Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: mqwsoCC9DYT4niQ6YnIZHj4LWFw+5Vh92XnYNwq64wg=
Subject key identifier: 7E:E4:C1:A0:86:00:6A:C3:5E:94:FB:BE:29:60:2C:ED:6C:D3:13:AE
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 019A4E189DCF2E1520F617C2E8F605B61A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0B5A
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: 3gpKM5n35XhcLkKWS288tqvOaoU241ouoMfTYk6EO2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9d:cf:2e:15:20:f6:17:c2:e8:f6:05:b6:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=7ee4c1a086006ac35e94fbbe29602ced6cd313ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:de:6b:17:14:7b:6c:cc:ed:c2:84:f5:c6:
ef:2f:f0:74:05:8e:78:42:3b:59:9b:d6:c3:bb:7d:
bb:6b:29:23:15:4d:ca:1c:14:c5:37:28:e2:8e:c2:
57:d8:05:a2:36:42:f6:5d:1d:68:05:6d:d5:db:17:
1a:0e:b4:4f:7f:48:02:77:2f:34:b8:74:d7:98:84:
29:96:55:96:ee:de:ce:75:4b:91:9d:75:5b:5e:19:
1b:66:e7:2e:3e:f1:e8:6c:6b:62:42:40:be:4b:60:
4a:47:ae:63:7f:be:da:eb:e7:03:67:d2:25:e3:bd:
78:d1:15:98:b7:f7:20:04:cb:50:55:b4:86:93:c0:
f1:d2:24:d4:59:26:1a:2b:ef:5e:75:88:72:86:73:
5c:7f:34:6d:04:d0:29:5e:9a:91:aa:15:e9:fd:10:
02:94:49:a2:d2:ed:b1:27:17:f9:1a:31:38:e8:83:
8a:c0:f9:c7:63:3c:47:8b:c9:22:84:53:48:38:cd:
52:05:51:1a:66:f5:f1:b8:3c:46:aa:ef:13:c3:e2:
5d:a7:a8:d4:8a:b0:44:7f:c0:86:a2:4a:61:d5:25:
12:7e:60:7b:6b:36:d3:18:3a:1a:4c:1f:ed:5b:fd:
1e:2f:ae:ec:b0:b9:f5:26:b5:34:fa:92:34:c2:dd:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:C1:A0:86:00:6A:C3:5E:94:FB:BE:29:60:2C:ED:6C:D3:13:AE
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0b:73:03:1d:a0:13:56:8d:43:fe:09:44:94:f8:f3:44:92:
b8:c8:29:9c:f5:25:69:82:ab:03:49:c0:87:b2:9d:cf:52:0b:
61:bf:b7:11:65:bb:c1:b1:e7:1a:66:f8:40:dd:15:17:62:ff:
ef:09:ca:a3:d9:55:49:71:c2:80:c6:32:b9:31:8f:e7:b9:d0:
8b:01:ae:76:a2:1e:3d:aa:68:00:ef:85:e4:1b:8e:17:50:6d:
d2:01:0b:3d:b4:69:25:f2:39:d3:ca:e6:bb:8a:f6:96:88:ae:
de:6f:98:0a:2e:70:f8:f0:a1:0c:50:57:c1:6e:8a:24:fd:f4:
4c:b2:d3:6d:07:13:6b:4c:0a:aa:7e:c2:ec:82:c3:e7:01:40:
45:d8:a9:df:d0:0b:6d:9d:52:e5:1b:b8:e0:0e:6b:5c:bd:ca:
9c:e4:de:fa:68:92:75:d4:d3:80:bf:cc:5c:e5:92:63:d3:68:
ff:82:92:98:55:3a:23:e2:7d:79:d0:39:fc:c3:0d:18:ba:1e:
7b:a1:3d:2f:2b:59:f2:de:27:11:11:94:87:fe:88:f1:43:33:
80:c3:a3:1d:62:a6:6b:00:33:ce:54:72:a0:6e:e2:56:9a:f8:
c7:5c:d7:f6:43:8d:12:5f:24:80:5b:b3:38:7e:03:69:c0:9d:
72:aa:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:21 2025 by rpki-client