Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: I//WWx5ymyW4K3FiD/0XS1CdCtdG/RdrLxeBqOqUaes=
Subject key identifier: B5:B3:29:55:0A:2E:66:EF:DB:59:0A:B3:0F:41:7F:C6:F8:59:9A:FB
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 019A7301078A46C53C35B3A5F022547D3303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 0828
Signing time: Tue 11 Nov 2025 13:00:38 +0000
Manifest this update: Tue 11 Nov 2025 13:00:38 +0000
Manifest next update: Wed 12 Nov 2025 13:00:38 +0000
Files and hashes: 1: ZRG74paviVX-XS90B8J_nR1og6Y.roa (hash: RiJuDSGI6phByjHDly7Ub5V9tWyhmJNeE34595qod9o=)
2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: +zxgpwJYTQrogQEDqxCVLtq98gh2iAiILI8nj31kW1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:07:8a:46:c5:3c:35:b3:a5:f0:22:54:7d:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Nov 11 13:00:38 2025 GMT
Not After : Nov 12 13:00:38 2025 GMT
Subject: CN=b5b329550a2e66efdb590ab30f417fc6f8599afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:8c:7c:6c:65:d2:47:ab:fb:d6:0c:62:12:
80:81:28:77:e4:1a:47:5b:73:e8:da:ac:79:77:4e:
d1:96:46:72:bf:68:3c:7c:c6:6b:a2:b8:9a:aa:ba:
d0:62:84:84:41:22:0a:0e:98:32:94:78:21:f3:76:
7c:1c:7b:52:20:fd:5e:f1:fd:df:32:b2:76:0f:f5:
b5:cc:d4:9f:1c:8f:53:58:c5:9c:44:3a:f4:9d:65:
9a:f8:34:a6:a0:79:a1:67:86:09:84:0a:85:f4:10:
37:38:2b:85:73:5f:01:9b:2e:a8:74:d2:d7:a0:79:
ed:7f:59:12:69:52:b2:89:2c:71:22:0f:43:ee:56:
19:f3:4b:0c:3b:3b:5e:bc:33:f9:cd:0b:ef:c7:c2:
65:37:50:af:01:99:47:62:7b:9b:0f:9f:f2:dd:b8:
2b:af:eb:44:3b:77:e0:e6:3c:9c:14:af:a4:39:2f:
07:cf:70:3e:9e:6e:ff:c2:80:f4:8d:50:2b:98:34:
fc:18:28:65:0e:05:ef:0f:6a:e6:15:07:dc:45:c2:
41:53:27:aa:e0:a6:76:d6:f4:5f:fc:63:5c:bf:41:
e6:49:13:e7:f5:73:8f:7a:3a:c7:7b:5e:e0:38:63:
e8:74:87:05:5a:53:8e:aa:d0:47:a0:73:01:c6:2d:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:29:55:0A:2E:66:EF:DB:59:0A:B3:0F:41:7F:C6:F8:59:9A:FB
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ea:d9:30:12:f1:a0:a8:45:3b:35:8e:77:f7:00:28:50:c9:
58:6a:04:59:e9:e6:50:54:f3:66:0d:21:62:a9:34:84:a8:4d:
bf:ff:a3:72:a6:67:6f:2b:30:d8:cb:73:8c:f8:e9:a8:29:12:
20:ae:5d:ca:52:43:39:0e:16:3a:29:b9:5b:0a:1a:b1:d4:27:
d5:09:18:d6:2e:40:26:27:4d:11:83:9f:d8:12:64:1c:07:da:
01:08:5a:42:9d:94:1d:0b:fd:c7:cc:73:90:2a:88:57:41:07:
c3:d9:c1:5f:2d:3f:ca:36:2a:a1:fd:0f:fa:2e:f2:e9:f0:f3:
b2:fc:6c:9b:d5:d6:6f:2e:78:a1:53:cb:6e:bc:39:a6:5e:b7:
08:7c:6d:62:fd:5d:c1:22:39:60:45:20:25:09:6a:99:22:b8:
38:40:4f:8d:f1:9c:82:7c:b9:41:95:e3:ac:42:ce:c3:6f:1b:
bc:2f:89:b4:af:33:9b:a7:75:e0:90:28:11:29:7e:07:1f:1e:
d0:f7:01:62:77:17:32:a0:08:e5:53:14:f5:32:9e:75:61:db:
63:9d:17:53:cd:67:6f:50:76:b9:d9:61:25:30:63:4c:a4:60:
e7:c4:7b:de:64:2c:98:58:e8:1f:13:5b:0b:07:9f:15:f7:2a:
9e:5b:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:19 2025 by rpki-client