Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
File: sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json)
Hash identifier: mUIWBFoygwQxQIK75ok7Z4HqQp4SLCCEefNZIH8D0g8=
Subject key identifier: 7A:CB:69:7B:71:5A:C0:48:37:5E:A6:CA:A5:28:AE:7D:12:7E:AD:0D
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Certificate issuer: /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial: 019A53760E201BDF2E002D17A159F867888F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
Manifest number: 07D3
Signing time: Wed 05 Nov 2025 10:00:36 +0000
Manifest this update: Wed 05 Nov 2025 10:00:36 +0000
Manifest next update: Thu 06 Nov 2025 10:00:36 +0000
Files and hashes: 1: ALNKyGQyY09MK9vl3O2X07J6-JA.roa (hash: H9wbzE6PP25p3vlBAxK5eVjK/F1/4ACUWAsYKWxNkUQ=)
2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: lZ4fYNc2n0aTcdTVN2CeHByUfeIZEmO68zpHGY+a5rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:0e:20:1b:df:2e:00:2d:17:a1:59:f8:67:88:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
Validity
Not Before: Nov 5 10:00:36 2025 GMT
Not After : Nov 6 10:00:36 2025 GMT
Subject: CN=7acb697b715ac048375ea6caa528ae7d127ead0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:b2:f3:da:df:45:f7:06:5e:6b:c5:40:a7:
4b:82:a8:7f:c0:2c:a1:c4:c8:7b:c7:f7:bc:24:03:
c4:68:9c:b0:11:18:9b:1c:4e:a4:b5:a9:1f:8a:01:
3f:17:1a:33:2e:96:a0:2b:13:a9:43:10:02:30:33:
16:26:03:43:0c:e8:d2:4f:9c:f3:17:c8:a8:d6:72:
9d:38:6d:af:23:1d:b0:26:0e:5b:fc:7a:b4:8f:96:
d3:e4:56:db:7e:8a:44:fc:6b:4c:48:20:13:95:03:
55:a7:c7:e1:9b:b3:15:60:86:f5:ac:cc:8c:d0:91:
f0:31:08:86:8f:2c:8f:8b:90:be:0c:c1:1a:79:c4:
1e:7f:a7:be:06:1c:eb:6c:86:d3:e2:38:ba:f8:ce:
71:78:1d:1b:2c:22:a7:64:87:aa:37:f1:ac:13:f8:
9c:00:56:c0:10:da:b9:5e:50:31:3d:34:e7:db:32:
74:a0:f2:f5:4b:2f:26:b5:2b:5b:b0:b2:a5:2c:f7:
f6:e0:31:80:6a:16:0d:b7:58:09:4f:9c:14:18:53:
8b:0c:f7:b0:f4:12:f1:c6:ef:f0:dd:c8:fc:9f:69:
9c:5e:5b:67:d0:ce:83:3a:07:df:4c:05:1c:8c:df:
b0:74:bf:3b:b5:cf:cf:9b:e4:69:54:6d:f7:72:bf:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CB:69:7B:71:5A:C0:48:37:5E:A6:CA:A5:28:AE:7D:12:7E:AD:0D
X509v3 Authority Key Identifier:
keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c0:ef:03:36:15:d9:4b:24:f7:c6:27:09:ac:1e:a2:46:65:
91:ef:20:4c:1c:df:79:75:c8:34:e8:60:d7:3f:19:c2:00:4f:
ca:5b:1d:f6:a0:9c:8a:d6:0c:41:86:4d:5f:aa:95:60:79:db:
ed:1c:aa:36:85:dc:b1:d6:ef:1e:08:c2:94:3b:a1:0f:53:c8:
ea:f6:a9:e2:41:80:00:88:08:2e:3d:8b:58:fd:b0:b6:07:2a:
03:cd:c4:d4:8c:ac:4e:66:64:89:91:ef:9d:b5:de:c2:11:36:
8f:9b:33:d3:51:92:73:b1:58:42:79:29:52:c0:43:03:27:c1:
65:fe:63:cd:93:5c:f6:a2:03:1a:06:32:8c:46:ad:83:2f:63:
aa:a2:42:9c:36:aa:2f:02:7d:2b:7b:0c:73:1c:c8:09:32:73:
f5:0c:5a:28:b4:5c:14:b5:18:45:bb:b3:8e:90:0d:a3:d4:e3:
59:7b:9d:6c:ad:09:50:25:b2:91:9e:5e:91:bb:ff:de:f1:5e:
c2:be:14:4d:ce:59:b8:39:95:9d:5d:0b:ac:37:43:6f:6d:9a:
70:d9:8c:7a:27:d4:a5:ad:ea:f7:4f:46:49:e0:ac:ec:79:b8:
ce:4c:96:8c:3c:17:40:43:f0:d7:54:b6:dc:2d:df:6f:80:bf:
d6:a9:11:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:33 2025 by rpki-client