Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: zWgjKQSziUzuh9ypKFz5wX9kpDwJWgJyrOnHZEAPQFg=
Subject key identifier: B7:9B:DD:15:40:EB:33:B4:CC:88:5D:A6:40:09:63:E0:61:6D:F2:1F
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 019A725CBCCB3E72A10514C6A5B180276400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 0AE0
Signing time: Tue 11 Nov 2025 10:01:11 +0000
Manifest this update: Tue 11 Nov 2025 10:01:11 +0000
Manifest next update: Wed 12 Nov 2025 10:01:11 +0000
Files and hashes: 1: LUZuaBg79dIsS49OjD0lOYRx6WI.roa (hash: v0D4l90748oOxXUPlzJQ4Ifkz4PFxH9/jO6hptgWgns=)
2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: vMaIkNwQRD2341hAzT95Nsf+e5VWgsz6YjzIBQ9e0xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bc:cb:3e:72:a1:05:14:c6:a5:b1:80:27:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Nov 11 10:01:11 2025 GMT
Not After : Nov 12 10:01:11 2025 GMT
Subject: CN=b79bdd1540eb33b4cc885da6400963e0616df21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:a1:b9:34:d1:19:3a:d7:55:9d:fd:16:13:
6b:5f:82:98:d6:c4:86:10:fe:28:6a:97:37:b5:03:
c2:f0:70:fc:0b:4e:bb:df:bb:74:fe:42:41:6e:c1:
86:25:9e:db:eb:01:2d:09:c9:ec:90:f8:c0:d7:08:
9b:6d:22:26:2d:1f:2f:f3:01:db:24:ac:f4:a9:c7:
30:f8:51:ba:bb:00:c9:a0:46:dd:a6:69:a6:62:2b:
34:72:97:e9:b6:35:d9:21:46:24:02:fa:81:91:45:
9d:c1:4a:35:6c:d0:14:45:43:67:5e:b8:43:35:52:
61:eb:f1:41:a2:86:0a:50:1c:84:08:73:07:8e:75:
4a:d1:af:b0:97:dd:3a:37:ca:ab:bc:cf:1c:9a:89:
fd:01:01:45:cc:29:0b:04:a7:c7:97:d7:03:bf:a9:
a7:3f:7b:c7:33:bf:ac:43:ad:04:c4:be:a6:07:f9:
d6:4a:ba:e3:2f:89:79:00:fa:99:23:6e:c1:c2:ea:
9a:29:7d:5f:36:51:55:1f:02:7e:a5:a3:75:57:c1:
59:51:95:d3:b2:0d:98:18:75:6e:c5:e2:e7:b0:67:
4b:65:87:9f:24:ba:cd:54:ff:91:47:98:f8:7c:7a:
28:4f:3a:6d:e7:b3:f1:4b:d4:63:0d:75:32:cf:c5:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:DD:15:40:EB:33:B4:CC:88:5D:A6:40:09:63:E0:61:6D:F2:1F
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:25:aa:31:4b:64:b3:8b:dd:24:e6:df:c4:d9:f9:1e:36:f1:
5b:b4:84:53:82:6d:1d:9d:b1:99:65:45:fd:75:2e:e7:1a:b2:
88:73:13:a3:ee:a3:0b:ba:fc:77:bc:3e:ec:99:d5:bd:1c:6b:
24:e0:32:0d:1d:c4:0d:03:b0:83:ae:cf:a3:47:44:09:3a:c8:
64:bf:f9:cf:11:3e:0e:2f:99:2e:ea:b3:fa:33:3c:a4:07:aa:
3c:11:58:99:29:0b:d9:33:f9:9f:42:24:16:92:54:a6:a1:39:
2c:db:e2:cc:ef:7f:8a:05:c0:19:f5:25:eb:ef:23:89:a3:54:
aa:34:a2:da:a6:0e:b0:00:72:e4:8d:0c:3f:2d:91:41:0d:7c:
ea:6f:94:f9:78:17:c1:b9:0c:80:0c:15:2c:b1:85:f1:3c:7d:
77:c2:e6:90:0a:5f:5b:91:cf:5f:86:35:06:e8:6a:b4:ff:66:
67:c3:c9:91:28:31:62:28:b2:c6:a1:18:1b:87:6d:e1:03:0e:
d2:69:45:e5:0f:17:e7:b8:ab:25:c3:fa:41:96:ae:91:81:4c:
6b:e8:04:c8:d4:ef:41:3f:52:b1:4f:c5:bc:c5:3e:7f:f3:ee:
38:f8:03:4d:72:59:47:25:26:bc:b2:b6:90:14:90:21:c3:50:
21:35:97:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:04 2025 by rpki-client