:80:1a:57:5d:
24:ba:64:75:3a:f8:99:75:c3:58:75:cd:e5:0f:2c:88:37:b3:
14:a2:61:dd:99:95:cf:dc:72:07:26:6c:d3:94:c0:5e:c5:a1:
4a:69:2d:e4:f1:18:72:d6:d1:19:48:20:a2:27:c2:02:6d:2c:
56:ee:b3:ca:71:82:a5:ad:b2:1e:56:1c:e7:18:6d:e3:c5:f9:
a4:bf:8d:2a:7a:ad:8b:d6:bb:67:39:f6:5f:b2:ef:4b:26:1f:
0d:cf:1b:5a:fa:03:f5:99:ed:24:e1:70:88:e8:8f:5f:ec:7b:
56:c0:ff:e9:1e:d9:fa:34:f6:53:f8:8d:ea:78:4f:93:f1:52:
75:8e:08:11:f5:c8:23:ef:1a:3a:ab:a2:13:03:3a:8f:c3:02:
09:23:52:23:7b:14:b8:38:56:21:60:b5:ea:90:ab:ae:f9:fa:
2f:53:bc:63:58:fd:8b:d8:18:5b:fa:aa:bc:9c:71:0a:32:4e:
0b:dd:88:bc:12:87:00:47:6f:50:c8:c2:67:f9:f5:71:5d:5b:
e1:64:83:7b:8a:db:ab:f2:6f:4f:04:b1:9d:f9:2c:54:b6:05:
70:a7:0a:d2:be:5b:25:f5:28:7f:13:a9:62:70:6d:0b:c4:da:
c5:4c:86:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:43:06 2025 by rpki-client