Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier: uU9EV45CrP8UYFiG4c7O0FeCO2OEaDHB0Yjwt/E+vDY=
Subject key identifier: 9C:22:D8:35:B6:5B:E4:98:40:98:55:D1:F9:9F:E5:61:F9:F1:AE:60
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 019A72265CED3A6679B89A90CEAAD4214CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number: 0EC1
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: RTbowa+DEIZfcdf/2WfoZSUHH1o6ClQMtJMwpYT+5H8=)
2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5c:ed:3a:66:79:b8:9a:90:ce:aa:d4:21:4c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=9c22d835b65be498409855d1f99fe561f9f1ae60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:6d:6f:b6:ed:92:21:1b:3e:9f:6b:71:5e:
3e:42:ee:e6:c2:b8:2c:45:f3:c3:58:a3:89:28:6b:
9e:c5:af:ab:20:b0:97:2c:4f:92:1e:4b:5b:4a:df:
eb:ba:2f:6c:75:a4:17:5b:d2:df:09:c4:21:5b:0b:
ad:b9:1b:88:e3:15:9c:73:72:9c:5e:39:af:60:e6:
a4:82:5a:22:e7:f0:3b:7f:07:cd:67:41:c0:21:4a:
b8:69:75:f0:89:e2:d6:84:f1:97:0d:d9:9b:cf:6b:
51:8a:3f:af:38:a4:0d:bf:33:d9:fa:b7:d3:41:9b:
0b:7e:3d:04:58:1a:6c:21:23:67:cf:11:3c:c3:7c:
46:a4:af:d2:c9:47:81:a3:a6:84:de:68:c8:da:2f:
43:bc:15:88:81:d6:b0:4a:65:6c:4d:1c:70:89:d5:
7a:86:fa:20:33:96:5e:6d:1e:d3:d8:ca:04:75:3f:
9f:08:5e:4e:d5:40:2f:4a:f9:44:bd:82:8b:57:ac:
e6:4c:a1:ee:b5:04:2d:fb:9b:43:a2:e4:04:06:3e:
76:f3:de:3c:95:db:f5:1f:26:ff:be:e6:2a:7e:a8:
bb:f4:1b:2c:d2:28:04:dd:1c:20:0e:b7:2b:8a:c0:
9a:0e:3e:8f:26:c3:56:b7:26:9c:3c:17:41:61:ea:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:22:D8:35:B6:5B:E4:98:40:98:55:D1:F9:9F:E5:61:F9:F1:AE:60
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a3:60:52:ad:2b:3a:c1:d5:5a:6c:65:0e:70:8e:fa:8a:8c:
62:38:a5:1c:24:35:eb:3f:78:bd:26:f2:93:a7:11:f4:04:ff:
d4:3b:ca:13:fa:d7:93:e6:69:9b:f9:84:a7:07:4e:02:53:6d:
74:e8:8c:2b:89:d4:4b:9c:55:80:07:75:97:dc:c8:db:1c:ae:
a7:72:c4:aa:e4:a5:d3:d8:e3:2b:9b:92:e3:44:db:b0:92:fe:
a2:80:ea:a7:35:e9:59:1d:7e:d9:33:9a:25:e1:1d:45:c1:bf:
9e:44:5c:a6:a6:95:9e:f1:50:f9:75:26:bf:af:62:ee:28:f4:
2d:16:c2:9c:1c:e0:d6:3b:da:e6:03:8d:ea:57:bf:d6:b6:02:
77:0a:75:05:ea:70:f5:3f:8d:97:e5:ed:82:bc:06:01:d3:31:
96:8b:d8:93:fe:f0:1b:9d:d8:6c:16:55:a2:67:cc:35:a8:a4:
66:40:ed:8b:d8:15:9f:bc:a6:52:f2:5f:fd:c0:5a:83:c0:63:
f8:1d:d4:d4:07:7a:d0:20:dc:53:af:34:3f:25:aa:ee:1d:8e:
ee:5d:c7:8a:51:a6:2a:27:f5:06:2a:43:8c:85:52:46:88:6e:
d7:a2:b6:f4:dd:4f:c3:a4:3d:db:25:ad:62:b1:7a:77:3b:2d:
1b:a2:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:05 2025 by rpki-client