Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File: V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier: t9ZbySOYcLxYtL/H4uZWJGkDrE1yRf4QJV8oy11nZvM=
Subject key identifier: 74:AF:12:3E:82:74:10:D3:FE:F2:FB:F0:AB:1B:B4:A4:31:04:76:E9
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer: /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial: 019A232E106D39DB1EE5F9FA12BFBBCDCC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number: 12DD
Signing time: Mon 27 Oct 2025 01:00:12 +0000
Manifest this update: Mon 27 Oct 2025 01:00:12 +0000
Manifest next update: Tue 28 Oct 2025 01:00:12 +0000
Files and hashes: 1: K1RXDd41ejHM6gE_h4XPr9eqXqg.roa (hash: HFPOwF7yl1DzvJdGJnqBFfDZ3/PqP2JlTX3PgCcBwh0=)
2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: 86MWWvcgKPdHxjBPeTT/ZnIebIZmX9ESBJeJVQxpTdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:10:6d:39:db:1e:e5:f9:fa:12:bf:bb:cd:cc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Validity
Not Before: Oct 27 01:00:12 2025 GMT
Not After : Oct 28 01:00:12 2025 GMT
Subject: CN=74af123e827410d3fef2fbf0ab1bb4a4310476e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:d8:c1:39:57:4c:4c:73:69:59:e7:7d:40:
7d:5b:aa:8a:27:37:65:d9:0b:c1:f9:b9:c5:a5:53:
b7:84:ea:27:14:4f:f4:5c:d8:46:f3:6b:40:43:63:
5f:24:10:01:84:f3:bb:6d:5e:2e:00:b7:41:18:03:
ad:19:67:bc:74:f6:42:49:53:7d:b7:ba:f3:64:66:
89:68:d7:2f:9b:31:77:ad:c2:ea:e7:20:38:f7:45:
65:b2:05:77:47:41:52:14:87:3c:b6:80:2f:c0:31:
59:07:6d:95:7c:19:37:3d:11:20:64:5b:30:37:3a:
9b:83:ba:53:c8:dc:ff:d0:da:84:5a:b2:ab:5b:17:
30:a9:7a:82:d8:d7:2d:aa:6d:2f:c5:c2:93:bd:34:
7b:ab:f3:b9:21:96:01:c4:d5:6f:19:48:5d:bc:b9:
9c:a3:ff:2f:23:76:c8:10:2f:39:b4:7a:26:1b:81:
88:1e:c2:75:ed:6b:9d:39:36:f5:3d:67:07:98:8e:
b8:dd:2f:f4:1a:29:21:30:95:ed:9f:e3:5d:bb:b8:
3d:fd:2c:c9:60:16:af:30:23:2f:c2:82:f7:d0:08:
1b:73:6e:40:b0:aa:ca:c8:83:46:9f:7e:d1:f3:cb:
ed:6a:06:71:66:83:99:dc:7b:10:4c:65:bf:6c:91:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AF:12:3E:82:74:10:D3:FE:F2:FB:F0:AB:1B:B4:A4:31:04:76:E9
X509v3 Authority Key Identifier:
keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9c:95:2f:38:12:fd:a6:a4:d3:ea:8f:6f:da:31:30:af:f3:
99:92:c4:cc:1c:91:16:d7:c2:eb:42:38:df:2e:0d:64:bf:c5:
5a:97:75:4c:82:fb:ca:8a:d1:f6:15:1a:cb:ba:ae:ba:ef:7a:
cd:07:bc:d7:e7:93:b6:59:38:d7:bc:3b:48:33:be:c6:d4:14:
92:d9:41:b2:7e:6e:08:d6:1f:bc:18:8b:4d:f5:fa:8b:32:6c:
6c:bd:9e:a1:86:de:65:fb:25:e3:6f:d2:02:ed:7b:b6:6d:ef:
ee:3f:df:d9:e6:97:c3:67:a4:cf:59:52:96:9b:d7:03:b1:41:
59:9a:aa:46:c9:70:2f:3e:2b:9e:1c:74:13:59:07:db:0c:fc:
2a:f3:29:f6:2c:01:57:08:89:0b:f9:53:7b:cf:f9:e8:89:30:
48:13:0b:88:42:68:10:13:04:d9:62:20:b8:aa:ef:23:dc:c7:
c5:e4:50:01:f7:5c:1e:d9:5d:bf:c3:d3:2a:9c:ee:9b:c7:b0:
87:b8:e2:a8:72:5f:f1:90:5e:76:a1:87:fe:92:20:40:79:8e:
f1:a8:2d:0e:82:e7:dc:b4:29:e9:24:48:2e:d2:09:15:fc:3b:
97:0d:95:5a:d8:04:b4:6f:a9:25:7c:84:e9:76:56:c6:75:ba:
60:7c:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:58:25 2025 by rpki-client