Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier: mNKFOgLWk289/B/NG6M/U894wNsjHoN+yCGgKOBCsL8=
Subject key identifier: 7B:CF:D1:7F:A8:5F:CD:E7:0D:10:0F:59:3E:81:AC:4B:2B:8C:B4:99
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 019A729350C9BE245C0DE2F49A383D764458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number: 1738
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: 1xef8JB14kgVdYbFNM-Oq6W7NWA.roa (hash: 2TgMpFsN8snCYIhnDbb3K1R/JLwOpv09B4vLRv33njY=)
2: 30aIeplMe8B5nuWPNxNW6K-OtBY.roa (hash: 3pRxuzSCfGIU8i4yLQxNrHj04RZktWd0aRH2mX3pOUo=)
3: 5R2_zC5O_WNYOAGlu7by2_fhzYo.roa (hash: Eq+hBI8YGdr0edeJFDWardc1U5Cf7U1rPC+h2snaoOY=)
4: mG-NGr5UJw8Bdsm31xr0LARp3LM.roa (hash: Ez+x2KZ41CLnIqO9c7EUA1U/u9pzX46TWaq6peZ65/4=)
5: nqdZW8VS3cJABsENIPnwko2Hihc.roa (hash: IhzETIut1wHzF58gkob1Irj0rHur1kgwouWb5+riuAI=)
6: nrBcJclJWWQmSFgHdkkN2rl4iMo.roa (hash: LHzeWYsmA5iX5RkIBuodpJrYuHeqFeRrX4/36Bp1azQ=)
7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: HAlm7yUwGWmOLEqFN3rNptm5LoMDdiZ6Muiuma8UFWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:50:c9:be:24:5c:0d:e2:f4:9a:38:3d:76:44:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=7bcfd17fa85fcde70d100f593e81ac4b2b8cb499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:47:9f:71:bb:57:30:a3:8c:4a:cc:d0:a6:
54:40:b6:f7:fc:e2:70:15:5b:7a:d5:94:09:6f:07:
d9:d1:1e:a5:1b:64:b4:2b:66:3c:3c:4c:03:c7:7b:
e5:27:5b:5a:75:d9:6d:d2:db:90:1d:db:45:c6:20:
02:b1:ae:bf:20:6d:b3:29:68:ec:e2:d0:7f:07:50:
ae:31:3a:e4:13:b4:4c:43:03:b9:00:4b:61:05:2c:
53:cd:9b:08:7f:49:13:96:43:38:89:27:4d:d7:68:
2b:bb:7a:a8:e8:f1:9a:b6:20:6d:30:99:21:a3:96:
5e:31:d0:b6:20:50:d9:b9:6e:4d:eb:4e:35:0d:fa:
63:77:96:9e:72:96:95:91:5c:11:ce:a1:60:33:56:
7c:04:bb:1a:3e:bf:07:09:85:30:c7:b0:db:f5:ca:
b8:c7:66:1f:68:6a:e6:f4:fa:38:c6:8e:7b:b3:be:
b4:75:10:ae:e2:8f:c6:90:a6:a9:8a:da:15:94:d0:
9b:5b:f4:5e:85:6e:87:87:4f:ec:eb:66:1a:e0:9d:
87:8c:4e:1d:4d:f8:73:cf:79:74:56:90:05:a9:53:
63:80:ca:e8:e4:c7:87:5d:ae:44:79:bf:8f:65:b9:
45:32:38:25:d1:95:3b:e4:de:d6:ec:a0:d3:f9:18:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CF:D1:7F:A8:5F:CD:E7:0D:10:0F:59:3E:81:AC:4B:2B:8C:B4:99
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1d:d2:fc:04:c4:6e:2f:8c:f7:e0:61:41:e4:84:77:3e:59:
84:83:3f:f8:6f:52:a0:42:69:bf:fa:22:00:1a:88:d9:0b:f5:
18:b8:54:f0:79:f6:c9:98:2d:53:95:62:9a:56:5c:47:f8:0e:
2c:85:be:62:80:85:84:b4:fc:3f:ec:2b:a4:5e:d8:ed:6c:38:
6e:5e:0d:cd:85:b5:1f:07:3a:10:53:0c:ee:97:1b:99:27:0f:
f9:4e:1b:fb:fc:de:e5:cb:02:1e:d9:6f:00:d0:fd:2d:db:9b:
ab:5b:b2:35:67:27:4c:d8:48:63:73:f6:bf:a7:2e:ac:c2:c3:
21:c4:d0:7b:40:f7:5b:58:4a:0e:44:89:16:82:bf:28:2d:b4:
af:8f:8a:60:6e:9b:4c:ac:b2:77:9d:19:8d:cf:bc:19:ce:6e:
ec:fb:ea:12:aa:80:41:94:ef:7a:a7:6f:04:bc:bb:6c:15:04:
4a:32:da:d5:b9:9e:93:1c:13:24:23:eb:5d:b7:72:88:ee:a3:
6f:42:6a:0f:6d:3c:19:27:a0:cf:0b:29:d9:7b:3e:b9:e9:a0:
4b:76:07:fc:99:33:7c:67:b9:07:7b:d1:d6:4c:40:c9:d1:6c:
5b:3a:5d:48:fa:28:ec:b0:d6:47:69:65:a8:28:2d:5d:9b:9e:
b6:bf:34:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:02 2025 by rpki-client