Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
File: _sb7WkZ5dMl3qZfG3aFGSAXtN58.mft (raw, json)
Hash identifier: YWQUmFkxAqlhngUJC27V+8TiUDumstqfXcj+82ZkVoY=
Subject key identifier: C7:B6:46:E5:A1:26:4A:1E:37:46:9C:75:E0:4A:59:18:05:77:EA:F5
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 019A71EEEF65FDB7D0AF616590DB274C59A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
Manifest number: 0AC1
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: E__vFrmTsxyOGMhhVRbUyFs6fE4.roa (hash: f5Wu8Iuw9y3vTxcVmuh7meVQB42MGArKR0E5sohYz4c=)
2: GByd4Ph2qHKku9iubKvvsJYsMNQ.roa (hash: tuXI++q9FG32IH5aWRzBiIAjRCqITapuoljQgK7Bfik=)
3: TrgvhdTHQM75gjmPCWy-go1xZ7g.roa (hash: J0ss3iNRgQuDXDO+ZUHpxFg7+eVayUQpwRLYiauVRcM=)
4: X0-3PAazjse0hHhiAz0y98y6xD0.roa (hash: AtkwB+eyCo+X4Q8oeouklk8Nhb4ehYTOanEpZg+NyIY=)
5: _sb7WkZ5dMl3qZfG3aFGSAXtN58.crl (hash: dPspyxAxRa1IJXiz3OoCbzvMb4vAmfT+/v0f6/Hd4Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ef:65:fd:b7:d0:af:61:65:90:db:27:4c:59:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=c7b646e5a1264a1e37469c75e04a59180577eaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:90:f4:c0:2f:ff:46:64:ff:b4:62:e4:e0:
78:b7:2d:d6:a1:ec:8c:4f:fc:2a:6a:41:be:6e:bf:
db:0e:b2:3c:dd:79:17:cd:f7:e1:b8:71:0b:6e:d1:
96:05:a4:a0:1e:41:e0:d9:41:d4:a0:a2:a1:9f:1e:
56:01:5c:17:10:5b:42:0d:6d:3b:c1:af:81:9e:d0:
ce:b2:4c:32:a3:3b:85:64:57:36:81:a8:c9:4f:07:
36:3a:27:80:f0:7d:f8:f5:28:4d:53:b1:d5:b5:97:
cf:15:f4:84:7d:9a:60:be:81:28:ee:62:df:68:0a:
ad:f1:08:9a:b7:54:0b:30:59:d9:eb:9b:45:88:c6:
33:3f:0e:d2:16:20:cb:e1:08:c4:fb:43:a8:7d:d3:
51:4e:0b:d1:51:f3:2f:1a:d7:59:20:25:ec:5c:93:
98:c6:2c:1f:39:0e:be:a7:20:cd:9a:50:1e:c1:c8:
52:ba:7f:1f:f6:cf:1f:90:a6:7e:65:5c:e2:d1:ff:
0a:04:99:c8:7d:b9:db:cf:75:1a:1a:40:f7:3e:66:
8a:77:30:76:c5:a6:a6:40:65:c9:1f:65:1c:9f:5b:
db:32:fc:58:df:a9:8f:7f:f5:37:c0:34:56:38:ef:
0f:47:1b:3f:b6:47:d6:14:19:de:b8:b4:9a:0f:45:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B6:46:E5:A1:26:4A:1E:37:46:9C:75:E0:4A:59:18:05:77:EA:F5
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:65:cb:b7:01:c9:38:2d:9a:1f:70:d6:15:95:8f:0b:f2:e5:
f8:1c:d4:80:cc:c7:d8:f8:43:5a:d1:f2:30:4a:52:34:9e:22:
0d:01:06:b3:a3:59:57:14:3e:f0:69:ae:09:a1:c6:32:fe:d8:
85:4d:4e:7f:8b:19:ad:fe:3b:8d:d4:b2:13:a0:37:ad:a6:ff:
f4:57:45:b5:d4:c0:cc:c0:53:b0:f7:22:39:89:72:45:89:06:
86:05:bb:64:db:71:79:2d:72:5a:6a:ba:4f:d0:bf:82:9a:c0:
d8:49:eb:3f:29:ea:d1:e2:29:5a:d0:21:a1:20:23:64:2a:54:
3e:88:45:bf:e2:89:1d:80:1f:a3:d5:41:a2:59:7f:c8:05:e8:
5e:27:f3:29:70:74:97:7b:19:af:97:d7:88:8d:fa:4b:8c:86:
54:60:0b:5c:1f:62:5e:fd:61:ca:73:d4:cb:47:af:81:0b:2f:
e3:a0:06:ae:29:f2:4e:a6:3b:a9:d9:8d:77:a6:c1:81:a6:24:
e3:b9:cc:bf:6f:25:54:bc:1f:80:58:bd:fa:36:d8:96:63:3d:
4b:a6:76:4c:3a:16:ee:0c:14:87:32:c3:c2:7a:bc:e4:ab:09:
d2:4d:81:68:d4:4b:16:cc:25:d9:6e:ca:7f:bf:82:53:e6:e2:
69:8a:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:13 2025 by rpki-client