Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: H2J8Yd6HPh4w+N4vqct1wIow2M/QbM1qwSETcI/tUSc=
Subject key identifier: FB:43:97:21:DB:A4:BA:53:7B:19:E5:06:9C:69:3D:AE:31:4F:A8:35
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 019A72932C845BC1F6A97C4B4CC79A297FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0C11
Signing time: Tue 11 Nov 2025 11:00:39 +0000
Manifest this update: Tue 11 Nov 2025 11:00:39 +0000
Manifest next update: Wed 12 Nov 2025 11:00:39 +0000
Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: Pzd5MVqFLa1k9/gt9+TZDsw46LINCrxAX02Up8uFa9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2c:84:5b:c1:f6:a9:7c:4b:4c:c7:9a:29:7f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Nov 11 11:00:39 2025 GMT
Not After : Nov 12 11:00:39 2025 GMT
Subject: CN=fb439721dba4ba537b19e5069c693dae314fa835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:02:ad:e6:e8:eb:9a:18:9d:29:90:84:84:
c1:ac:94:61:d4:04:05:07:da:cb:fa:df:8d:37:d1:
b0:cf:d0:24:cc:fe:dd:86:82:41:2f:bf:af:8d:4f:
8b:fb:d8:92:ae:bb:af:b6:e9:3b:a0:3b:99:4c:e2:
62:27:ce:c9:3f:81:b7:31:64:f5:b9:3a:29:f8:38:
75:76:68:0b:c8:ad:94:06:5b:70:72:00:91:6d:cf:
de:c9:48:f4:b1:2e:28:83:89:0c:80:a9:51:fd:0b:
30:f3:c7:c7:2c:cb:e9:d6:d2:1a:0e:d5:a6:d1:a9:
aa:15:bb:eb:22:27:34:39:5e:1c:71:d1:fb:9c:45:
4b:b7:cf:71:4d:3b:77:3e:db:7b:be:9e:3e:17:e6:
10:b0:96:ae:e6:3f:76:1a:7d:b8:9c:4e:5c:e6:1a:
77:70:e0:26:ff:ca:da:6e:92:c8:9c:58:30:b3:da:
f1:64:fe:c9:88:d1:8e:35:ea:53:72:7b:29:3b:e8:
3f:8f:d9:ff:18:b9:ea:9d:2c:e1:78:b6:fe:fe:f9:
c1:f2:e8:f6:3e:0f:2a:0e:ce:1f:13:1a:f3:d9:80:
59:e9:d6:9e:fc:6c:a9:92:26:b8:54:af:96:85:56:
b8:df:d2:33:62:e3:e2:f0:16:9a:91:5f:81:99:e8:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:97:21:DB:A4:BA:53:7B:19:E5:06:9C:69:3D:AE:31:4F:A8:35
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:09:11:c5:db:b7:c8:41:9d:09:47:e6:e9:50:09:3d:c1:aa:
75:82:04:aa:0d:30:f6:b9:1a:46:f5:15:bd:d9:e9:db:e0:76:
ce:d0:4d:72:82:91:a9:86:e3:8b:0c:0c:2b:9a:14:ea:61:67:
17:5f:31:8b:3e:50:cc:93:f5:1f:a0:e3:ab:96:74:de:b6:7d:
70:cb:10:36:11:4c:7a:94:39:4d:58:d9:8c:f9:c8:37:44:5f:
9b:31:0a:9b:7a:6f:ef:56:07:fc:7b:41:f9:8d:68:58:d0:2d:
af:92:02:d3:a0:55:1f:09:74:28:82:fa:36:50:6b:a1:bc:c7:
93:f2:e3:8b:64:c7:e6:bf:59:e4:7b:35:e0:b8:fe:8a:c4:37:
20:07:2f:a2:10:21:8b:c0:78:3e:bf:a6:5f:f8:7d:66:27:9a:
0c:c2:f6:a8:17:2b:4e:2a:70:bc:03:88:d0:ad:92:34:32:a5:
31:cf:16:7f:c3:76:30:7f:a2:03:22:48:3d:45:5c:03:ca:8f:
a3:98:3f:b1:a8:65:5d:8e:e8:3b:87:6c:c8:43:40:36:cd:54:
2a:d7:47:8c:65:d6:43:41:c9:7c:de:bf:8c:57:9d:9b:bc:4f:
c5:cb:ef:27:12:7a:6d:23:e3:d0:78:5e:2f:64:7e:96:c4:90:
16:b7:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:56 2025 by rpki-client