Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: S841fVKYRSaTTA/8omlvBENUGZ6d6OEt99UqO3PKhvA=
Subject key identifier: 27:9A:49:F8:8B:42:E9:02:E0:C7:F4:E4:C8:32:1D:F7:68:2E:4A:CE
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019A4C97D8E3DF518EDC32C5AA4629836C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0E53
Signing time: Tue 04 Nov 2025 02:00:11 +0000
Manifest this update: Tue 04 Nov 2025 02:00:11 +0000
Manifest next update: Wed 05 Nov 2025 02:00:11 +0000
Files and hashes: 1: MokO4jiYwe9TS2omj2ikwVpofng.roa (hash: gtOwexkMJ+fWFlaIuQkWe6uyxrapgzkAX5UJ2TjfWz4=)
2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: SHu5a76QIWY53cZLqksXUYABi8q4k5fxDVcA97uUWMQ=)
3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:d8:e3:df:51:8e:dc:32:c5:aa:46:29:83:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Nov 4 02:00:11 2025 GMT
Not After : Nov 5 02:00:11 2025 GMT
Subject: CN=279a49f88b42e902e0c7f4e4c8321df7682e4ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:b1:d6:64:e8:c1:50:8d:1b:f0:87:bf:56:
27:53:93:04:05:cb:f1:c1:58:b4:3e:84:a6:84:75:
bb:06:e5:46:a8:a7:7c:d0:5e:1d:8b:fd:b2:f7:4d:
ed:9f:c4:7a:ab:04:f3:92:34:de:ae:e3:55:65:c9:
ac:34:01:2c:cb:49:d4:ee:5d:bf:73:bd:dd:28:c3:
61:f6:54:9d:3a:ea:54:51:a5:79:ad:d9:05:99:8f:
ed:56:2f:a2:7e:56:a1:47:7d:b0:12:dd:76:59:80:
7a:82:4d:68:8c:01:4d:dc:f2:0b:7d:13:21:20:fd:
30:7c:71:86:4e:0a:7e:73:96:1a:95:0f:83:96:df:
7c:41:7e:65:26:58:fc:4c:be:e0:cd:0f:5e:8a:e9:
4e:33:16:96:89:de:dd:f7:ec:31:9b:27:47:d1:c5:
aa:f0:17:ce:d1:64:ee:04:d9:26:c2:aa:df:2d:15:
71:f4:ea:43:7b:7a:e8:88:e3:14:40:cb:83:00:2e:
4b:38:79:e0:f5:02:b9:f2:2a:9e:5a:9d:ab:28:cb:
49:21:7c:44:b2:1a:91:3f:b6:f9:19:a9:c6:4b:1b:
6c:29:1b:22:25:09:02:f3:de:30:7c:0b:71:66:18:
5a:22:64:d6:07:32:f8:2b:d3:3b:f0:4d:ed:81:5d:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:49:F8:8B:42:E9:02:E0:C7:F4:E4:C8:32:1D:F7:68:2E:4A:CE
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:24:34:8f:a6:7e:94:15:79:28:3a:81:b2:43:a4:70:2f:06:
a1:10:92:c0:fe:54:cd:48:42:d7:10:18:f1:71:94:21:42:8b:
81:56:e6:76:f2:56:45:c3:07:44:0b:b0:80:18:49:17:48:4d:
a9:e2:90:a5:8c:79:31:fc:f7:2b:fe:1e:2e:1b:16:20:d6:f6:
e3:5a:8c:da:a7:e6:4d:4e:9a:df:c4:9a:74:c9:5d:41:f0:fa:
48:2c:b7:07:61:d1:86:ac:8e:f2:a0:6d:33:73:64:87:ea:fe:
c3:25:44:41:41:9a:53:db:ea:bb:bc:e6:bb:ba:d1:a8:6d:a7:
a5:d0:b6:77:55:fc:c9:69:c0:9b:e9:ec:aa:8e:31:95:9c:c6:
e7:40:f8:73:33:f5:87:35:f4:37:6a:d5:e4:ee:b5:06:14:75:
0b:42:57:04:83:dc:88:ca:07:46:c9:d6:1a:93:9b:32:9d:a3:
24:f7:2d:d8:3c:8d:72:2c:6f:31:47:2b:cd:2a:a2:00:6c:70:
6b:92:46:e1:97:8c:cf:61:65:12:52:b9:d9:53:cc:79:ef:c5:
c3:97:2d:25:c7:eb:78:a4:dd:56:bf:9f:16:8a:ec:e7:c1:48:
9b:f1:b1:91:20:39:3b:b5:1b:f4:ec:6a:9f:b3:40:43:71:c6:
d1:6e:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:54:52 2025 by rpki-client