Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: IqGfSMFNUtun2V1mg5E7EHxCkHrQ0fYGNLtVHzJMcqU=
Subject key identifier: CE:11:AC:22:F9:AF:86:46:FD:58:24:9C:E8:9D:49:77:32:01:52:CD
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019A4F9983C38E60F30D26BF3E0A4AAAEF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 03F9
Signing time: Tue 04 Nov 2025 16:00:52 +0000
Manifest this update: Tue 04 Nov 2025 16:00:52 +0000
Manifest next update: Wed 05 Nov 2025 16:00:52 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: l1Xsez1+l7Xj/h84qNGkjAtNetLeVmfIYC7cUY0rUV0=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:83:c3:8e:60:f3:0d:26:bf:3e:0a:4a:aa:ef:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Nov 4 16:00:52 2025 GMT
Not After : Nov 5 16:00:52 2025 GMT
Subject: CN=ce11ac22f9af8646fd58249ce89d4977320152cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:71:af:0e:39:ff:b7:bd:91:2d:28:59:7d:
25:b7:13:67:14:00:c6:66:e2:98:3e:75:5e:6e:16:
53:64:3d:b5:c4:20:17:38:dd:41:a1:aa:b7:89:57:
73:f0:0a:76:66:3a:cd:6e:6f:53:70:fa:81:95:73:
05:8d:dc:16:68:53:8a:fd:66:b7:77:74:8d:f5:c6:
94:88:05:f3:ce:25:44:f7:55:a9:4d:38:67:a7:06:
7a:da:bc:ef:99:7e:7f:a2:7c:b7:d2:32:0c:15:d5:
c2:68:18:0f:08:8e:1a:33:5b:7c:4d:fb:27:06:94:
43:ad:44:4b:e1:99:4b:22:40:06:25:e8:dc:17:1f:
40:f6:52:1b:0e:5a:5a:c4:99:f8:83:53:8d:ca:b8:
c5:f0:a0:e7:38:79:4c:bd:3c:e8:b1:67:4b:b2:7a:
1f:1b:3f:6f:2d:ba:b8:5e:1c:90:aa:2b:65:a1:82:
3f:6f:c7:fd:80:a8:94:6f:31:f5:10:00:4e:95:ff:
85:16:bf:7f:15:58:b0:08:60:af:cc:f7:23:1d:15:
2f:f1:67:e3:56:b4:b5:80:cb:76:dc:a1:32:e0:d6:
9c:46:8d:0d:51:ce:2a:bf:2f:5a:bc:82:80:87:44:
f8:cb:91:7d:aa:79:bb:0b:2c:80:18:39:c5:be:cc:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:11:AC:22:F9:AF:86:46:FD:58:24:9C:E8:9D:49:77:32:01:52:CD
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9b:d1:87:5a:79:cf:98:18:e6:7f:0a:63:0e:90:06:f5:38:
89:83:fe:4f:be:70:c6:ca:33:d2:de:37:d2:cd:1c:ba:10:bb:
7d:63:9d:f7:2c:fe:8f:d4:ba:ef:1e:2c:bd:ed:cf:07:47:23:
2b:98:f7:41:f5:04:24:6d:22:63:23:87:65:f0:5c:d9:81:ee:
d8:4b:23:ee:7e:50:3f:f8:d2:bf:89:59:e3:6d:10:f9:14:cc:
e0:5a:b8:38:24:0d:6e:2c:87:a0:9d:e4:8c:fe:f0:a2:84:6a:
5d:c6:89:be:89:a6:36:ed:62:1e:a1:d2:b5:a9:b3:84:6e:a0:
4d:19:c7:3d:e1:75:45:13:fb:f7:87:08:21:f0:68:75:dc:18:
12:05:42:8c:8c:3e:90:6d:6c:c4:4b:a2:e7:69:8c:3d:b3:0c:
0d:42:57:23:f7:b6:a6:75:3d:ef:d9:e8:64:ce:68:1b:10:5a:
96:ae:8c:7b:23:66:dd:78:cf:af:cb:0c:64:17:89:4e:b3:7d:
79:f6:69:98:dd:6c:01:a9:d7:ec:11:90:0f:22:72:5e:36:8c:
19:59:c6:1d:a1:c4:4f:ee:b4:8e:38:c7:e5:29:4a:86:fe:43:
4b:ce:1d:e0:25:5a:ee:0c:c9:dd:1b:e4:56:11:64:e8:ca:cc:
f1:2a:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:52 2025 by rpki-client