Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier: mq4HK0PTGk9eBeQG1uW6wY5WZ1THMrpapUTkaN9Sblg=
Subject key identifier: EE:D9:C4:75:E2:84:A3:6A:0C:24:C0:B0:8D:9D:37:05:52:0D:A7:F2
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 019A13F232B1AB0B59900B73D9385FA06DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number: 0E74
Signing time: Fri 24 Oct 2025 02:00:31 +0000
Manifest this update: Fri 24 Oct 2025 02:00:31 +0000
Manifest next update: Sat 25 Oct 2025 02:00:31 +0000
Files and hashes: 1: DwNEa67GeVfXPcLrWPlMm4OLjVo.roa (hash: 3gEhvhLUNasIQ2pRn7FSbquTzSKI+z6q4epOcxacj1o=)
2: elJTMVmgnWj44OPlL-6xmFMzLhQ.roa (hash: GWf5WI3kD5bsPfeiOoXwWgNYLd20Fx5ww7PTXcPPcr4=)
3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: /jRjAjcqsabCHbA+98v8uRGmqwQevBO+hpJfcPwmYIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f2:32:b1:ab:0b:59:90:0b:73:d9:38:5f:a0:6d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Oct 24 02:00:31 2025 GMT
Not After : Oct 25 02:00:31 2025 GMT
Subject: CN=eed9c475e284a36a0c24c0b08d9d3705520da7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:e3:b1:cf:39:cb:cc:92:5c:cb:f7:38:31:
3f:0d:ce:cb:2c:cf:f2:97:1a:68:e5:c6:55:ac:6d:
31:c2:88:39:b3:67:93:2d:a8:ec:17:70:54:d6:44:
6c:51:cd:1b:b8:35:5a:0c:60:04:92:6f:be:f7:65:
e7:c8:f2:dc:5f:ad:d9:06:3a:0b:11:51:48:0c:84:
86:78:86:01:1f:9c:7b:11:dd:6f:41:87:16:36:46:
79:66:15:c8:61:65:05:ab:cd:c4:ac:93:17:4f:9a:
7d:4d:31:38:28:a7:fb:d8:be:af:3e:ba:05:10:36:
6c:23:8a:d1:d2:da:00:44:b9:e8:76:17:45:0c:83:
79:17:5f:6a:0f:af:3c:2f:0e:b4:75:21:f4:9f:16:
f6:b6:a8:0e:ad:e0:e0:81:75:ef:18:91:2c:af:b4:
41:92:1a:ee:73:1f:82:5d:61:c1:24:b8:c9:ea:e3:
53:d1:9a:69:db:55:51:ee:35:63:00:45:14:31:d1:
99:e4:c2:e1:76:43:98:31:d5:9d:8b:03:3c:56:36:
bd:13:9e:cb:c1:80:16:1b:d8:94:5f:f5:5f:33:cd:
d1:7a:53:f5:77:42:45:2e:42:ea:0c:89:33:05:fc:
53:85:d7:dd:57:c0:f5:0b:56:b8:eb:fc:d1:0e:ec:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D9:C4:75:E2:84:A3:6A:0C:24:C0:B0:8D:9D:37:05:52:0D:A7:F2
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:91:f4:12:20:85:d2:a7:8c:c5:95:97:53:52:c4:13:b1:26:
ee:e3:30:02:fd:e6:02:95:c6:bb:70:42:7a:2d:92:4a:1c:85:
4e:16:58:40:aa:2d:d5:bb:aa:1a:d3:b0:ac:0a:05:fd:ff:62:
14:0e:e3:84:22:e8:a7:95:98:08:4f:f4:84:34:c4:a1:ff:7c:
c6:49:dd:83:06:5c:4c:ed:97:c6:4f:19:40:54:62:50:05:53:
a9:21:68:2d:dd:6e:a4:99:28:ab:0a:38:ae:93:95:11:7c:6c:
47:d8:a1:50:b4:6f:42:20:e0:c1:c0:e6:08:1a:a7:5e:14:6a:
5c:1d:21:0a:02:4b:35:6d:b3:8f:30:99:c2:a9:63:19:26:0b:
a2:61:75:6a:27:7d:70:ce:5c:0a:68:47:11:96:42:12:dc:5e:
76:31:8b:2e:a9:33:f7:f2:d0:b4:88:a2:79:91:92:96:c9:1d:
e3:9d:6b:b8:9a:22:dd:56:fa:d4:53:cc:b2:38:22:3a:5c:93:
ae:4d:aa:38:3a:1a:17:9a:de:cf:06:4c:f4:05:f0:02:66:fb:
d0:96:0a:41:2d:bc:3f:72:ff:b4:95:1a:58:85:65:f6:92:6b:
b1:35:86:b9:5c:ce:cc:3d:84:d9:26:81:96:12:03:92:ea:ee:
c6:52:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:34:39 2025 by rpki-client