Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: wxMPSEFpi7z5xK8GKvDo66LbAnB3OP4cQvk4Kdo9oNE=
Subject key identifier: 01:5D:EB:AA:CB:35:86:D0:56:A1:CE:F3:1C:8C:56:45:06:AB:C3:28
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 019A4EF404A1BD0F09234C2A0E209C1D2460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 0373
Signing time: Tue 04 Nov 2025 13:00:06 +0000
Manifest this update: Tue 04 Nov 2025 13:00:06 +0000
Manifest next update: Wed 05 Nov 2025 13:00:06 +0000
Files and hashes: 1: 1-LEezNtaqjy169gIk46UkSGODnI.roa (hash: FRFupvefU0HUQnLO8y2fwT4i2INskAlpIVZPmaI9wtE=)
2: IrF-9wkj7eNtv0srLfHPyI1GtTA.roa (hash: mAMlIob8u84HdQAxB78nZwUMGcefLJXlEaHY1RBkM0I=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: AuogUtXHMgyBDGxWcbYnxzFk/lcVO99e881lTFoaMb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:04:a1:bd:0f:09:23:4c:2a:0e:20:9c:1d:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Nov 4 13:00:06 2025 GMT
Not After : Nov 5 13:00:06 2025 GMT
Subject: CN=015debaacb3586d056a1cef31c8c564506abc328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:fb:c0:2b:10:53:20:c2:34:ff:cb:f4:5e:
63:12:5e:1a:7d:8c:2c:bb:6b:80:71:21:44:7b:f9:
a3:81:f2:c5:80:33:24:e9:8a:4e:ca:ef:70:d0:69:
35:a3:71:f1:2d:11:73:d8:23:7f:af:ff:23:1a:6d:
42:31:89:b5:2b:6b:54:a5:68:e5:05:66:db:46:01:
00:ed:a5:26:02:e8:2e:5b:ac:13:17:0a:11:cb:90:
53:60:ed:a9:a5:b9:03:54:04:a6:01:7e:36:07:6c:
0a:53:e6:84:cf:92:1c:d8:ed:7f:7f:0e:23:26:a2:
50:59:9d:fc:ce:b9:5b:91:75:95:a1:6d:af:d3:96:
99:ed:a1:59:93:cc:63:e8:06:ec:38:37:67:52:1c:
1e:e6:44:12:7e:4d:0f:2e:b8:c0:ca:3c:c1:0a:08:
93:0f:7e:8b:5b:86:ba:a9:16:4d:43:6b:c2:26:38:
2b:02:6f:64:66:cd:44:b6:7c:4c:79:10:08:19:32:
e2:8f:7e:88:c2:e5:12:e9:70:1b:b7:45:f1:0a:9c:
1a:39:b4:a2:25:14:5c:0c:6b:17:2e:7c:3b:43:aa:
39:42:f7:24:84:4d:4d:85:e4:a8:dc:98:5c:56:f5:
9d:c2:77:c8:e0:a6:54:d2:89:b9:26:3f:6b:d6:c4:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5D:EB:AA:CB:35:86:D0:56:A1:CE:F3:1C:8C:56:45:06:AB:C3:28
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:46:c4:44:6c:55:a7:e7:84:d1:25:67:80:f2:74:26:c0:92:
80:96:6d:a0:66:41:8b:e3:dd:8a:12:ad:a5:5e:eb:c7:c6:a8:
8b:24:eb:71:11:c7:2a:9f:6b:75:e4:97:87:f0:9b:79:19:bd:
30:a7:64:13:0b:4c:57:6e:5c:14:6e:ed:f3:ec:c1:eb:ae:10:
89:a4:1e:b6:05:71:bc:4b:ba:58:3e:3e:ce:49:1c:2e:eb:5e:
a7:9a:dc:06:a2:f9:ee:4b:90:05:cb:06:74:be:61:ab:03:df:
92:2b:bf:c0:7e:03:8a:05:ac:44:4b:5a:76:22:a1:6c:eb:97:
cf:11:fc:3a:07:24:06:33:c2:c5:8e:78:31:76:5e:47:f3:05:
b3:d1:c8:f6:1e:a3:81:3a:b0:80:30:9b:78:fb:83:c9:c7:8b:
18:34:c3:9e:0d:06:df:97:2c:e6:bd:ab:d4:c0:5a:1c:34:43:
39:69:a0:d5:b4:cb:15:b0:5c:11:78:d2:f5:58:da:b1:18:c3:
6f:28:91:e4:2b:f7:14:3c:62:b8:01:e9:ca:e1:b6:0b:f2:24:
17:5f:a9:bb:28:8e:20:1f:4d:14:70:a8:64:3b:9b:9b:e4:f2:
e0:9a:ac:13:4c:69:d9:92:b9:87:30:55:22:ba:7f:32:1d:86:
17:78:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:25 2025 by rpki-client