Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: SbBFaf5gBGlZVxnUn/4WXtEnrNAw41IrbT0/2sULPZc=
Subject key identifier: E4:3F:1A:E2:E0:FD:11:1A:74:68:FF:51:A7:4F:BD:73:98:D4:93:ED
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019A51BEBDAA2F5F09997190063A0DC14FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 02:00:46 +0000
Manifest this update: Wed 05 Nov 2025 02:00:46 +0000
Manifest next update: Thu 06 Nov 2025 02:00:46 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: fU7F96TPxolX9qt+4R0VuEi3IDnScBp5E3sseG3+ut4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:bd:aa:2f:5f:09:99:71:90:06:3a:0d:c1:4f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Nov 5 02:00:46 2025 GMT
Not After : Nov 6 02:00:46 2025 GMT
Subject: CN=e43f1ae2e0fd111a7468ff51a74fbd7398d493ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:ef:76:00:6a:77:09:ed:09:32:f7:b1:09:
05:e5:59:b6:a3:00:0e:e2:58:e9:68:ff:05:1b:6c:
33:e9:54:86:02:d6:38:e2:d8:7f:45:c1:d0:1f:bf:
eb:c9:79:62:c1:aa:45:0d:51:60:4f:e1:fc:18:ca:
e8:73:55:f4:7a:1e:03:bd:18:a0:93:5c:a4:06:a9:
bc:d9:3a:33:b3:5f:26:d1:d2:9c:e2:74:ea:e7:f6:
b4:e1:23:d4:db:68:cd:ec:a3:23:82:02:b3:cd:10:
5c:be:38:65:29:61:41:d1:ee:ed:f5:15:5d:28:7a:
47:9c:56:11:21:b6:6f:bb:7f:da:88:2a:5d:c2:6d:
ed:2d:28:bc:a6:59:76:e8:e7:8a:c2:7f:9e:da:f5:
eb:bb:f2:a7:ca:1c:f3:d4:3e:44:10:eb:5c:59:8a:
52:e7:89:98:39:eb:fa:5f:f8:29:ff:0a:11:78:12:
74:7b:87:1a:44:a2:53:b8:c5:8f:63:d8:c1:52:d9:
4b:a1:c8:b6:6f:2d:49:8d:6a:7c:c6:11:77:6d:e6:
ff:76:0d:eb:4d:14:60:bb:eb:c8:68:73:b3:a6:21:
0a:75:a3:0f:8d:87:68:01:ce:c4:08:ec:fc:f0:6a:
5c:bc:cb:22:e7:5e:c7:9b:80:51:db:8a:d3:e4:1b:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3F:1A:E2:E0:FD:11:1A:74:68:FF:51:A7:4F:BD:73:98:D4:93:ED
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1e:01:56:87:81:ac:50:fe:61:8a:53:02:aa:b0:80:53:a7:
8c:5a:3f:dd:e8:23:84:a2:ec:24:e9:de:a2:09:f5:46:ec:4d:
64:b6:06:87:26:90:43:d6:6f:99:46:33:d8:5f:97:94:c3:39:
0e:39:5a:41:da:fa:ab:24:cc:27:cc:16:f7:89:19:07:b3:f9:
c9:d6:37:22:04:ba:05:6d:06:6f:d0:5c:91:2c:1e:67:1d:f5:
e0:c2:02:ec:0e:95:74:f4:1c:e3:06:7b:57:e2:52:2b:0f:15:
0c:98:99:8b:bf:cd:a4:83:f1:c7:b3:b5:4f:b2:27:ed:30:5c:
0e:ae:8b:72:c7:42:d3:eb:72:32:ab:e3:77:53:5f:2e:e6:75:
d2:af:a5:9c:b3:ef:aa:e8:05:de:b4:a7:af:a3:0b:23:83:d5:
19:cb:55:a3:a6:50:c7:9c:70:68:14:30:d0:76:51:dc:f1:83:
19:7f:52:a0:d2:f6:dc:05:ea:fa:b5:bf:1b:9e:c8:a9:ef:d9:
25:bb:96:4c:33:f8:53:bb:02:30:1e:f1:fc:ee:29:3b:7b:d8:
b5:53:c7:12:db:87:d4:4d:c0:01:16:87:5e:a6:5f:a2:84:92:
31:2a:7b:bd:d0:1a:d2:d2:50:13:b5:1d:a8:7c:39:b2:9a:21:
98:c2:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:04 2025 by rpki-client