Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: y3ijdNJbw1iwsAkKB7AIab3mavmFI0dRAXjyQVJRCDM=
Subject key identifier: 5C:F1:F1:C7:22:5C:2D:A7:5E:B7:1E:DE:46:81:E4:DF:8A:4D:A5:0E
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 019A71B8EA69FA34F2BF4C2F578EBF704C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: sU7QL6PqTLhDgZNsCVzAu0MjSTgewyKvjSz60FI6NHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ea:69:fa:34:f2:bf:4c:2f:57:8e:bf:70:4c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=5cf1f1c7225c2da75eb71ede4681e4df8a4da50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:9c:91:6d:85:a5:a3:5a:9e:ef:34:62:dc:
bb:33:11:1f:6c:6c:7f:08:12:cd:1f:1a:cc:bf:4f:
ac:e3:f8:95:bc:bd:71:f6:0b:ec:13:4f:f3:11:62:
de:b3:05:dd:f7:d8:11:bc:2d:cf:b1:ac:9e:55:9d:
30:43:d0:25:c9:33:81:f2:88:ad:3e:38:1f:10:c9:
2b:2d:12:30:9a:40:3b:71:76:1f:53:7d:bf:e7:88:
f0:51:d4:bd:0a:4d:9c:d8:70:b4:98:17:8f:a9:7a:
89:aa:72:66:61:7b:43:9e:97:73:e4:cd:d4:7d:0b:
f7:e0:c6:dd:7d:90:b9:02:07:d2:b7:5d:a2:73:6f:
d1:6e:46:5c:43:d5:50:4a:b7:e9:0c:5e:af:02:e6:
a5:37:4c:98:34:88:7f:00:2b:f0:8c:f9:35:07:c8:
ac:ca:c1:30:e8:cb:c1:87:5e:de:34:bc:2a:07:bc:
83:cf:6b:62:4f:71:f7:c7:1c:30:7d:74:62:d2:e9:
cd:63:db:aa:c9:92:17:91:17:24:b4:3b:0a:a9:09:
5a:b4:d7:b9:be:26:d7:f0:9c:48:28:05:f1:70:38:
a4:c7:1a:c1:57:43:4d:c9:75:53:f0:db:c5:7e:4c:
35:33:d4:bf:31:57:c2:54:ee:98:76:c3:e9:99:59:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F1:F1:C7:22:5C:2D:A7:5E:B7:1E:DE:46:81:E4:DF:8A:4D:A5:0E
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cc:34:4f:23:7a:83:af:4c:64:60:a5:5b:d1:e5:85:00:de:
8d:95:12:c1:95:e3:d9:35:94:62:93:26:c4:e7:28:58:a7:3c:
fd:a3:12:50:3e:b8:d4:96:02:a1:c6:01:16:48:81:9d:a9:fe:
e4:b2:1b:e9:00:cb:2f:a7:63:e7:4e:ee:79:d8:3d:1a:12:d0:
0a:94:96:cd:f8:ce:81:fc:9e:54:12:ba:d0:61:fd:32:74:e1:
c6:b5:73:87:ca:f1:6f:64:37:62:7f:f3:ca:39:39:e0:fc:ae:
90:19:c8:35:73:93:8a:10:84:51:0c:4b:22:ec:3f:32:e5:aa:
92:61:93:4d:66:64:b0:14:48:ea:4f:43:4c:7f:0e:85:f4:db:
5a:43:6e:52:db:ca:2a:9e:f4:2f:6e:01:65:f2:c1:22:91:d0:
8d:6b:1a:53:11:72:c2:69:01:29:53:64:76:4a:74:5c:59:67:
cd:de:ae:b4:99:3d:2b:35:8f:43:b3:4a:9b:dc:a6:e4:bc:85:
e1:ef:9f:d2:8a:2a:6d:0c:6a:e2:8f:d7:ff:d8:5c:d8:fc:92:
29:5d:79:e7:74:b9:df:6f:8f:e9:c0:88:f1:83:2a:60:b7:6b:
86:a0:3e:34:d1:db:70:59:69:79:0f:53:33:dc:8c:00:33:86:
fd:c6:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:52 2025 by rpki-client