Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
File: En6fnV_UXaAQaVzEISr35nt7NI8.mft (raw, json)
Hash identifier: jxywN4buDEw0NUpQHDM9CTAukXbFvJ55kwPOStXaZKs=
Subject key identifier: 2F:F7:FD:4A:B4:71:40:5A:32:82:F6:8C:E1:CF:0A:BF:E7:E3:9B:F2
Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Certificate serial: 019A714A12B9033EDCA2FEC9D1E150543B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
Manifest number: 129F
Signing time: Tue 11 Nov 2025 05:01:11 +0000
Manifest this update: Tue 11 Nov 2025 05:01:11 +0000
Manifest next update: Wed 12 Nov 2025 05:01:11 +0000
Files and hashes: 1: 7chXrCB-kcx4BDbNvUre62zCVs0.roa (hash: kM2S2XstoTcg0W9WF7loN86FbRs2E6G/NWJAtjB1G7s=)
2: En6fnV_UXaAQaVzEISr35nt7NI8.crl (hash: QwcNZuqH5+ewobgzm/HeJYQVN4fPpXOvtoDVMcq4ZeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:12:b9:03:3e:dc:a2:fe:c9:d1:e1:50:54:3b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Validity
Not Before: Nov 11 05:01:11 2025 GMT
Not After : Nov 12 05:01:11 2025 GMT
Subject: CN=2ff7fd4ab471405a3282f68ce1cf0abfe7e39bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:d4:9d:9a:93:39:75:57:60:65:6e:7e:76:
b6:fe:06:88:ad:88:c3:92:6c:77:67:9a:86:21:42:
5a:9d:66:1f:8b:fd:e7:bb:47:8a:22:4f:53:a7:4a:
e6:da:79:48:59:8a:ce:be:06:24:31:58:76:46:ad:
89:11:13:48:c0:a0:46:72:3e:ad:4a:46:67:32:94:
30:e6:ee:09:79:cb:d3:79:f2:97:a0:bb:39:ba:ab:
46:39:a0:94:68:4d:0b:a2:6b:79:11:81:25:ee:eb:
2e:3a:3e:c0:d0:b0:3e:82:97:28:63:c3:42:9a:a3:
0b:5f:4d:d1:96:f3:5c:d4:9f:2a:65:c5:4b:90:0b:
e0:c1:9c:ed:a7:42:6a:09:f8:5a:2a:c0:1b:18:17:
7a:f5:34:a8:45:ce:4d:67:ec:18:3d:ec:7c:f8:fb:
bf:17:df:55:9a:ab:53:98:81:6a:dc:8d:ce:d8:3b:
84:28:61:b1:ae:29:b4:13:2c:d2:13:97:d3:7b:91:
ba:68:78:14:dc:e2:d3:ae:f4:8a:00:ba:3d:59:26:
15:63:33:ed:c7:88:a1:47:ef:fb:57:63:51:9a:1f:
7d:b3:cc:31:b4:51:c5:49:c8:b0:d4:4c:d2:b0:0e:
28:ee:6a:cb:7a:18:35:57:75:98:cd:cd:b9:4e:b7:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:FD:4A:B4:71:40:5A:32:82:F6:8C:E1:CF:0A:BF:E7:E3:9B:F2
X509v3 Authority Key Identifier:
keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4e:8d:c0:0a:e9:3d:fe:94:7e:86:78:07:9a:27:3d:a2:e4:
fe:15:25:85:4b:60:06:1c:77:0b:86:f8:17:c0:d2:78:87:78:
b4:74:97:6f:f5:aa:94:5c:63:18:93:00:07:10:6d:bb:c3:d4:
d3:5b:c9:20:36:bd:b1:70:c9:cb:01:b5:72:3a:23:cd:fd:0e:
95:81:22:12:ea:f6:59:60:6e:b5:7b:61:ce:af:d1:45:fb:33:
92:97:03:e6:78:c4:29:15:41:f8:55:6c:30:e3:20:69:44:bd:
7e:8c:d1:14:17:b2:8b:75:eb:b0:0c:4a:20:cc:33:33:04:52:
74:e8:28:60:b9:20:77:9c:9e:ad:5c:54:1c:7d:f7:e7:4f:03:
15:05:12:a4:1c:71:53:e3:dc:85:cd:fa:2d:cd:93:5b:39:d8:
b6:0f:82:73:2e:f9:41:41:cf:50:7c:a2:44:d3:ca:66:88:7e:
44:5f:fc:2d:52:66:be:6c:21:dc:34:5c:58:ed:76:00:e5:4b:
2b:2a:89:87:de:fa:56:56:12:53:47:d8:9b:9e:3c:37:2c:fd:
28:bb:5c:a0:1f:76:7c:02:ab:bc:61:71:e7:32:0d:06:69:75:
a4:04:d5:a4:ab:b0:f0:0b:2e:9b:1c:cd:05:75:f8:90:89:bf:
eb:d5:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:18 2025 by rpki-client