Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File: 18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier: Q17WnwqmitBFh6ydGN93VN0cFo7lgWtnML7qdhWRw2s=
Subject key identifier: BC:75:D1:E7:FB:14:AE:55:BF:7A:6F:82:95:17:70:F2:70:1F:23:1E
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial: 019A70A4FF5AE505B32C9126FC8B0AD980E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number: 0D1B
Signing time: Tue 11 Nov 2025 02:00:52 +0000
Manifest this update: Tue 11 Nov 2025 02:00:52 +0000
Manifest next update: Wed 12 Nov 2025 02:00:52 +0000
Files and hashes: 1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: PVExWeT9MOG7Fkd/2pOQDMocStnSFhTtkzsmSzWpaF8=)
2: Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa (hash: BzYAqVCWtu3EBRZpVM9KZ2KVYbyGK5c4dT3hbIbWT74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:ff:5a:e5:05:b3:2c:91:26:fc:8b:0a:d9:80:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Validity
Not Before: Nov 11 02:00:52 2025 GMT
Not After : Nov 12 02:00:52 2025 GMT
Subject: CN=bc75d1e7fb14ae55bf7a6f82951770f2701f231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:63:35:93:01:ee:aa:4b:9a:5f:7d:6f:83:
03:2a:77:bf:bd:b9:aa:12:97:82:98:1a:4f:e0:5a:
93:d8:a5:6f:bc:61:d4:58:f8:f1:a4:0a:d8:0b:cb:
c0:95:12:35:f4:ec:d1:18:be:c5:80:8b:9b:62:d8:
65:df:72:c8:1e:cb:59:d6:3d:8f:77:17:bc:09:e4:
47:e1:78:95:a0:3f:23:18:d0:42:03:8b:53:42:3d:
e2:4e:27:c9:b3:10:aa:e8:23:c3:92:5f:cf:08:80:
cb:51:b5:f9:26:82:08:5e:c8:ed:ad:9d:86:b0:82:
47:e1:8e:6a:10:ad:15:8f:76:06:87:8c:fc:cd:b1:
be:de:90:d8:50:6b:29:34:ba:fe:2d:b3:c4:86:a6:
24:d5:95:9c:c4:59:a9:26:82:d4:01:87:31:84:68:
8b:75:d3:c7:7c:23:4d:cb:34:94:5b:13:1a:05:c1:
51:17:ff:52:20:ce:77:27:84:21:66:1e:d5:ec:2d:
f9:93:58:df:72:ea:eb:b1:f3:83:8d:c1:4d:c4:3b:
df:7a:97:02:2c:b0:d1:d7:15:3b:cd:17:7f:3f:68:
45:cb:3a:68:20:74:50:04:f1:72:97:38:50:53:d2:
ee:65:b2:50:a9:62:7d:ab:54:f3:06:67:4b:2e:bd:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:75:D1:E7:FB:14:AE:55:BF:7A:6F:82:95:17:70:F2:70:1F:23:1E
X509v3 Authority Key Identifier:
keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:98:1e:69:5b:4e:30:6e:e4:28:f1:85:de:49:06:a2:54:0c:
d8:a3:71:51:f5:cd:42:26:78:14:04:d8:e4:b2:d3:3e:f9:01:
8e:7c:39:31:bc:0f:58:5f:24:94:e7:99:32:f0:53:e0:b5:40:
dc:23:1e:09:2e:5c:73:d7:58:93:a7:48:06:e4:88:e2:7d:ba:
f5:e8:71:70:19:82:26:9b:31:94:d9:15:3c:ad:b1:4e:04:95:
6d:05:88:ed:37:b5:1b:d1:6d:7d:c0:bb:f2:16:20:5b:be:30:
1d:c8:fe:1d:85:6b:a8:a8:99:7f:af:8d:a3:9b:90:af:ec:f8:
ca:73:3a:4e:32:8f:4c:8a:25:2f:f8:c3:7d:2b:5b:2d:a6:52:
36:4c:62:ea:f5:a5:33:da:8d:4a:fe:1e:6d:d2:26:8f:91:71:
e7:d9:25:3a:48:7a:82:80:f2:3a:90:72:27:44:ec:cb:89:7d:
8b:bc:1a:e0:f0:5a:00:c8:96:2b:a5:a0:ca:f6:17:3e:2c:19:
64:77:ab:58:db:61:0c:53:e8:65:79:5d:a8:19:45:da:e2:b3:
1d:d5:1a:4a:2a:ee:4f:70:dd:bc:25:98:ec:5f:7f:fb:94:de:
f4:61:dd:ca:99:6a:93:18:bc:04:ca:aa:9e:f1:0e:d5:fc:63:
76:3e:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:14 2025 by rpki-client