Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: 675XEJ/TbCG/Gm8YQqpKQkGdN2V6BjELDlMT0aR92HE=
Subject key identifier: 3E:B2:FC:F1:B2:BD:F7:E7:F5:BF:65:E2:17:CF:13:8A:10:41:ED:B8
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 019A730198E55459918C74B95551CF42BB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:01:15 +0000
Manifest this update: Tue 11 Nov 2025 13:01:15 +0000
Manifest next update: Wed 12 Nov 2025 13:01:15 +0000
Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: rrKNzu0THOhRfxeJhETLsNYv34A74eXqdVIiQSQrMv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:98:e5:54:59:91:8c:74:b9:55:51:cf:42:bb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Nov 11 13:01:15 2025 GMT
Not After : Nov 12 13:01:15 2025 GMT
Subject: CN=3eb2fcf1b2bdf7e7f5bf65e217cf138a1041edb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:0d:35:06:ef:37:02:26:e1:90:dd:08:25:
bf:92:29:49:7e:f2:cc:ca:32:9f:f1:60:20:d0:8c:
b8:f3:c9:ff:0c:b7:0d:6e:8f:3d:ba:5e:cc:ae:0b:
4a:b6:24:e1:62:98:e2:b7:86:2f:88:30:78:ed:c2:
3c:5b:f2:b9:6d:a1:e6:18:fc:78:60:63:95:62:88:
4d:62:87:73:b4:7f:be:0f:50:69:53:f9:9a:7a:bf:
48:b9:d8:a8:b1:55:00:96:bc:1a:70:8d:ac:12:42:
40:f3:09:3c:a2:d6:55:9d:12:61:ba:ba:2f:de:d2:
70:1a:84:a7:ee:aa:b9:63:03:46:b5:c8:ae:b4:d1:
e1:39:2e:ee:ab:5d:76:7b:d0:5f:19:11:fc:a9:8c:
4e:a3:31:ce:22:7f:1d:6e:5b:3f:a6:b6:af:f5:5a:
22:f3:bf:2f:c9:a6:b4:05:64:e2:7b:2d:1d:31:f2:
d1:52:f3:69:b2:86:50:31:54:35:56:4e:ce:bf:c1:
65:bd:28:4b:a5:1c:f5:57:ec:31:3e:0e:6e:56:9b:
e9:4c:59:3d:48:82:4e:90:02:05:94:b3:a3:7d:97:
a9:9a:94:46:00:25:7c:ad:29:3a:23:91:a4:d1:05:
e9:f8:3c:6f:59:74:d0:88:72:bd:cf:0a:17:84:1c:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:FC:F1:B2:BD:F7:E7:F5:BF:65:E2:17:CF:13:8A:10:41:ED:B8
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c8:69:6f:c1:cb:b8:8e:20:fc:b4:da:98:2a:ec:1d:2b:ba:
7e:6d:21:c1:4d:29:21:2a:5b:f2:56:51:e4:1f:26:86:49:ab:
ae:bb:13:d4:09:04:89:99:94:7b:90:eb:85:9e:50:7b:7f:c5:
d3:54:ae:62:c2:04:ff:58:03:8b:7e:d8:25:dd:d7:7a:41:1e:
7a:08:39:15:e0:d2:2b:ca:c4:49:17:d0:dc:5a:8f:a5:bd:f2:
a0:da:84:ae:42:2d:9d:ea:96:1f:2b:46:fd:d8:c1:8a:8d:50:
eb:9f:f4:01:57:f9:17:29:e0:e7:34:98:52:a0:59:05:f3:0c:
4b:52:df:7a:e8:fc:8e:24:8c:6f:1c:b3:11:0b:0d:f2:16:1f:
d0:6e:69:64:08:ea:54:87:d7:73:67:59:85:16:d7:ce:33:a1:
ed:6d:92:7f:96:19:39:66:81:23:0f:60:a8:d9:77:1d:36:4c:
23:b7:8d:cc:91:03:be:2c:08:06:87:92:14:ac:b4:b0:5c:6a:
45:e1:b7:ad:3b:cd:5e:1d:9e:53:3e:8e:6d:75:57:d3:05:99:
27:5b:ef:2b:4c:58:be:a3:7a:be:f5:b2:d6:a7:ed:f6:b2:74:
82:de:20:7f:49:a6:71:f0:8f:59:7e:1a:7c:0d:90:ae:7e:6a:
53:78:19:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:46 2025 by rpki-client