Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: SiMzjp53Kzf8nbdrBq8k2hw5QB+8gwGCgzjYLqMbmq0=
Subject key identifier: 19:5E:33:53:98:71:C1:99:D7:7F:18:90:08:6C:38:37:16:D0:D4:B8
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 019A71EEFB189C04F5D7DB716C51FDDE5F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0E59
Signing time: Tue 11 Nov 2025 08:01:18 +0000
Manifest this update: Tue 11 Nov 2025 08:01:18 +0000
Manifest next update: Wed 12 Nov 2025 08:01:18 +0000
Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: ficvXdHcg65rJattLAMfwivn5+Mq2yyFQQlFbXHtToQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:fb:18:9c:04:f5:d7:db:71:6c:51:fd:de:5f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Nov 11 08:01:18 2025 GMT
Not After : Nov 12 08:01:18 2025 GMT
Subject: CN=195e33539871c199d77f1890086c383716d0d4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:6c:6f:91:92:8a:e1:78:a2:52:27:54:da:
4a:01:ac:85:e1:44:ab:61:ba:11:94:0c:60:25:d8:
c3:b9:7d:da:68:3f:4a:92:ab:32:2c:30:d0:3f:a7:
13:9d:bb:cf:1b:ca:f0:a3:e3:7f:f1:e9:f1:24:5f:
bc:75:b3:b2:fb:62:83:8a:ff:df:96:6b:25:0e:be:
b5:03:0e:16:a2:ad:93:95:72:f3:39:27:46:a3:86:
ad:3e:e8:d1:18:51:b1:30:57:b8:e9:47:50:8f:12:
f7:80:02:51:80:8e:d6:fa:06:66:96:90:4c:de:d3:
bb:16:63:40:00:c9:d1:c4:a0:af:09:b4:33:1c:90:
5f:63:ef:07:73:1a:26:47:88:e7:6e:63:05:60:4b:
ad:75:62:aa:ac:d7:9d:d5:dc:1f:77:72:16:c0:c2:
68:b1:ab:8b:b8:d5:93:dc:29:c6:81:d7:39:0f:4d:
2d:e6:2d:54:42:bb:5d:37:32:ac:e8:c9:df:79:0a:
01:7e:c1:33:15:0c:88:d1:e5:c9:52:3c:c7:17:9d:
f7:14:d6:92:b6:8d:54:5d:c7:0c:23:a1:9b:03:69:
67:51:fb:10:48:17:6d:2b:7b:e0:6d:51:cf:5e:32:
d4:2b:2c:11:d5:55:40:4e:07:b8:67:18:a9:84:8a:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5E:33:53:98:71:C1:99:D7:7F:18:90:08:6C:38:37:16:D0:D4:B8
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:45:90:6d:34:17:d0:31:29:c0:f9:97:8c:ec:4b:72:95:
2b:57:11:c1:a5:bc:54:52:20:59:a6:e8:05:c6:4e:67:59:f9:
e4:45:f0:9c:ed:98:07:4f:e2:6c:60:ca:ed:2f:65:35:00:4b:
32:20:d1:5c:9e:c9:ac:b7:23:fb:4a:ad:ee:ce:16:25:f7:5f:
22:4e:20:12:f0:ad:9b:92:db:ff:6d:4e:a4:c8:9e:de:87:a0:
5e:4c:05:84:22:01:3b:ea:5b:e7:88:3e:77:ea:2c:72:a2:a3:
e3:dd:8a:d8:6a:ab:12:53:1b:a8:27:d7:bf:5c:b9:a6:e9:8a:
7f:a2:75:33:68:8c:8e:bb:eb:7e:fa:50:77:51:ad:50:35:0e:
98:21:60:c4:76:26:11:aa:5c:5d:7d:dc:4f:84:99:1f:79:7f:
de:20:cc:7c:1d:63:e1:12:41:7a:bd:51:15:3f:b5:01:eb:ce:
61:2e:21:cd:78:ac:f5:9e:5d:69:17:21:3c:b3:29:fb:58:02:
c5:0c:ad:17:8d:82:5e:9e:79:e1:65:da:54:3b:3b:7a:20:91:
d3:d7:14:14:3b:04:0d:6f:12:b2:84:b1:90:51:9f:2c:e3:18:
2d:fa:62:4d:3a:75:af:49:ce:dd:80:f0:1f:ec:1d:94:17:16:
86:2f:b9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:17 2025 by rpki-client