Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
File: s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json)
Hash identifier: 3j0snmFEk2rD4kkAuT12mYvQXXsSA5SD9F3ZcwiX6rI=
Subject key identifier: A9:CA:E6:E4:63:F2:4D:B7:10:7C:72:11:FB:C1:8E:06:7B:DF:C0:5D
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Certificate issuer: /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial: 019A72CAAD5E6DE2C1D3FA89760042AAC344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
Manifest number: 07E4
Signing time: Tue 11 Nov 2025 12:01:16 +0000
Manifest this update: Tue 11 Nov 2025 12:01:16 +0000
Manifest next update: Wed 12 Nov 2025 12:01:16 +0000
Files and hashes: 1: htjbCi_8qWneZo93vjbuIGh7N8U.roa (hash: g/IDR+6xEAPBW47ZPcz7WOY/otLteI/yTBnpVyBmbgA=)
2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: w8vMQHliCnBCTaxncGfXOKJACkdcojT6nBsUUqPMe38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:ad:5e:6d:e2:c1:d3:fa:89:76:00:42:aa:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Validity
Not Before: Nov 11 12:01:16 2025 GMT
Not After : Nov 12 12:01:16 2025 GMT
Subject: CN=a9cae6e463f24db7107c7211fbc18e067bdfc05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:2c:d2:49:30:f6:c8:3a:72:87:95:98:c6:
db:2e:0d:ed:01:90:61:bc:1c:ad:3a:75:22:2d:0c:
3a:a0:7d:62:00:3a:90:99:9a:ba:04:ab:40:b3:ff:
e3:dc:08:5c:01:40:58:87:ca:f4:5f:51:c1:22:fe:
7f:b6:ca:5a:b6:15:c9:cf:5f:7e:8f:d2:ea:a7:3f:
17:ae:cc:8c:b8:df:22:97:5f:fb:2c:4e:b2:59:b5:
6a:ce:ad:25:52:34:9c:09:52:d6:2b:a8:77:dd:c2:
1b:8f:93:7e:65:c5:f4:3a:f1:b1:0e:d1:4f:ab:3b:
b7:25:00:82:27:75:7f:44:6b:20:f8:ad:df:05:d8:
d9:59:5f:b7:2e:66:e5:99:df:b8:38:ca:51:ab:e0:
10:21:09:b4:91:5f:d4:1e:2f:07:db:5f:d7:e2:8f:
b7:f5:03:95:d6:e0:ca:47:c2:9c:fe:eb:b3:0d:99:
d5:33:30:21:09:71:e5:7e:a0:b6:85:78:19:cf:e7:
36:17:bc:20:84:3e:5f:34:00:e0:af:7f:e7:70:15:
02:89:e9:a6:70:ea:00:51:c0:f2:b6:87:e7:81:ad:
17:80:72:6a:f0:f8:5f:cd:3a:fa:08:77:d7:d1:5e:
df:7e:39:97:e3:b8:08:60:b4:bd:50:ed:1c:66:60:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:E6:E4:63:F2:4D:B7:10:7C:72:11:FB:C1:8E:06:7B:DF:C0:5D
X509v3 Authority Key Identifier:
keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:68:ae:14:b5:4b:d1:69:cd:87:29:8a:d9:e2:a1:b0:a1:0f:
ca:b6:4d:7f:87:25:ac:56:d6:dc:a9:41:88:f3:c0:e4:f4:2f:
81:b4:10:c8:a9:e9:9e:c6:2e:09:7d:f0:8d:ee:5a:41:5e:08:
9e:e2:51:e5:5f:cd:ec:66:2f:ec:d4:ec:1a:32:ed:44:e9:1e:
a7:4f:c2:ce:82:46:ec:8a:8e:25:13:e7:71:69:98:bb:8d:15:
43:e6:5d:6f:fa:51:8b:3e:80:e6:af:9b:10:86:3e:c9:4f:53:
e8:e0:3e:54:e4:96:80:20:c7:89:85:b2:48:35:1b:73:d2:98:
13:90:7d:f4:70:e7:06:12:c1:9a:fc:2f:98:24:d8:73:49:8e:
20:9f:7b:e5:bc:ee:f2:06:b1:d4:07:af:08:94:43:5e:d0:d4:
41:12:7b:f0:75:35:15:55:b0:2b:77:51:8b:85:ec:19:c3:d3:
0a:20:17:0b:83:80:03:f6:1d:2c:56:a4:0b:c7:2c:56:f9:3c:
0c:fb:01:2f:20:5b:2a:07:28:36:65:57:62:81:70:58:51:de:
73:a9:6e:ae:b6:e2:3f:24:08:8d:2c:2f:70:83:36:3a:95:5b:
6d:e6:13:bc:89:67:1d:bb:27:ca:7c:12:f8:54:83:5d:49:89:
dd:a0:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:13:44 2025 by rpki-client