Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
File: Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json)
Hash identifier: vgaf7AYIpkw5MDP8nvGaGwZhVCD4YQhjSp0mabEDhSg=
Subject key identifier: 33:D3:14:B8:97:BA:B5:C1:53:0F:87:78:FC:6B:1E:A6:9C:A3:7B:D3
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial: 019A725C7A5575B0DB80260CA4B0F4BAD3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
Manifest number: 075F
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: uMrV+bYG20FReM5zJaVkuH7AaPn5OPkkEFzgWOXu+Lo=)
2: SL6led1HI-RxeSBiRf_KwOsdWMw.roa (hash: bUSyhumyZsuI3117QZlb6u67xKqgT+wxfjDPtnVzMSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7a:55:75:b0:db:80:26:0c:a4:b0:f4:ba:d3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=33d314b897bab5c1530f8778fc6b1ea69ca37bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:f3:f9:aa:e6:7e:b7:35:d3:e0:8b:d2:c5:
6b:d3:20:1f:42:a9:1f:c7:ff:6e:43:3e:bc:6e:8a:
b1:51:20:6b:94:aa:bf:55:f9:52:96:be:2e:7b:cd:
98:b1:25:75:eb:13:64:13:6d:e1:c4:29:02:32:b4:
bd:ba:83:bd:7d:52:75:fa:49:8a:42:3d:93:8b:e4:
9a:52:4b:52:5d:4e:bf:68:c1:1d:e9:98:23:b6:6d:
35:60:93:58:ef:f6:b8:4a:6f:56:19:0e:a0:61:60:
bd:05:5d:af:4b:c6:ed:86:7b:1f:9e:f0:e7:24:6b:
dc:2f:c3:c6:e9:8d:df:62:d6:20:b3:b9:8e:62:87:
4f:1e:5f:f9:e2:1e:f7:44:d8:a7:c9:81:24:79:73:
53:7f:4c:72:ff:47:b1:7e:d3:e0:fb:45:cd:69:db:
9a:13:f3:1a:14:9a:e4:39:9e:be:74:ca:67:24:e6:
64:13:81:2d:73:77:ff:8e:39:48:16:d2:56:56:b4:
14:54:94:08:3b:a0:2f:f7:fc:54:d9:c9:72:a4:98:
50:32:23:83:2f:97:a2:f6:ed:b5:63:52:0a:5f:c6:
6b:ef:c5:cd:c2:41:b8:dc:52:ad:ef:2a:97:ad:99:
0f:da:17:99:c5:52:3e:d7:40:7d:d7:28:61:f2:2d:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:14:B8:97:BA:B5:C1:53:0F:87:78:FC:6B:1E:A6:9C:A3:7B:D3
X509v3 Authority Key Identifier:
keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fc:1f:1f:fe:2d:c0:23:ff:2d:b0:3f:56:a5:ba:c7:78:4d:
d4:c2:a9:95:fe:1d:4e:ae:f1:e3:30:08:8f:20:05:41:db:0f:
f1:cb:72:17:7a:30:5a:80:71:ba:77:2b:d6:a1:68:c2:47:2b:
d4:27:48:a2:2b:78:e0:c4:f6:55:84:02:c2:2a:d7:24:bd:13:
e4:bc:40:4b:16:4c:22:03:73:a5:40:da:73:95:61:2a:b8:92:
90:f0:dd:7e:21:f0:24:03:33:30:84:e3:8d:07:72:e4:a0:41:
e2:4b:7c:f4:d6:3c:98:b3:b8:52:3c:51:2d:b4:6d:92:27:a7:
fe:b4:6c:ab:29:d4:e0:a0:56:5c:bd:5d:32:0b:35:4f:23:c6:
c2:35:67:d8:0a:6a:84:7a:fc:69:5e:a9:b2:3f:bf:3a:da:c1:
a8:15:ec:20:24:8b:65:8c:87:ec:41:43:8e:33:ec:65:0a:d1:
b6:3f:20:cb:43:c6:3b:ca:4b:85:d1:d1:89:7d:5d:34:c1:e4:
59:b4:82:b1:9f:77:63:cb:b7:d7:89:88:79:0a:7d:f0:17:89:
f0:f2:2e:52:a3:5f:14:42:4c:01:69:8b:7c:2a:96:91:ca:c2:
ff:49:bf:2a:75:bf:98:0b:72:5b:cc:83:6d:bf:b6:74:65:50:
45:fa:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:31 2025 by rpki-client