Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: UX7VAkcB42gVCO9hJcFSx9o+IW3iV1NZrNZgVc8w0cw=
Subject key identifier: 2D:13:AC:FD:B8:37:DA:8C:71:A3:16:B0:BE:B2:17:BD:BC:63:4F:59
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 019A7149ABC53E32A55CFB0B7CBCBE018605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (hash: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: NDtrz4Vi0+kjtqg4+p9vr3F2vJQjWE1mmw0I9twjYJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ab:c5:3e:32:a5:5c:fb:0b:7c:bc:be:01:86:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=2d13acfdb837da8c71a316b0beb217bdbc634f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:ba:0b:fe:00:7a:a6:d9:68:fd:92:22:62:
f6:68:34:5a:84:bb:f2:96:c8:a3:f7:e7:3e:26:08:
48:28:f0:cb:b8:45:e7:c9:ca:54:e3:f1:2d:ac:74:
58:5c:6f:76:05:64:28:41:61:4d:2f:ec:a3:5f:0f:
2e:b5:fe:ff:98:2b:74:bb:02:79:f0:af:7f:e9:69:
e8:9a:72:1a:3c:bb:a0:59:d2:e1:e7:18:a0:77:10:
53:64:8f:bc:14:f3:5c:27:fd:2b:42:d3:2a:db:91:
cf:84:56:23:ea:c8:0e:8d:30:68:73:db:d5:99:d6:
14:61:6e:2a:ae:8a:eb:d0:c2:65:7a:32:5a:a5:53:
e8:e4:82:54:7f:75:a9:b0:cf:b4:ea:14:16:2d:01:
b6:ba:c4:76:05:df:7c:20:16:f4:0b:cf:f1:a5:ae:
05:65:5c:c7:a4:00:a8:cb:ba:f3:44:64:04:2e:37:
f7:25:a5:ad:81:18:86:7c:92:e5:9a:29:60:b6:d1:
30:c0:73:e1:4a:11:06:05:1d:ea:e5:dc:7c:33:b0:
12:81:4d:8a:15:b9:3a:ba:2a:f6:71:0c:f9:ee:85:
6f:2c:57:1f:9e:09:5e:bc:65:58:1d:a4:e6:9b:09:
99:f8:2d:3f:07:ca:6f:8d:bc:ae:91:92:ab:02:af:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:AC:FD:B8:37:DA:8C:71:A3:16:B0:BE:B2:17:BD:BC:63:4F:59
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fb:d6:72:57:b4:2d:e4:7a:72:32:b0:ce:48:63:ad:bb:37:
32:c5:43:27:b5:d7:e6:b7:13:41:24:ab:d8:ff:a6:96:f8:53:
4b:42:ad:1d:02:2f:96:75:4b:7e:72:d7:e4:e0:f3:4c:20:f8:
b6:ea:f7:d2:e5:c2:81:8b:aa:ef:8a:a1:fd:2f:15:1c:93:d7:
2b:1f:35:aa:dc:06:a3:42:29:45:c6:99:86:f3:0f:2d:63:cb:
12:47:ad:8a:ec:38:13:64:cb:72:f9:01:a9:e3:86:be:19:80:
98:ca:1c:f1:44:6a:1f:ec:d4:19:c3:9b:3b:84:df:b4:65:9f:
46:f2:0c:ef:71:e4:51:9f:16:20:62:09:00:31:1a:71:24:01:
16:94:0d:6e:e8:d2:ff:28:4f:f2:99:5d:08:ee:c5:f7:ea:d9:
08:fa:8c:02:05:ea:2b:b3:83:5b:c3:a3:f1:84:85:65:bc:2e:
b6:01:7a:94:15:32:bb:8f:cb:75:42:e0:62:20:1f:59:4d:70:
de:2e:ef:ab:a7:1a:cd:94:4b:5d:5f:1a:47:b3:0e:9d:c1:5d:
44:5c:5b:e5:a7:0d:9f:b8:1f:c3:ef:7d:c8:17:b7:d3:fe:19:
2e:ce:24:5e:fc:9a:c5:d5:fa:e8:f4:0d:26:87:3a:cf:d4:a4:
11:4b:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:28 2025 by rpki-client