Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File: 71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier: GTBHpidJm+80M5bAivO8+tp4270MZlPxPvlPz649B+s=
Subject key identifier: 8D:E3:CC:9A:06:63:13:1F:E2:B8:57:82:C5:02:64:57:1C:A3:90:A1
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial: 019A4F6270230647D6928BA7C865811394BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number: 03F5
Signing time: Tue 04 Nov 2025 15:00:42 +0000
Manifest this update: Tue 04 Nov 2025 15:00:42 +0000
Manifest next update: Wed 05 Nov 2025 15:00:42 +0000
Files and hashes: 1: 1-fBRUvj0NMR0jYou_89CipZTIMU.roa (hash: zjwBCEo1/BmGhuy+yca01uAYZvtUSaw+w4THN94MAc4=)
2: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: HAaSM7OaCJYMDl75cgyeTqap/EuMx9U+6MRFHE30nIs=)
3: ANJPzCxK_HnMEX4DpZted-gFbKc.roa (hash: u7oq/DdEoSmnGW4xIokmlTuk13k00LAjUJfdE5RPRJY=)
4: hT7unl9ZuxZPAjHhi1yxgaF0b84.roa (hash: v8cgVoUrK7g8xYPzYyvvJU+HdpGiFjC2QbRLHwLNvNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:70:23:06:47:d6:92:8b:a7:c8:65:81:13:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Validity
Not Before: Nov 4 15:00:42 2025 GMT
Not After : Nov 5 15:00:42 2025 GMT
Subject: CN=8de3cc9a0663131fe2b85782c50264571ca390a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:26:dc:4f:dd:0f:b0:a8:f3:28:3b:d5:48:
de:c0:20:ac:86:d0:4b:5c:0a:c3:dc:dc:dd:b1:c5:
b4:1b:70:da:2b:87:fc:f4:58:ac:d9:32:e7:59:04:
a4:7c:56:9e:1f:ee:e5:c6:93:5b:7b:00:0e:55:c3:
64:45:26:74:cf:f2:ba:9c:24:60:55:6f:63:39:7e:
1d:2d:cc:83:82:ea:86:2f:53:5a:79:c7:79:9b:9f:
ac:5e:50:e5:b8:83:d7:3b:4f:f6:12:30:f6:4f:19:
96:95:9a:ef:62:5a:42:4d:01:64:94:3f:10:fb:73:
60:cf:26:f7:81:1c:82:27:9c:a7:63:ed:58:5a:41:
01:97:11:35:1d:7a:dc:1e:42:da:5c:4c:4e:68:4b:
24:da:87:37:e4:00:f0:c5:51:39:15:fd:41:33:97:
0f:50:50:91:8a:f3:fb:82:dc:00:43:4b:f1:55:7a:
8c:67:d2:b8:74:b3:c3:7b:4e:d8:20:98:67:b0:53:
f7:3d:fb:80:d6:f8:ca:ef:b9:4e:3e:aa:be:3f:51:
cb:0b:1f:d3:d5:29:0c:28:ee:44:ba:65:a9:7f:4e:
8b:08:4d:a4:22:33:0e:bc:4d:4d:76:93:66:28:20:
2a:52:e3:39:be:86:24:d1:05:65:ee:ad:c2:94:40:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E3:CC:9A:06:63:13:1F:E2:B8:57:82:C5:02:64:57:1C:A3:90:A1
X509v3 Authority Key Identifier:
keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f0:f0:30:e9:b4:55:d3:73:53:df:51:1c:af:8d:0d:5c:6b:
3a:d9:20:a7:14:a6:98:4e:0f:19:7a:52:92:57:67:07:8e:c5:
5c:bc:81:21:f2:c4:57:75:b2:57:71:c0:3f:6e:1a:8b:4c:b0:
81:ee:9b:b5:9f:60:6f:c8:56:2b:60:25:d4:a1:4e:d5:7a:09:
4b:f0:a1:46:ae:ae:e2:dc:bc:30:3b:ab:80:0f:7f:67:ba:90:
50:63:bd:ab:4a:ed:86:91:ff:49:96:f0:d2:87:50:1b:42:bc:
ae:76:3e:79:33:69:04:72:d7:3a:a9:4f:8a:b0:77:28:03:4c:
e1:f8:b6:29:4f:62:db:a7:a7:bd:44:2f:26:06:c8:57:1c:d2:
5d:05:5c:d6:0c:0f:80:88:fe:d5:9c:a0:ec:be:b3:18:36:b9:
7d:da:6d:75:79:c9:6b:42:95:53:44:7c:4a:63:8a:b0:e4:d9:
08:62:2e:f3:95:80:a5:19:3a:b5:50:eb:ba:04:2f:d4:8a:64:
1f:d3:16:ff:a6:26:8a:20:2e:04:58:10:cf:48:99:35:ab:d8:
c7:23:33:21:f2:b3:22:da:35:78:77:17:b1:c3:0e:cc:ac:b8:
c5:25:63:a7:96:c6:37:28:43:c4:ed:39:62:a1:03:95:cf:04:
5b:a6:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:35 2025 by rpki-client