Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: n429ipN6FtKcl7e+COB07w+ui9nSOG1r3NPQhgEi3TE=
Subject key identifier: D9:35:2D:34:CE:C2:AD:F9:92:05:B5:F1:9B:A0:D9:A7:F2:51:3F:18
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 019A2477C7B297B7A07D282109095B90198B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0BC8
Signing time: Mon 27 Oct 2025 07:00:20 +0000
Manifest this update: Mon 27 Oct 2025 07:00:20 +0000
Manifest next update: Tue 28 Oct 2025 07:00:20 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: L31B+aS6iYvxaX0g+yMpPcJaDEx1nG53Kz01tf5xa0M=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:c7:b2:97:b7:a0:7d:28:21:09:09:5b:90:19:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Oct 27 07:00:20 2025 GMT
Not After : Oct 28 07:00:20 2025 GMT
Subject: CN=d9352d34cec2adf99205b5f19ba0d9a7f2513f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:e9:d6:46:d2:8d:2b:8d:1b:9d:cd:47:ec:
a7:77:4e:95:9f:ba:c7:30:97:38:7f:27:3f:a7:ef:
f7:6e:de:5b:a2:b6:2e:83:82:a0:51:6a:ba:82:f8:
dc:2b:72:58:7f:74:cc:47:ce:1e:46:1c:1f:a2:5d:
2a:70:96:1e:6c:0e:ad:d3:29:45:ad:f5:a1:88:03:
fc:b0:4b:b5:61:d1:a7:0e:ad:12:38:55:a8:ca:e7:
b8:c1:bb:87:e5:65:27:d1:05:34:d2:92:0a:81:ef:
f0:a5:07:1a:28:5b:d7:ad:fd:ee:75:5c:93:49:e8:
fc:39:57:89:91:a9:b3:90:58:59:c1:17:2b:8d:01:
81:2b:e1:96:17:3e:8b:7a:fd:2d:c2:b1:82:67:c9:
0a:2a:21:5e:b1:cf:1d:65:2f:e0:db:bb:e6:7e:07:
10:3f:5d:6a:22:27:ce:bb:0a:c1:df:94:fd:22:e4:
0d:70:07:7c:65:1a:0b:d3:8d:b3:30:a7:10:c7:a8:
15:3f:52:ec:6e:87:be:cf:67:24:03:aa:f7:b6:de:
33:79:48:c2:03:a9:f1:11:07:33:c9:4e:e5:38:d9:
4f:aa:91:b1:84:4e:dc:e2:0c:49:8a:06:7a:35:61:
92:59:84:cd:42:77:20:19:0c:91:7f:5e:a3:ed:23:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:35:2D:34:CE:C2:AD:F9:92:05:B5:F1:9B:A0:D9:A7:F2:51:3F:18
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5d:2f:77:a6:f5:f5:27:99:a5:1f:40:72:6f:9a:4a:12:bf:
42:f4:0c:d4:1c:22:4d:1f:33:f7:91:fa:95:72:0c:ad:05:ca:
1e:54:5a:57:8b:4b:f1:55:78:6d:a9:89:fd:1f:89:eb:3f:36:
f3:2a:d3:d2:76:85:8d:15:36:39:92:c9:51:c0:fd:5c:bf:26:
95:86:af:7d:8d:c9:dc:31:d0:8f:8a:89:91:3e:20:9b:e6:18:
7d:ee:b8:61:4e:96:dc:a9:f7:85:ff:b6:78:fd:63:3e:96:73:
ac:0f:e0:55:9e:f0:37:62:29:3c:f1:49:a5:30:5c:50:22:d1:
99:75:60:9d:c3:12:1c:52:aa:ee:9e:bc:2d:da:af:66:3e:6e:
1d:c5:b5:d1:c3:6e:e8:27:67:e4:e3:54:d8:43:b4:f0:05:5f:
2a:6d:e1:4c:05:81:0f:ff:98:a4:a8:47:a8:85:01:f4:c0:24:
09:18:d2:67:8f:6c:f8:2d:1e:99:ab:af:e4:21:9d:26:8f:e3:
34:da:f4:5b:68:46:52:88:6c:f8:a5:5e:a2:f2:ad:71:f0:7d:
4d:48:c8:d9:cd:b4:45:24:38:e2:25:42:81:4b:71:45:95:95:
94:41:f2:31:58:75:9c:3a:9c:4f:93:0a:47:00:21:11:0d:cb:
9d:92:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:01:46 2025 by rpki-client