Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: pIrNd+jtaS31cCEUO+/vN+gITT6zff07qsGmpl544bA=
Subject key identifier: B7:CC:88:11:98:C5:A5:DB:F7:7C:10:3D:B9:A4:3B:DE:D0:3F:99:D4
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019A5150B66E31F99CC682E786E4DB03EC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 0F76
Signing time: Wed 05 Nov 2025 00:00:35 +0000
Manifest this update: Wed 05 Nov 2025 00:00:35 +0000
Manifest next update: Thu 06 Nov 2025 00:00:35 +0000
Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: I1P4I5duKONHstw/TPGXMN0Fs2mqkD1TuCBlPhOQSXo=)
2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:b6:6e:31:f9:9c:c6:82:e7:86:e4:db:03:ec:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Nov 5 00:00:35 2025 GMT
Not After : Nov 6 00:00:35 2025 GMT
Subject: CN=b7cc881198c5a5dbf77c103db9a43bded03f99d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:2e:81:e5:cf:41:fa:b4:ac:bd:07:52:b3:
a0:c5:10:24:7c:27:4a:88:76:9b:62:86:18:c8:e0:
ac:04:ab:f4:13:78:e2:82:3c:f9:ed:00:6d:fb:61:
26:a9:5e:da:c7:97:19:0c:2b:52:ae:d5:c6:47:4c:
3e:7f:7f:78:fd:1f:9e:9e:19:db:ca:2e:08:1d:da:
ee:71:e6:df:e1:d8:6e:50:5f:c3:52:75:f4:ba:e0:
b6:6f:d1:de:84:e4:6a:9d:5d:7d:bc:98:83:13:f1:
76:d5:3e:f3:7d:4e:b6:0e:50:43:e0:43:3a:17:48:
2c:b9:d6:f0:35:22:1f:b9:aa:ce:ff:68:3f:60:98:
14:b9:cd:7e:cf:11:6f:9b:d9:fd:ec:9d:5d:74:ba:
c4:5a:24:02:25:3b:ef:10:98:e4:61:73:34:94:ed:
a4:21:f8:92:14:4c:93:f9:b2:0a:c2:e6:14:c1:3b:
6f:7e:57:9f:1e:83:7c:55:b5:d2:ec:a8:44:78:7a:
71:70:a7:f6:78:5c:61:14:f1:76:80:67:cc:14:28:
a2:39:ca:95:ee:49:3a:9f:cf:74:c6:94:ba:f0:c0:
0d:7c:ec:0a:f1:f8:7a:8c:13:7e:3e:e7:67:56:e2:
73:0c:4d:c8:a4:fe:94:63:40:82:26:bc:01:05:2b:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CC:88:11:98:C5:A5:DB:F7:7C:10:3D:B9:A4:3B:DE:D0:3F:99:D4
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2e:78:a6:7f:a0:79:2a:4b:5b:73:6d:4e:77:c2:6c:8c:99:
5c:d4:59:ff:d6:0c:5a:63:33:e1:d4:d0:5e:71:28:aa:b7:02:
5d:f9:99:98:da:7f:d0:15:e2:1e:f0:8c:70:c6:3e:a7:05:4a:
b6:a1:db:9f:83:e3:89:74:3b:d5:55:57:ba:d9:c7:ed:06:62:
aa:a2:85:46:2d:f4:53:09:87:0a:65:14:f2:c9:e4:2b:c5:ff:
bc:52:2b:8e:d4:81:7a:34:38:24:74:26:b9:27:20:c9:01:7a:
f9:51:fe:b6:a1:93:aa:60:ce:8a:cc:75:b6:c2:c6:ab:65:c7:
e1:05:3d:96:c2:89:e0:7f:19:50:44:fb:0d:9b:14:92:9f:3d:
27:e9:25:1b:95:82:56:ab:ca:10:de:e1:c8:fb:be:3d:36:42:
44:0b:25:10:90:5d:ad:a4:25:be:51:64:88:0a:8c:a3:bc:9c:
55:da:fc:ce:19:97:02:e0:c7:be:4d:a6:86:39:f9:bd:2e:08:
16:6c:a4:87:0c:91:18:f3:1d:ee:16:c8:16:19:ce:91:48:c3:
4f:41:73:ca:13:52:8b:d2:70:59:27:3c:35:52:64:c8:75:03:
fb:c2:41:e1:8d:fa:7b:f3:bc:8f:b4:45:db:1e:f1:6d:3c:58:
49:ce:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:00 2025 by rpki-client