Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier: FQBBH4DY1ar9BX0Ylia0dRKi6sm098NwNFwm1Tmt+Qg=
Subject key identifier: EC:11:15:45:09:E1:73:0D:2C:F0:94:11:7A:08:2F:52:ED:1B:9D:B2
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer: /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial: 019A7293E390F88F87E4E602AAA9754D4AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:25 +0000
Manifest this update: Tue 11 Nov 2025 11:01:25 +0000
Manifest next update: Wed 12 Nov 2025 11:01:25 +0000
Files and hashes: 1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: dMlBtLqtjsXlNGjm5YKJkW69EaS7am6yDXLS6k9CV4M=)
2: iWeqg2fM-bOr0nrPrGbQuhoU9AI.roa (hash: FKxgaCA0gKFSYvzHrPdwz/du8IpMEpojl7Ooe7Yry+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e3:90:f8:8f:87:e4:e6:02:aa:a9:75:4d:4a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
Validity
Not Before: Nov 11 11:01:25 2025 GMT
Not After : Nov 12 11:01:25 2025 GMT
Subject: CN=ec11154509e1730d2cf094117a082f52ed1b9db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:3d:4c:b7:52:62:f4:48:78:a0:09:6a:12:
e2:37:4b:01:1f:17:31:bf:f3:fd:f0:f8:b9:60:a9:
5e:36:f1:ed:05:5d:f9:a4:20:b1:65:dd:06:7f:3d:
97:b1:b4:bb:b6:a6:bd:4e:86:fe:62:23:69:65:4d:
b0:55:40:61:e9:d0:ad:02:88:ad:fb:c4:3b:43:83:
b8:93:d6:6a:f5:27:cd:11:84:a1:cb:53:ab:8e:2c:
26:bd:15:ff:d7:7a:ac:da:31:5c:88:18:f9:49:05:
d0:20:27:ff:cb:3f:02:0b:b6:47:76:d5:1e:8d:a8:
ac:c8:7a:20:91:6b:c9:36:cd:90:08:22:2f:0c:df:
d7:30:f3:d1:60:f7:1d:57:6b:1b:00:19:ed:4d:75:
dd:8f:7d:2a:5b:c5:7a:a5:b4:58:7e:31:98:ed:fe:
5f:f7:2e:f0:5b:f2:a5:4c:9f:c5:98:c3:e6:7f:3b:
68:3b:10:4d:53:2d:da:d4:ef:2f:6c:e8:79:10:0f:
a9:ca:40:11:b9:65:fe:cb:8c:ef:70:87:f7:e6:87:
50:81:81:9b:10:1c:f6:46:f7:d2:75:6d:cb:d1:62:
4b:30:11:0a:47:9b:1a:3f:4f:88:47:7d:31:db:57:
30:c8:b3:92:54:3c:20:e8:8f:0f:1e:ab:48:c1:e2:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:15:45:09:E1:73:0D:2C:F0:94:11:7A:08:2F:52:ED:1B:9D:B2
X509v3 Authority Key Identifier:
keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:73:02:47:88:e2:e6:1d:79:c1:64:0c:44:6c:e1:6b:b5:13:
31:11:b1:a2:01:5f:5e:f7:94:5f:0a:6b:cb:57:ee:a5:78:f9:
b3:1d:8f:d1:da:1b:4f:8d:0f:3c:88:ab:09:75:25:14:c7:31:
b4:dc:f3:41:a1:4a:c1:83:1a:9c:5e:ca:1c:ab:d7:64:3e:8d:
96:9b:f9:df:a2:df:bd:8f:38:b7:ac:bf:d0:5f:4c:24:5b:38:
ba:ad:67:c4:f1:2a:ba:85:88:91:dd:d5:f8:48:a8:b8:2d:43:
50:20:8d:b5:7d:f5:c4:28:b3:55:63:b6:a2:aa:8b:a6:fc:5e:
a5:82:48:79:95:fb:fe:11:c4:73:e3:d1:7d:7d:f4:75:f3:20:
f0:57:c5:4b:80:df:72:83:59:e4:b7:7e:0b:82:65:ff:80:a9:
20:6f:2e:9d:64:c9:c4:bd:f5:33:00:f2:63:04:0c:41:42:3b:
1c:18:00:36:e9:d3:fa:ec:c0:92:66:33:0b:c5:d5:1a:17:c1:
60:ac:e3:1b:0c:1f:8e:c5:03:34:b5:ce:97:41:32:ad:89:27:
2f:3d:84:23:08:87:94:70:1d:10:7c:c2:89:8c:02:da:98:8b:
32:f3:50:92:09:aa:8a:24:b6:08:d1:c6:d6:c3:eb:c2:40:5f:
dd:6d:f4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:41 2025 by rpki-client