Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: /z76zA9rLSiWG1yHaepzRhuDisFM6/PpH4ndZ8r7Afs=
Subject key identifier: D3:E8:39:6B:DB:E5:EB:AC:86:DD:8D:3B:C9:B9:B0:FD:59:7C:29:85
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 019A541A8C4E8DDE99E28E42DCE9F56060A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 079E
Signing time: Wed 05 Nov 2025 13:00:17 +0000
Manifest this update: Wed 05 Nov 2025 13:00:17 +0000
Manifest next update: Thu 06 Nov 2025 13:00:17 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: 3QMSA6E7otv9y/lgAeQW/u3/hnf0UvHJ+8kvf/6r6uI=)
2: lzWZkqskGdmxyou0z2qQw2KTqoY.roa (hash: AeWymtaVk051Pxp8CZX6BkiYok3D+PBMltMiLV1wiVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:8c:4e:8d:de:99:e2:8e:42:dc:e9:f5:60:60:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Nov 5 13:00:17 2025 GMT
Not After : Nov 6 13:00:17 2025 GMT
Subject: CN=d3e8396bdbe5ebac86dd8d3bc9b9b0fd597c2985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:98:e4:dc:29:57:38:75:f6:92:1c:58:bc:
fd:8d:c3:3d:c0:0e:23:8c:21:39:90:02:02:d9:09:
78:95:e6:40:65:cb:d8:e5:5d:30:86:ac:67:e5:48:
3f:ec:20:e5:7f:51:56:85:3b:f9:1d:05:c3:a0:67:
c9:7b:b1:e1:ce:00:46:46:8c:49:90:ac:55:98:07:
d9:fb:60:37:34:d7:3d:67:56:72:5b:19:bb:96:e5:
9c:ff:d3:6f:81:a6:ce:58:e3:ec:7f:a5:f6:2a:7f:
63:ce:ec:45:05:75:ec:e0:3d:cc:ae:56:21:67:f5:
9a:a3:16:8d:f7:2f:02:5a:c6:9c:84:38:7e:65:6c:
f9:01:18:b1:10:d3:f9:99:db:86:20:e2:0d:bc:8c:
fb:8b:2a:47:0a:2f:ad:d1:c6:cc:8c:a8:14:fe:7f:
ff:aa:4f:18:5b:17:0c:85:61:c4:19:ed:36:c2:2f:
12:91:f8:01:b6:83:4a:1a:85:1e:e5:f9:5a:a4:f4:
4d:d1:c8:e8:65:33:01:c3:3e:2e:f3:84:68:fb:81:
58:7f:4b:8f:48:3f:1e:b6:37:01:54:ce:ef:4a:9a:
cb:f8:ba:57:ec:29:37:18:28:97:d0:14:d1:89:12:
92:8a:b9:d6:43:35:d6:cd:d5:f4:57:19:cf:c8:8a:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:39:6B:DB:E5:EB:AC:86:DD:8D:3B:C9:B9:B0:FD:59:7C:29:85
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:62:be:e5:06:7d:4a:f7:be:96:98:76:df:4b:fd:9e:2d:
70:21:59:3f:13:26:72:1a:71:96:f5:a3:9c:1b:cd:cc:25:ee:
40:b5:c6:37:8a:67:c3:7e:de:3c:93:c1:c5:2e:3d:d1:b7:95:
38:72:ee:cc:f9:3e:c4:2f:99:fe:3a:27:ec:f8:c6:c4:ed:21:
2e:66:79:9e:9f:88:bb:16:d8:32:0f:da:a3:26:c6:f3:98:27:
f1:e5:7c:ad:f3:dd:89:f8:d7:28:6c:87:a8:58:e6:36:26:3a:
0f:7c:80:a8:34:1c:7b:98:cc:29:b0:e8:6d:db:33:84:ad:29:
12:21:ba:eb:10:2d:6f:e7:da:ad:bf:00:84:63:af:c4:ed:21:
67:da:ae:b6:1a:0b:cc:20:41:07:b6:f7:45:89:ec:ef:aa:eb:
c5:55:85:33:ff:45:0c:69:36:01:03:5f:d5:02:98:83:44:ee:
16:c3:fd:a1:b7:61:84:35:b0:96:64:68:c6:05:08:a6:92:66:
67:b4:e4:95:1c:a1:cc:f8:5e:bd:81:3b:a0:11:f0:0d:b6:67:
e4:16:c9:f5:c9:f8:a9:d5:fd:9f:01:c8:a6:84:7c:0e:a7:d0:
7e:39:17:5a:f7:27:64:ab:e5:f7:ff:56:e3:0d:e6:c2:c0:0f:
c9:ff:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:06:59 2025 by rpki-client