Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File: 4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier: hec0F3pGYik/ozb9JsNkCaofKbredZFgo36CxWf5C9w=
Subject key identifier: B7:D8:15:B6:86:EF:73:A8:D1:08:42:16:E2:32:70:BE:44:F4:AF:42
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial: 019A7225F10D2C912D02F351AAABF81D2A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number: 07A0
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: TlWpzkNplWMW2Wb6jGpc5WzTJKwff88UtmrW08o9sXg=)
2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f1:0d:2c:91:2d:02:f3:51:aa:ab:f8:1d:2a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=b7d815b686ef73a8d1084216e23270be44f4af42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:a9:32:f3:70:5e:0f:24:8e:a9:36:6a:87:
4b:35:46:de:93:c7:ac:e6:d6:83:60:4a:45:e4:3c:
c7:5e:61:d6:46:3f:fc:30:c9:32:50:9f:73:ae:34:
d0:f3:21:51:4a:3e:43:6b:ee:3d:9b:d4:b4:fb:47:
0b:d3:c2:5b:b4:a2:ed:17:f0:9a:33:3b:5e:9a:ee:
73:d9:be:54:19:d3:23:45:13:7f:c7:14:b7:ee:fb:
a1:9a:57:89:69:86:b8:f5:53:d9:46:65:55:1f:46:
df:4d:0e:61:4a:97:a2:fa:08:9a:6c:72:33:17:c1:
02:53:1a:0a:cc:e4:6c:3c:16:2d:fc:3a:32:b6:f7:
8d:6a:61:04:3d:9c:78:47:5c:3e:9f:e4:9c:31:f1:
c1:be:01:b2:0b:7a:15:0a:17:c9:43:f2:32:4d:4a:
67:87:8f:14:96:01:d8:d4:b4:f6:2a:42:21:9b:77:
88:43:9c:f9:1a:4a:2f:ed:98:9d:e3:31:ed:c1:17:
f9:fa:6b:38:39:d7:d7:db:94:30:ea:20:63:40:d1:
f9:4d:4c:ad:04:25:c0:e2:0e:ae:40:ef:d6:1d:05:
0a:5c:00:a5:d6:68:cd:4b:fc:05:e2:c4:5d:61:2b:
48:36:6a:4c:46:28:55:e6:93:2d:66:c3:88:05:ed:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:15:B6:86:EF:73:A8:D1:08:42:16:E2:32:70:BE:44:F4:AF:42
X509v3 Authority Key Identifier:
keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5a:4a:02:a8:26:2d:47:c5:d5:0b:89:ce:fd:fd:4b:51:92:
fe:83:f4:bb:87:35:9c:f8:fa:1a:08:9c:af:ac:97:56:26:16:
08:0b:47:82:bb:4a:eb:a5:96:c1:4b:e4:2b:e3:96:e9:58:90:
45:de:9a:90:96:c5:a4:7a:ae:67:d5:12:15:2b:9c:08:80:da:
47:50:14:9c:3a:1d:29:c8:26:4d:da:53:62:10:67:3b:e2:67:
69:03:19:9f:78:65:31:aa:05:65:7e:07:7b:21:e6:a2:5f:e5:
85:c3:26:da:90:2d:e9:83:58:12:42:a8:af:c0:fb:fb:15:60:
79:38:43:16:81:ee:3a:a8:4e:4a:2f:3c:18:20:12:32:56:86:
09:54:bc:8c:c8:8f:43:dc:3b:9d:69:34:df:6c:54:96:05:72:
b0:7a:ab:c6:f2:0e:0d:1b:e6:af:00:b4:03:d8:31:b3:e8:e8:
c5:44:bd:d1:75:83:c4:54:bd:05:b5:d8:f5:d7:a7:e4:74:00:
bb:93:22:50:4e:a5:16:88:77:96:07:0f:f0:28:d0:21:d9:82:
14:43:69:52:9c:22:f5:3d:5e:4e:3e:51:4b:2f:d7:53:8f:7c:
ce:d1:f7:87:39:3e:d1:e1:c6:18:98:6c:77:8b:fc:b9:91:a1:
53:ed:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:38 2025 by rpki-client