Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: aZA6XHJ/GWmeHtwTiaYNpYRqNLd+wcpBE33x/LStcYA=
Subject key identifier: E6:FA:96:52:30:46:35:F1:DA:83:89:70:E8:3F:31:EF:94:BD:F8:F5
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 019A4FD07E95B1D97D0BA74E600DCB36B227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 0ECE
Signing time: Tue 04 Nov 2025 17:00:55 +0000
Manifest this update: Tue 04 Nov 2025 17:00:55 +0000
Manifest next update: Wed 05 Nov 2025 17:00:55 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: FyUDXXaDlH3DtyDE7KcWHN5zST1u+FEvMl2pJAVOElA=)
2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:7e:95:b1:d9:7d:0b:a7:4e:60:0d:cb:36:b2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Nov 4 17:00:55 2025 GMT
Not After : Nov 5 17:00:55 2025 GMT
Subject: CN=e6fa9652304635f1da838970e83f31ef94bdf8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:e4:e1:70:e4:0e:12:3f:a2:13:79:61:7b:
ad:af:0c:65:0b:ad:3d:d4:98:d6:be:9c:62:3f:4d:
ef:ed:63:5e:40:18:5d:8a:2b:1e:51:e5:7d:7d:c3:
4f:45:d8:82:28:3f:f6:7a:1d:8a:c5:e7:a2:2b:17:
44:42:8c:77:46:23:7c:12:3f:c8:a2:a4:d0:05:01:
3b:e8:f0:3d:e4:86:66:7a:53:46:31:28:4a:8f:d0:
6b:1b:02:f9:c9:b2:ae:ce:30:9e:7c:57:e0:70:7e:
11:c5:83:14:b4:16:a2:3b:4b:8c:77:d8:16:e6:47:
9d:1f:82:87:6b:12:68:e8:c6:02:89:ac:47:a5:4b:
1a:03:2d:a0:2b:1c:9f:78:10:95:ce:28:64:e4:1e:
db:a8:0b:16:64:0f:97:98:73:fe:7d:9b:cb:f6:ba:
8a:34:8d:7e:00:80:84:d2:6c:ba:ea:a8:46:37:97:
e2:52:f8:dc:7e:13:1f:00:ee:9b:92:f2:82:05:4b:
c8:8e:bc:14:b3:b0:5f:18:bb:6e:50:81:fc:02:b9:
be:a1:9f:5f:14:15:9f:00:19:cd:78:d2:24:ed:fe:
5f:0c:b1:f3:93:ec:33:ca:4e:96:e2:bf:b6:47:35:
5f:73:e4:ed:c7:4e:a2:22:cb:34:07:89:e5:08:42:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FA:96:52:30:46:35:F1:DA:83:89:70:E8:3F:31:EF:94:BD:F8:F5
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:98:5a:2d:d4:9c:53:88:e0:8b:80:58:d0:d4:ab:3c:45:d5:
2c:ef:2e:7e:aa:f1:df:b1:b4:81:cd:6f:da:8b:d8:7a:95:70:
54:7b:34:2f:45:54:3f:34:d1:fe:70:c7:90:63:fe:91:af:a4:
40:7d:c5:c0:48:5a:34:18:3f:e9:fa:00:a4:b5:da:ff:9e:c3:
d4:56:2b:05:7d:6a:1a:e9:3b:c6:58:47:cb:a9:db:bd:94:90:
d1:0b:d7:6c:52:37:13:d7:10:13:96:18:7f:e1:d5:86:82:0d:
4f:54:23:c8:ea:09:69:66:66:cd:26:4b:b9:15:24:d6:38:9a:
cd:3c:1c:c0:54:af:eb:fd:be:b3:3a:93:71:2b:c2:65:3f:a2:
6d:89:7c:53:1f:e9:76:74:9d:03:82:88:16:af:85:1f:ad:85:
e0:23:5f:bb:38:e4:44:90:48:80:ac:0c:cd:1e:4d:c0:d8:a1:
e6:1b:14:dc:de:9b:cf:34:8d:84:a8:65:dd:77:de:ca:cb:43:
d8:5f:f7:28:15:3c:3f:af:6c:f3:51:01:0b:7c:97:1d:94:7c:
87:02:0a:5c:bb:ae:a9:58:4b:0e:e7:a9:ea:4c:76:67:ee:66:
13:c4:68:ce:9c:22:16:4d:8a:49:f8:ed:08:19:2e:7d:eb:aa:
22:cf:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:20:24 2025 by rpki-client