Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier: fg30b1koZwMR/oqtTyvwqIJ8W6q+iscoYiRlqLBEz0A=
Subject key identifier: 50:67:BD:21:2A:1B:48:05:30:24:AF:15:5A:EE:70:7D:91:B3:77:52
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial: 019A4DE215199831900C217B0F38EAF0F290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number: 08CA
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: 9OhaqtPYm//kvAxsow3iooqdh/BEvUJTsPvn4/Jro2o=)
2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:15:19:98:31:90:0c:21:7b:0f:38:ea:f0:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=5067bd212a1b48053024af155aee707d91b37752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:93:4f:0f:e3:d9:a8:42:b1:95:7f:64:e6:
c5:c5:45:5f:fe:61:c5:d0:83:86:28:ec:c2:9e:02:
10:1d:0f:ba:d9:7c:d1:fc:3c:29:98:89:e5:da:25:
7b:dd:e2:cc:57:e8:ef:ae:97:d7:ac:6f:6c:f6:3f:
e6:c8:8e:9d:aa:31:43:ae:a7:f6:fd:15:99:90:73:
8c:e4:1d:b9:5e:b8:66:91:db:0f:90:e7:28:06:6d:
67:c6:9c:d7:bb:5e:c2:72:d3:4d:2b:91:61:7b:61:
93:11:b1:48:a1:1f:84:46:fb:ca:d9:51:8e:6d:18:
4b:64:43:c9:ac:23:26:49:bb:bc:43:51:7c:a8:61:
33:7a:dc:80:25:e4:15:af:ee:b1:fc:44:cd:2e:38:
e9:71:93:84:30:f4:ae:73:7a:20:9d:aa:77:10:e5:
70:09:73:40:93:fa:c4:5d:5d:eb:c3:c5:41:d8:2a:
26:b6:c6:cb:5d:46:35:88:90:76:a1:39:86:ef:7b:
9a:b3:f2:f6:9f:f5:51:bd:39:91:47:10:30:ee:ec:
b9:e7:ec:0e:42:19:ac:2f:fd:23:05:94:3e:ba:e3:
b7:50:da:c3:46:8e:98:ee:98:3f:61:81:dc:55:2c:
cd:0f:6b:1e:12:71:68:c6:26:57:f2:48:5a:85:86:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:67:BD:21:2A:1B:48:05:30:24:AF:15:5A:EE:70:7D:91:B3:77:52
X509v3 Authority Key Identifier:
keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ef:6e:a0:59:44:2c:89:09:2d:21:db:de:32:14:46:43:31:
a2:6c:3b:96:e8:32:85:c8:44:2b:63:56:cb:e1:c4:5d:9b:94:
49:da:cd:9a:50:27:b5:0c:9b:e3:00:6b:35:6f:96:5d:df:0b:
a8:2a:cb:c8:65:8c:a8:d0:9a:6e:1f:1e:55:cf:d4:fa:ad:5f:
cf:81:9d:ef:4a:7d:5a:79:af:a9:17:07:9a:23:9a:f1:d1:a6:
3d:13:e5:44:bc:85:03:b0:f3:85:57:a1:e9:2f:a8:c1:db:8a:
6c:64:41:40:97:2e:38:18:7f:76:07:15:1a:eb:64:66:b1:39:
d4:7b:86:f1:cd:62:31:71:ad:d3:b4:0e:7f:6b:d5:01:05:77:
bc:3f:38:0f:6c:47:08:54:07:6b:5c:9f:c2:2b:e1:44:b8:b4:
a8:a7:f7:74:f5:4a:83:79:19:08:ce:e5:56:54:6b:63:1c:80:
0b:25:9d:6d:e0:87:45:d7:f4:8d:47:f6:4b:4e:e0:36:aa:35:
0e:cc:30:22:ba:54:b0:74:3f:e7:c6:c8:18:f5:8b:49:78:62:
df:4d:49:7d:4e:64:6a:66:f9:36:7f:a9:b8:ec:78:0a:96:cb:
70:ed:2e:cc:64:80:1f:9e:08:fa:0d:13:ef:82:c6:94:d1:5e:
8e:99:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:09 2025 by rpki-client