Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File: 70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier: 2YxWHrIaFML6/5Rwwu3p/ImRp8s5iiNrZXS7t/uuYng=
Subject key identifier: 64:F1:AF:2A:D6:FD:D7:0B:57:8B:35:37:B4:D4:30:AC:AB:EB:E1:8F
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 019A4EF3FFF70739443B483A014D3D8F1FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number: 0E78
Signing time: Tue 04 Nov 2025 13:00:04 +0000
Manifest this update: Tue 04 Nov 2025 13:00:04 +0000
Manifest next update: Wed 05 Nov 2025 13:00:04 +0000
Files and hashes: 1: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: 15wbJ53Ws+g8qH9EmJsveb0eh3Kdbic9sYk3Gvq/bVs=)
2: S4KhO_-8xzMvt1B6k_-GK_XNTGs.roa (hash: 298ot3rN9ux+k96S6A3kz+LkCwnTR/d/qtOX4jSeeqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f3:ff:f7:07:39:44:3b:48:3a:01:4d:3d:8f:1f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Nov 4 13:00:04 2025 GMT
Not After : Nov 5 13:00:04 2025 GMT
Subject: CN=64f1af2ad6fdd70b578b3537b4d430acabebe18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:45:0f:fd:cb:ed:f7:ce:d0:c8:a0:be:8f:
4b:7a:21:03:28:be:da:16:2b:c8:ad:3e:c3:f5:56:
0e:0b:fc:30:77:cf:e8:2d:4e:93:94:c5:8c:03:85:
e0:38:45:3d:01:d3:59:17:ec:8d:a3:72:3b:2f:6d:
52:a1:77:61:38:83:e6:5c:29:47:ed:78:98:2b:da:
78:ad:74:6d:b1:f7:c5:7a:97:45:21:4e:d6:8c:e7:
64:18:23:95:dd:f9:7f:cb:44:c7:6f:d6:26:e1:d0:
d1:d8:7a:93:80:85:23:84:fc:af:79:0d:d5:fe:a6:
f5:b5:9e:ac:0a:66:ac:c8:bc:3e:a0:53:8d:64:41:
67:16:44:6b:a7:42:01:ad:cd:c1:58:e1:e7:8a:06:
01:07:06:80:f8:50:8d:55:ea:1a:52:47:9a:94:e0:
d8:f4:ea:50:9a:b3:b3:1f:5f:4d:73:94:dc:cb:03:
0c:b7:75:8c:74:c9:d7:08:a9:c2:92:94:ec:e1:4c:
4a:46:79:18:3b:94:d3:92:00:88:b3:0f:c2:56:11:
7f:ee:c6:00:36:82:4f:0b:a0:76:00:d9:2d:43:8c:
38:6a:ef:22:c6:57:9d:fb:5b:de:26:da:f3:1b:c2:
76:25:e2:06:96:e9:3c:7c:8d:8d:94:0a:f5:d7:4a:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:AF:2A:D6:FD:D7:0B:57:8B:35:37:B4:D4:30:AC:AB:EB:E1:8F
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:10:6f:ec:62:60:57:d5:24:e6:f6:6e:82:16:3e:2f:f8:08:
ae:39:84:a4:cf:7b:43:8a:b5:79:6f:e1:7a:f7:c3:2d:87:a3:
aa:2c:60:16:e7:ca:f0:e7:19:ac:84:57:64:93:18:5d:fe:78:
b1:55:74:55:da:0d:52:d7:a9:41:45:fb:28:a1:7a:29:b3:e2:
77:2b:8a:f5:aa:19:bf:8c:a5:45:0e:bc:20:5b:a6:6d:18:6b:
d4:b6:64:97:d8:0a:c1:6a:95:1d:04:5a:54:74:de:f8:49:ed:
99:b5:b5:2a:63:d7:a3:1b:9b:c5:64:d3:82:85:f0:a2:7e:ad:
e3:6a:77:9c:d6:c5:0f:0c:e2:e0:b0:49:13:80:51:cf:ff:b9:
ec:07:44:27:af:65:59:88:f6:7b:dc:f9:14:e8:23:37:2b:ff:
09:0c:08:0f:af:0f:df:ed:66:55:e0:76:fa:d7:06:7d:f7:65:
fe:93:31:e7:6a:fb:9f:e2:0a:2e:10:1e:e0:00:50:9e:1c:e7:
f4:47:89:c5:7f:e2:ce:49:07:53:a7:f2:24:69:8f:63:17:28:
15:9f:0a:c3:3b:03:b7:f5:8c:b3:f1:8a:db:5e:b3:3e:fa:08:
f3:ce:0c:cc:82:a1:eb:ba:fc:62:cc:93:72:a4:d2:2f:ef:7a:
a2:a2:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:08 2025 by rpki-client