Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
File: t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json)
Hash identifier: RwccffDohRuSee9ncZgVqBlUHDTDy0YFCFikkBoQFqw=
Subject key identifier: 02:73:72:E0:E7:EF:ED:BC:73:52:3F:E3:66:00:30:E0:35:FC:8A:D0
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial: 019A7112C3F7144C022486CE6C92229800AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
Manifest number: 0DCB
Signing time: Tue 11 Nov 2025 04:00:46 +0000
Manifest this update: Tue 11 Nov 2025 04:00:46 +0000
Manifest next update: Wed 12 Nov 2025 04:00:46 +0000
Files and hashes: 1: 9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa (hash: VGm9skjMPVUUg6edMcPusOOmF7cXf1kchI2oKrFFOoI=)
2: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: W0xM3ITAdXVpJnPUFq1UloAWazhOduYvZ306Z7UKQiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c3:f7:14:4c:02:24:86:ce:6c:92:22:98:00:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Validity
Not Before: Nov 11 04:00:46 2025 GMT
Not After : Nov 12 04:00:46 2025 GMT
Subject: CN=027372e0e7efedbc73523fe3660030e035fc8ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ed:36:57:5e:bc:1e:d2:ee:9e:82:d6:1a:c3:
41:e5:54:0b:9c:67:83:28:07:88:79:a3:20:f8:fa:
c4:34:31:6f:91:08:fa:8c:02:70:48:8d:bb:c2:37:
06:e7:bf:c1:e9:da:f1:ca:54:e0:e6:6b:bd:4e:d9:
01:a0:93:9d:bb:42:5f:8e:6b:c9:0b:03:c4:49:41:
07:84:8f:50:af:bd:42:3e:63:7f:59:9b:cd:09:69:
bd:7e:9c:ce:0e:a8:71:bf:14:3a:85:3b:11:a6:a7:
a3:1f:40:1c:a9:da:c9:dd:b7:d3:88:18:10:cc:28:
31:03:95:5e:4b:0a:13:fc:a5:aa:6a:df:1c:32:63:
bb:af:c2:90:9b:4d:eb:78:ce:03:27:54:13:46:4a:
b9:0d:ea:fd:a1:78:28:e8:4d:d0:e8:f3:00:52:51:
3f:ab:e1:ce:9c:46:a6:33:49:91:05:87:a7:c8:f1:
69:fd:3c:11:c0:d9:d5:fe:c9:aa:7c:21:ba:a0:1d:
45:75:81:4e:64:c8:dd:63:99:4b:75:47:ae:f5:c4:
0d:3d:7b:1e:61:a3:04:c4:4e:bd:68:58:cd:af:c7:
d0:30:ff:8a:5a:f9:81:98:a6:05:b5:6d:59:10:b0:
eb:9c:1b:f5:06:60:69:68:03:e3:c5:f9:7c:94:96:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:72:E0:E7:EF:ED:BC:73:52:3F:E3:66:00:30:E0:35:FC:8A:D0
X509v3 Authority Key Identifier:
keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1b:06:83:57:d0:e1:1c:68:79:ac:67:e6:ba:40:45:29:a0:
a3:56:80:24:58:22:f8:0b:f9:00:02:8d:82:10:cb:13:ef:a4:
88:fc:0f:55:99:e9:4e:5e:12:7d:58:ea:8a:82:c6:94:bf:ac:
e1:0f:ae:ca:1b:3c:b9:c4:0e:06:0d:de:9b:1e:10:95:37:50:
7b:a5:a7:a6:1d:a0:aa:13:0d:0a:64:b4:23:db:28:48:7d:0a:
e9:40:22:2b:de:0d:16:53:d7:09:cc:95:9c:c6:29:c2:0d:9f:
bd:da:72:1c:45:b9:5f:6e:44:11:a5:ba:40:a4:13:99:b9:7d:
30:f4:db:f5:bc:73:3b:41:e9:a3:b8:1d:38:af:88:be:a7:0d:
ee:7a:d8:9c:eb:8a:ea:e5:a7:26:75:9d:40:0e:0d:41:62:32:
29:b7:07:9c:e7:af:f6:00:6f:56:1e:55:ab:2d:30:21:7e:c5:
91:fa:65:0b:c9:34:21:70:0d:0c:7e:b0:e1:f2:7f:43:6b:72:
5c:05:5d:21:be:29:f6:ab:4a:81:0a:b4:06:45:be:e8:d3:ac:
4f:85:e0:77:94:ed:b7:b1:a0:62:2c:21:36:6e:e5:c4:15:39:
ff:c4:05:95:9b:33:a8:d4:07:09:4c:b5:db:a9:61:aa:09:cc:
28:45:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:10 2025 by rpki-client