Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: RJiYZlXGJ57YuecHCFTMwbhxuZ3LBjykLzixA3faAJA=
Subject key identifier: F6:A5:53:E7:1E:AE:C6:CD:1F:25:2B:D3:4C:54:AF:C0:27:94:E2:22
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 019A71B9203E09AF4242AD1BA588586D07E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 0ACA
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: kbbCPPY2tm+1m8a956rDDkrSCbQnpiy1cfgahZs/AF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:20:3e:09:af:42:42:ad:1b:a5:88:58:6d:07:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=f6a553e71eaec6cd1f252bd34c54afc02794e222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:71:47:c9:bd:7f:e0:2d:52:7c:cd:80:f9:
cc:21:cb:93:62:27:f4:45:f3:d2:c0:76:88:1b:af:
b0:de:01:13:15:12:2f:c7:82:16:77:1b:5b:dd:18:
c6:86:0b:8b:af:0e:82:83:13:21:20:c1:5f:41:61:
70:08:74:00:08:2e:ef:de:6d:7a:71:9f:d8:28:f3:
ef:1b:1b:1c:be:f6:96:b0:cd:08:e5:14:eb:1d:ef:
a4:94:dd:c3:be:4e:08:41:11:7c:c8:fc:bb:ec:18:
68:75:77:c9:11:6b:f1:f0:86:17:4f:df:4e:44:58:
48:fb:a7:41:b2:9a:29:10:7d:ce:cb:cd:eb:be:5a:
dd:08:a7:c1:af:8d:fd:7b:f0:37:e2:c1:6e:4d:35:
a5:18:a0:6a:5b:c5:36:92:e7:2a:4a:c1:9a:fa:01:
ee:ba:af:82:eb:83:ad:b6:05:c1:85:1c:ff:fd:41:
3a:21:bf:25:d1:3a:9a:63:0e:06:1f:38:ed:e7:b1:
5e:d7:6b:bb:7f:ee:2b:d0:36:f7:58:65:ec:df:3c:
20:ee:1a:43:c1:78:9d:02:af:42:98:fb:a4:b2:c6:
cd:b9:5d:2f:3e:43:94:c4:8e:46:53:54:8f:c9:04:
4b:b5:4d:dc:c4:76:47:65:42:e1:58:82:90:e1:4b:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A5:53:E7:1E:AE:C6:CD:1F:25:2B:D3:4C:54:AF:C0:27:94:E2:22
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b7:21:2e:49:db:5d:50:af:63:36:8d:29:3d:12:cc:06:83:
3a:3a:5c:c3:67:58:fc:1b:d7:7f:dd:b4:cb:9a:29:39:86:51:
d6:7f:a5:d6:06:a3:a6:c8:f2:63:3a:9b:f5:89:63:d8:7e:f5:
b2:10:84:0f:bc:3e:2d:48:23:a9:4b:f5:bb:88:85:5e:02:58:
f0:8b:54:55:2a:3f:fd:60:0c:1c:a5:e8:30:0d:5b:2b:3d:71:
55:a3:54:38:1f:99:a0:ed:88:e1:f4:07:72:39:7b:4b:ad:fd:
40:1c:f8:85:1e:ab:4f:35:fa:6e:14:89:01:7f:77:85:f6:fb:
ea:93:8f:7c:42:f6:11:41:93:30:67:30:8b:58:2a:23:01:f4:
93:2c:6c:3e:b1:d6:50:50:d9:08:87:ff:cf:2b:3d:9a:e4:36:
f3:3c:14:0e:0c:21:15:a3:cf:11:6a:b5:9d:9a:df:89:80:14:
86:70:bf:b7:04:a3:7c:1a:fe:05:cf:2f:e8:e6:5f:21:82:63:
6e:8f:38:c8:4e:70:1e:00:61:cc:9e:1f:19:2d:64:8d:b4:84:
10:0d:38:0c:39:aa:80:2f:6c:2d:04:86:d3:0c:1d:26:e0:8e:
c3:56:e6:74:23:1b:b5:4a:87:24:c0:6b:6f:b9:f4:f1:df:5e:
e6:c3:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:43 2025 by rpki-client