Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: Ja3ox3z5NLKIPM5V7pOZyn8ibScNbZtXMhXj50+XNIo=
Subject key identifier: 21:00:CA:D8:D1:E1:64:9A:2E:08:50:82:6F:9D:ED:6E:BF:E9:75:F8
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 019A71B93377D29F088FD89847FF4BE044EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 11E0
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: NTOs6eZWAOl/gjWxYCoGNT++vUtiV6GLUT3oQ+nFLBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:33:77:d2:9f:08:8f:d8:98:47:ff:4b:e0:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=2100cad8d1e1649a2e0850826f9ded6ebfe975f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:9f:01:18:e1:9a:df:2b:82:b9:9f:2b:73:
af:ef:0b:3d:35:28:fd:72:35:04:9a:7b:57:9f:a1:
82:4e:b8:81:a1:75:91:f7:ab:08:1e:ad:1f:9e:75:
53:1e:1a:1f:6f:60:85:84:fc:62:ba:c7:7b:d4:09:
01:b1:ab:88:77:66:cd:4f:e8:9d:60:83:13:1a:66:
bd:38:39:af:ea:38:9d:c4:19:4d:5e:e2:cd:ea:76:
b9:18:8b:f5:31:92:85:58:81:7d:ac:65:28:3d:d4:
5b:8b:aa:b5:c8:ee:ce:0b:41:ed:f4:2e:94:8e:b2:
69:e5:f1:ac:8a:64:5e:72:89:ae:85:52:50:bd:7c:
4e:d0:4d:c3:69:39:82:e0:03:90:36:e2:98:3f:22:
65:20:fa:d0:cd:0c:b9:7f:4e:32:92:33:21:71:62:
44:7c:46:b2:0c:7b:39:16:2f:ce:e5:2d:1a:56:41:
c8:ef:e2:52:c8:21:a5:fe:cf:02:23:6f:cd:34:bf:
f5:59:ef:08:bf:9a:eb:c9:db:9f:ff:6b:98:59:89:
29:b9:c4:49:36:70:01:2a:ee:26:43:00:22:da:f5:
8f:bc:53:dd:dd:e3:30:bf:84:54:c9:f6:59:35:3d:
29:05:fe:ab:38:63:72:c3:46:60:d9:1e:b5:98:99:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:00:CA:D8:D1:E1:64:9A:2E:08:50:82:6F:9D:ED:6E:BF:E9:75:F8
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c1:48:27:99:dc:dc:8f:62:32:76:f0:fc:55:f0:b1:3a:b9:
d1:bb:43:1d:b0:87:1f:08:16:ba:3f:30:76:be:df:e3:0e:09:
44:36:16:af:0d:0a:a8:6e:b0:60:0b:ac:72:14:5a:95:0f:e5:
26:40:52:bb:9e:f4:61:fe:0b:60:27:cd:a2:bc:dd:7e:4e:0b:
ee:0d:78:c3:3f:04:fe:ff:ea:32:c8:54:38:dd:33:1d:5c:01:
bf:ee:b3:5c:32:a2:a6:5b:0f:b3:a7:6d:8c:d0:90:3b:90:2d:
14:36:c1:8a:dc:97:9d:ba:16:c7:ba:e2:af:43:49:05:9c:28:
1e:da:1c:21:2b:25:6c:1d:46:0f:0a:0c:d9:1c:0f:b9:08:62:
1e:ec:f7:b7:84:df:db:84:29:fd:66:6e:ec:90:02:b1:a1:5d:
54:00:6c:4c:49:aa:32:de:a1:91:05:7d:79:d3:60:6a:f2:68:
00:2d:b8:1f:08:9c:af:cb:f4:54:9e:24:ea:35:54:a9:fb:ef:
90:ed:f4:76:79:b4:bf:31:74:9b:c0:03:bb:db:a3:ef:6f:eb:
d5:99:b9:7d:38:f9:de:e4:3d:f7:19:ba:bd:f6:5e:e8:d1:4a:
c1:1f:7d:8f:7b:2b:43:68:ec:98:7e:a8:0f:f4:e8:ec:3d:e0:
35:f8:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:20 2025 by rpki-client