Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: 0F7Ea4JP307l1POY660OnDhzsMtw2Qgj2L+o19Cur08=
Subject key identifier: 09:64:A6:71:BA:E7:A8:E0:5F:DE:50:62:BB:E8:6C:C5:F1:F8:F5:78
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 019A71131D8B7BABB095A17C43B70F622B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 13CC
Signing time: Tue 11 Nov 2025 04:01:09 +0000
Manifest this update: Tue 11 Nov 2025 04:01:09 +0000
Manifest next update: Wed 12 Nov 2025 04:01:09 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: gNxhQc+hYZCUqB0n4m7t17uKvYcudEP2ONmG21W0xas=)
2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1d:8b:7b:ab:b0:95:a1:7c:43:b7:0f:62:2b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Nov 11 04:01:09 2025 GMT
Not After : Nov 12 04:01:09 2025 GMT
Subject: CN=0964a671bae7a8e05fde5062bbe86cc5f1f8f578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:ad:c5:60:64:6a:07:31:13:26:7d:88:43:
1a:bb:6b:9e:3b:ce:62:6c:3b:37:92:3a:e8:64:92:
04:c1:97:4e:b9:28:d0:54:8a:cf:e3:cd:ec:2d:d6:
88:8d:2e:a0:7d:94:5d:46:3b:dd:67:51:c0:61:f7:
5b:1f:74:34:db:84:0a:88:83:d7:30:77:95:ae:ee:
08:93:35:1c:66:c9:cf:9b:ec:cc:a7:73:be:9f:8d:
43:a5:06:8a:a4:99:10:d2:83:c7:c2:8a:7c:50:08:
dc:59:19:dc:55:e4:93:32:d1:c7:8c:89:dd:a3:fc:
18:10:85:fe:0c:fa:ac:a4:1b:40:c2:a3:ee:7e:4b:
8c:8d:a9:3d:c8:8d:e5:99:f1:e8:4f:63:5b:7f:b1:
92:95:5a:d6:d8:49:92:58:76:32:1b:60:7e:be:ad:
24:34:6f:40:58:7e:9f:ed:8f:7c:d2:72:79:e5:e5:
80:20:6f:86:12:47:b4:ce:48:67:54:2f:12:c5:62:
68:f3:f8:2a:01:4c:bd:fd:17:b6:dc:b1:5a:c4:4e:
4b:66:da:87:e7:65:d8:ea:32:38:3d:7b:99:64:ea:
66:33:54:c4:fa:c9:f3:27:45:96:f6:a4:f6:23:69:
03:2f:29:5d:c3:54:16:14:f6:eb:02:32:cf:ba:67:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:64:A6:71:BA:E7:A8:E0:5F:DE:50:62:BB:E8:6C:C5:F1:F8:F5:78
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:78:16:7b:a7:03:a6:43:a9:22:bb:77:32:0e:ca:7f:4c:ce:
a3:19:fc:97:33:be:20:e0:9d:88:80:03:e4:09:c8:69:cb:b0:
6f:b1:78:1c:1a:d7:24:29:46:22:67:fc:34:b9:07:d1:ef:ac:
3e:07:2d:fa:21:65:6b:83:d3:96:ee:0a:4b:ac:a6:8f:14:33:
92:2c:c1:40:28:83:a7:99:53:4d:e5:2b:63:62:12:6a:54:08:
9d:cc:c1:9d:82:f3:3c:12:c2:42:c2:43:41:d6:21:ea:e4:12:
09:05:f4:cf:70:c5:4b:5e:0f:8a:c9:e8:57:64:b2:c8:3c:69:
56:22:8f:b1:d4:b4:0f:96:84:38:e0:33:91:9a:42:2b:2f:4d:
b0:51:8d:b0:14:87:12:dc:ef:6a:20:b5:57:73:76:b3:06:02:
f5:58:50:42:21:57:eb:9c:e9:ee:12:bf:05:a8:9f:87:a9:f9:
f1:9a:7b:8f:de:5e:47:c6:54:4b:2d:9d:6e:66:99:37:a5:6c:
ab:3c:97:05:36:a3:c8:5a:54:c8:dc:ad:a4:d5:95:db:ad:d2:
1e:4f:54:20:f0:83:08:f0:01:05:65:8c:46:dd:f1:4f:3d:4a:
fd:1e:89:ed:f6:30:7f:28:a3:6f:09:26:b3:a0:64:5b:a9:ee:
cd:7e:02:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:33 2025 by rpki-client