Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: gW0ttDmZUG0j3by2VjLFHbKgsDrGw5jMZx56Bgdk/7o=
Subject key identifier: F6:54:80:1C:9C:91:93:53:F9:30:66:5C:32:CD:3E:73:8C:82:80:0B
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019A4EF52F856C6163E9C30CD09C839D8749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: xCkSvMoivo58Ux7psGT6wgbkjmpdwb91v2iPZZUQi2I=)
2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2f:85:6c:61:63:e9:c3:0c:d0:9c:83:9d:87:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=f654801c9c919353f930665c32cd3e738c82800b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:62:04:e7:59:63:93:3d:e9:b2:a8:64:04:
07:87:1d:71:6e:01:92:6c:b2:57:d3:3e:e7:1b:5f:
8f:ec:40:10:70:8f:56:91:9f:74:b8:e4:4c:04:a7:
ae:c1:11:e0:85:fa:6c:92:1a:3e:df:9f:03:db:e0:
6a:22:a7:2f:89:ce:eb:17:32:2e:66:ea:58:38:cd:
fb:b4:6c:ac:96:09:3f:83:3f:72:fa:08:63:9d:78:
f2:2a:5f:03:ff:50:32:80:eb:4b:c0:b6:ff:a3:55:
3a:b2:e8:85:3c:cd:fe:b1:bd:bb:96:ab:12:97:00:
07:37:cc:5c:72:19:a9:0c:03:c2:4f:82:0a:ff:7e:
1d:5b:f9:6d:01:6b:da:7e:54:bf:50:a7:81:49:f8:
f6:3b:74:56:06:97:46:76:45:41:9a:67:e0:26:2e:
da:79:9a:4b:22:76:2d:fc:b3:a2:d2:29:3b:28:b9:
4d:70:5d:a8:7c:37:6b:1f:f0:e5:6a:65:f4:70:48:
df:e9:ee:96:9e:ac:0c:4f:93:67:a9:81:49:aa:2a:
95:09:1e:f7:a5:20:f5:3b:ad:18:51:ba:cb:87:c0:
cd:ca:e5:a9:e0:0e:1b:54:b8:01:1a:af:c0:f9:aa:
a9:dd:b8:1d:92:be:70:65:99:cb:88:4e:e3:8f:40:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:54:80:1C:9C:91:93:53:F9:30:66:5C:32:CD:3E:73:8C:82:80:0B
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:2a:89:56:11:6c:aa:05:82:dd:2a:96:38:65:b4:6e:77:
24:12:d3:2f:21:62:a6:4d:ce:64:21:00:ee:4b:c9:a6:7b:f0:
0a:1d:e7:29:29:e0:65:39:dd:36:d9:f7:a6:f5:f8:1a:65:ee:
bd:c1:02:0d:5f:3c:89:d2:f1:84:47:19:9c:8d:84:88:f8:82:
9d:ed:4d:57:a7:1e:70:58:ec:42:28:fd:e4:5e:a8:f2:f9:03:
df:44:5b:8b:75:12:06:a2:fa:f8:75:5b:23:55:87:45:a0:25:
80:3e:8b:c2:41:9a:1b:c0:43:1f:11:07:e9:32:3c:ea:e6:54:
89:40:fe:ac:ca:50:56:75:d1:a9:7f:bb:7e:db:07:66:9e:c4:
c8:6f:de:43:1b:c6:74:a6:b4:fd:fa:57:46:24:95:0f:16:8b:
9a:28:a3:02:99:68:00:e4:83:e3:15:1c:a4:2f:08:5e:03:1d:
cc:7e:06:40:2a:76:b3:9e:87:df:24:a8:cc:8a:8a:5b:98:41:
8d:d9:c0:74:d2:fb:fe:a6:76:3b:49:59:1b:0d:d3:34:4c:07:
5b:02:e2:2f:07:2f:41:94:20:d8:80:f1:62:c1:95:cc:8c:35:
17:62:00:51:b8:c4:22:c1:81:16:f0:4b:e2:d0:f5:77:e9:80:
35:51:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:35 2025 by rpki-client