Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json)
Hash identifier: v+SSO17cNEMIb+4fOuO45iKs/PXWVZa/1nBRPLYWIsU=
Subject key identifier: D0:00:95:83:19:B8:D4:3B:9B:62:C3:70:FB:66:85:CF:34:C0:5B:30
Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Certificate serial: 019A4DE172E856BF4F043367AC8C8E425F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 08:00:11 +0000
Manifest this update: Tue 04 Nov 2025 08:00:11 +0000
Manifest next update: Wed 05 Nov 2025 08:00:11 +0000
Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: qB/Y2F8PHbcw2hVQwsSxVAyd5ci3XvqhFfUkERlu4V4=)
2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:72:e8:56:bf:4f:04:33:67:ac:8c:8e:42:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Validity
Not Before: Nov 4 08:00:11 2025 GMT
Not After : Nov 5 08:00:11 2025 GMT
Subject: CN=d000958319b8d43b9b62c370fb6685cf34c05b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:0d:1e:8e:04:73:dd:56:98:14:9c:59:1a:
f5:2d:61:ce:5c:44:50:2c:56:e2:76:8d:d2:22:e5:
20:37:f2:43:25:59:63:49:d5:97:9f:25:70:95:7b:
83:d3:31:76:ad:d8:8a:bb:86:ec:f8:ef:d3:2d:75:
2c:a1:ac:95:cd:f0:d6:49:ee:63:51:c7:92:c1:41:
e0:9e:7a:94:57:89:d1:99:7c:c5:ea:01:8a:e8:67:
b4:c7:fe:48:af:db:9e:63:c3:7c:67:9c:16:e5:e3:
30:86:d6:cb:bd:0b:10:f5:50:a7:4d:d0:09:24:d3:
6b:78:1e:d2:aa:b5:2d:4c:61:c4:d6:f2:63:38:25:
fe:34:df:08:b1:52:2c:c4:70:85:88:e4:96:51:67:
d8:73:f6:68:f6:93:65:aa:46:56:66:f1:61:33:0e:
aa:f2:80:68:d2:08:00:e9:a3:2d:85:71:6a:39:78:
94:8e:c1:ba:b6:ff:0e:e8:b4:7c:6a:73:76:3b:b0:
a0:2b:1f:27:41:97:62:83:09:27:5a:f1:5e:3a:7c:
c0:f5:52:7c:60:8b:4b:06:5b:3f:16:ef:89:7d:60:
3e:e7:cb:c8:12:c7:e0:96:38:8b:88:a5:66:cc:b5:
1e:fb:a9:cf:a4:99:b9:4c:e0:c6:e9:93:6a:bf:b7:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:95:83:19:B8:D4:3B:9B:62:C3:70:FB:66:85:CF:34:C0:5B:30
X509v3 Authority Key Identifier:
keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:75:d4:31:b0:b1:b7:52:cf:5e:ce:90:88:e4:2b:ee:3d:d2:
ab:9d:10:98:60:ea:f8:bd:1d:d2:7b:96:31:99:8a:66:c1:42:
e3:bb:5e:e2:a8:6b:f5:be:26:9a:78:4f:76:27:35:80:a1:07:
0d:72:2a:f8:03:36:32:05:41:9b:f3:1d:51:89:2a:69:7a:16:
48:34:33:70:ea:23:c3:5c:92:f5:50:62:ec:c8:3e:6e:eb:dc:
f2:58:b8:c1:89:13:8c:57:49:00:74:8e:7b:ad:ed:c7:4a:c7:
bb:ec:bf:a4:3c:a7:10:d7:51:6a:db:95:02:75:21:81:24:05:
4e:be:04:19:91:d7:c3:19:3a:13:60:5c:40:97:47:23:76:30:
82:9a:30:32:ab:91:97:08:b4:15:2b:0f:9c:39:92:32:d8:a9:
5f:cb:5a:4c:2a:f6:b2:96:32:c6:e4:05:f3:75:f4:a7:76:4a:
bd:55:54:7d:1c:0e:4f:81:ae:9a:ad:dd:53:c3:e7:38:e5:1d:
c8:3e:8e:47:e6:b6:d0:7f:1e:2b:03:0a:d0:c4:ba:d6:c0:14:
ab:df:4b:91:42:1c:b5:46:0d:fc:9b:f4:17:72:b8:83:ed:8d:
1d:92:36:dc:6a:1e:13:0a:8d:b9:13:59:be:8a:87:a4:e6:15:
92:5d:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:41 2025 by rpki-client