Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
File: V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft (raw, json)
Hash identifier: gPERgPE7KI3Pq7BJkElC85j1WUIUMuzPREZ6CkCyoX0=
Subject key identifier: 91:40:B7:46:EC:D7:C8:31:16:59:BE:DD:00:04:0F:B6:49:66:D1:67
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Certificate issuer: /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial: 019A511981A57D5992A1D74F74D940D410C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 23:00:17 +0000
Manifest this update: Tue 04 Nov 2025 23:00:17 +0000
Manifest next update: Wed 05 Nov 2025 23:00:17 +0000
Files and hashes: 1: V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl (hash: 2Vm6wBAKIdESIE+5BU+rezoVakL7bWwSgD3ACH4BGVY=)
2: We1vlMV5F0WOOHhpojHWiZ1mpOk.roa (hash: kb4mbEAAu4J7YcsoL9X19jWq28MWG1KM2kpIpY/qIwQ=)
3: uXQZBDj9ZtkXG_83Mo1I8Z6Fydw.roa (hash: SGdXI5i5fIsWQdG6sYWkGmfc2P0KTqH/WAPHrOQF1V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:81:a5:7d:59:92:a1:d7:4f:74:d9:40:d4:10:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Validity
Not Before: Nov 4 23:00:17 2025 GMT
Not After : Nov 5 23:00:17 2025 GMT
Subject: CN=9140b746ecd7c8311659bedd00040fb64966d167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:5f:a4:4a:71:0e:01:a4:6a:9f:f6:e2:d6:
d0:3c:81:13:8c:31:04:24:3e:85:94:5b:55:32:15:
5f:1d:a0:62:3b:ff:67:59:59:e2:ea:02:6c:73:42:
2c:f4:1d:74:1b:3b:e5:7b:2f:1b:c3:12:96:43:de:
49:49:ae:7e:86:c8:9d:0e:b4:d0:7f:dd:8d:49:16:
93:78:e4:90:3f:a2:80:b0:61:9b:a8:d3:1b:17:fd:
fc:23:d8:3f:54:50:b9:cd:c6:85:92:84:c2:1b:d4:
db:3a:58:0a:9b:9f:0a:fe:3c:ff:c4:c4:a5:fe:ae:
fe:09:ed:c4:48:45:75:bd:6b:21:75:59:f4:1a:19:
08:79:aa:1b:5b:0d:26:19:08:f7:ed:dd:ae:5d:9a:
e4:e7:fb:3a:49:ad:e9:85:b9:02:85:85:bd:37:04:
84:2f:90:3b:15:35:ab:24:46:a0:2d:ea:cc:9e:43:
b8:31:0f:f9:fb:08:6a:55:7d:5f:46:ab:f3:6d:be:
28:66:4d:c2:a0:31:b6:4a:73:c6:09:b9:5c:be:ae:
bc:56:41:b9:23:a2:90:7c:aa:b4:45:b0:56:27:17:
27:f2:ff:33:fd:15:2f:8c:e2:85:63:d1:c2:53:de:
43:5d:64:a9:7f:ed:10:f7:81:28:f9:91:a2:af:0f:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:40:B7:46:EC:D7:C8:31:16:59:BE:DD:00:04:0F:B6:49:66:D1:67
X509v3 Authority Key Identifier:
keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0b:82:40:ba:16:50:9c:d6:52:39:43:a8:a4:98:6c:dc:85:
60:4f:cf:e9:b3:59:37:4c:8f:a5:15:81:46:5f:4b:0d:6e:63:
7f:8a:45:ca:39:e4:64:ac:67:3c:76:dd:37:ca:07:65:a0:28:
a8:84:81:1f:6b:a1:16:a2:55:47:81:65:6b:7d:dc:04:2a:22:
ff:c5:1c:c9:aa:50:b9:51:40:83:1a:7f:30:60:61:48:58:13:
d4:f1:b8:6a:fc:9d:b3:b3:9a:27:4b:de:07:f1:9f:af:35:12:
8d:94:13:ab:ed:7c:e6:99:6c:63:96:4a:11:d4:0e:77:ac:68:
8b:30:93:3f:72:5c:8d:7d:96:31:ab:fd:10:a9:25:7b:a7:ec:
0d:53:31:df:bc:dd:cc:6f:a2:24:31:e0:ba:73:66:13:ce:f2:
6e:1f:75:33:ce:17:e7:0a:49:3c:52:f5:19:62:30:08:4f:73:
64:92:c9:15:1a:c4:69:12:1e:5f:73:6b:69:62:18:da:8d:7a:
5a:3c:15:4f:95:65:0a:d2:2f:7f:81:d7:6a:e7:c0:8e:9f:e7:
2e:48:78:4a:2d:dc:11:a6:3d:51:87:8a:3f:b2:cc:15:17:bf:
e4:23:bf:aa:ef:14:c2:22:62:da:07:25:00:f1:4c:fd:bb:50:
d3:c1:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:42 2025 by rpki-client