Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
File: 00J0yPw5e9vGx1haFcgyErBQIh8.mft (raw, json)
Hash identifier: mwMBvGmUjKvG1ncPHdVrn98YMWMeS/yEl/7mPBMDUkk=
Subject key identifier: 7F:E6:CC:52:0D:94:60:0D:D1:56:6D:7D:94:CA:C9:F7:CC:2D:B7:BA
Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
Certificate issuer: /CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Certificate serial: 019A7149D766BE1061F3F84329BF4DFCF36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: 00J0yPw5e9vGx1haFcgyErBQIh8.crl (hash: ToVLEIRI3au/NUBB33zK5psXfx5lGXzyfKH4JlO62oI=)
2: JfpCcJQQ7HN-Dv4ophHtkQofaT0.roa (hash: xefZz0TBx0gKqWeUjL3ez873hj1QBBW9YJlq5BqFZZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d7:66:be:10:61:f3:f8:43:29:bf:4d:fc:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=7fe6cc520d94600dd1566d7d94cac9f7cc2db7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:35:fa:f5:80:70:05:13:39:81:a6:ef:de:
2d:63:32:59:9f:48:05:1b:6f:f1:c9:0e:7a:bf:9b:
b5:25:a2:53:f2:3b:c1:42:22:a9:e3:05:f7:ca:ed:
61:06:de:07:71:6a:dc:ba:16:e9:b0:c9:47:36:39:
35:f6:1b:9e:39:34:c7:e3:57:cc:a0:b2:a9:18:20:
c7:cd:5c:fe:88:fd:da:2e:32:5d:81:fc:67:2a:47:
8f:e4:88:aa:9e:3e:9b:8d:3f:12:61:16:4d:6c:b0:
d1:b1:e7:f6:64:b7:60:95:90:5a:ea:34:7a:9b:1b:
87:14:90:0c:44:3a:3a:43:40:c3:0c:92:14:c9:22:
87:24:af:ab:2c:88:55:23:cd:8c:fb:87:67:d3:4d:
d7:8d:2b:2f:15:7e:33:72:d5:00:01:46:00:24:ae:
bf:27:ed:49:b8:fe:5a:26:41:98:ec:16:26:46:6b:
a4:90:c9:71:90:09:0a:76:61:7e:94:5d:e6:52:6f:
85:48:b3:6c:62:3a:73:f4:79:3d:08:3d:86:4b:88:
1d:0f:14:79:45:ef:d4:99:34:77:70:62:74:0d:c7:
27:42:29:9f:d5:e9:8d:20:a6:68:e6:32:0f:5b:06:
8d:d2:ae:aa:d1:bb:68:0a:03:bf:a6:61:21:99:6f:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E6:CC:52:0D:94:60:0D:D1:56:6D:7D:94:CA:C9:F7:CC:2D:B7:BA
X509v3 Authority Key Identifier:
keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:28:9d:5c:85:50:61:2e:8b:e9:a6:f6:93:5c:97:bf:11:13:
a8:4e:62:f7:e2:14:67:79:25:6b:ac:dc:a6:fe:d8:bc:c2:71:
31:38:ff:4a:b0:6c:38:45:8e:65:f2:b7:09:29:3f:14:84:73:
db:43:2e:a6:78:d3:5d:0a:fe:59:c9:af:99:50:fd:02:ba:6a:
b1:47:15:9e:58:63:77:7f:cc:5b:2a:39:88:50:8a:e5:62:66:
db:d4:1b:0f:d6:54:ca:c1:36:df:4b:95:a0:43:43:b4:69:e7:
8d:00:a7:e2:01:b9:be:1e:7d:a4:0a:ca:19:04:16:c8:76:15:
2d:5b:e9:0b:f1:80:a5:d8:57:91:f3:bd:f4:3b:d9:0d:74:a7:
ed:5e:d0:d7:8b:a3:eb:3f:e0:6c:a0:ed:12:da:9d:77:3f:ec:
c6:8e:f0:15:1c:62:76:90:0c:9e:1d:17:f0:77:00:0a:48:0d:
a0:18:07:c3:7d:9a:6a:e4:45:8d:0b:41:d1:a0:ec:3a:16:8f:
f9:6a:ad:a7:24:b5:1b:8c:c9:cc:83:51:e1:46:98:a6:2d:ff:
5c:44:76:04:b0:df:71:0e:f6:a2:be:86:eb:3a:99:65:ca:ed:
b6:ab:6f:1d:59:04:a3:39:94:2d:aa:91:36:e8:22:91:d3:07:
5d:0f:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:52 2025 by rpki-client