Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: cN19HvhmLEVyNAt/EsSQ8Mz3hTu/fJL6QlQjP7pFeKs=
Subject key identifier: 46:72:2F:4B:34:5F:4E:0A:4F:07:42:9C:82:47:74:7C:B4:CF:44:2C
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 019A7149D4B2991DC095546C468A3CA4479F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 02F7
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: RsWLGRjrG/fg4G9yld5j28rhTkplo5xgawzk7gTeiM8=)
2: Xp2PmSoyw6vuED7OfEi_QaL00dc.roa (hash: ELBh/LCD8srsbWF+z8quU7XGWuHLmHPUfcz10VuYxEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d4:b2:99:1d:c0:95:54:6c:46:8a:3c:a4:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=46722f4b345f4e0a4f07429c8247747cb4cf442c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:01:b3:03:2b:87:a4:8c:b7:31:7f:c3:f1:f8:
d2:d9:d6:3a:7d:af:c5:66:73:47:70:29:01:d1:a9:
a6:3a:06:61:5e:29:77:f7:73:59:91:a9:f5:f9:0e:
7c:81:1e:84:cc:42:19:6f:56:a1:ee:2a:1d:ce:13:
a1:03:e2:0a:55:62:58:7a:7e:4a:2d:6c:3f:7a:d8:
17:39:99:89:b2:4e:7b:95:80:b8:25:b2:70:7e:dc:
e6:19:0f:c3:3c:ed:51:66:89:e6:13:41:68:fc:34:
13:28:13:6b:a9:1a:15:6a:9e:e4:51:5b:f8:f4:a7:
5f:fb:2d:5e:b4:ff:3c:7b:2a:bf:e2:d0:53:43:a2:
b2:71:ad:e2:3c:d2:e7:65:17:a3:f7:07:f1:0b:17:
d5:97:8d:57:7b:49:2d:2f:2e:86:0c:a0:d4:8f:55:
1e:d4:4d:c5:86:8a:4c:8f:09:ab:99:21:cc:ce:4d:
ef:d9:0d:53:5b:df:f1:94:84:90:89:56:c7:67:4b:
31:f2:89:a0:1e:7a:b0:4d:65:2f:38:c1:47:78:b8:
5b:e6:e9:bb:7f:46:de:be:16:1a:05:ae:ee:ff:93:
7e:83:ec:d5:19:2c:1d:e7:47:bc:16:55:4b:77:99:
f1:68:fd:8c:87:20:70:00:9f:a8:2a:14:bb:83:39:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:2F:4B:34:5F:4E:0A:4F:07:42:9C:82:47:74:7C:B4:CF:44:2C
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7c:ac:52:31:12:e6:ed:dc:60:01:47:7c:23:8f:b4:52:9c:
48:51:1f:80:36:77:e3:73:ec:db:67:a2:71:6e:21:dc:ca:51:
ad:2f:14:81:6b:a7:ab:39:a4:76:b1:42:4e:9c:b7:31:0d:6f:
a1:d3:99:c0:48:5a:e9:28:ed:f4:73:a4:eb:2d:f1:81:41:d1:
1c:91:a8:1b:a5:ce:da:4c:e3:28:2a:13:49:a2:d6:52:e8:67:
65:5a:18:32:e8:45:20:16:c1:f6:ed:08:1a:76:a1:dd:41:51:
53:b2:50:84:06:d9:03:40:1c:bf:ab:4a:fc:ad:72:12:b1:e7:
a0:5f:15:bb:62:8c:61:dc:62:e4:be:b3:44:83:a1:f5:36:90:
08:15:11:d4:83:b1:0a:18:80:0e:45:fb:3d:5d:36:f3:91:48:
82:c3:31:47:63:56:3a:37:37:ed:89:79:e3:d8:62:08:a3:f5:
3f:b9:f3:a6:c4:1b:fd:7f:51:ef:12:33:66:3e:6f:50:f0:20:
73:aa:d6:cf:a7:c7:81:97:5d:9f:26:93:6a:a2:d4:72:53:9e:
c9:e1:e2:81:b8:c7:12:2b:d6:81:7a:ae:84:ef:e3:69:34:d0:
d2:6f:c3:9f:9b:85:87:2b:6a:a1:fb:a1:38:bf:0f:7a:c9:bd:
8c:5d:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:36 2025 by rpki-client