Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: DEAE6hSf95IKXbluGscims3R0GOASxA9CKBhrTbd19o=
Subject key identifier: 2E:EB:0C:30:45:DB:0C:0A:DB:70:A7:09:C8:8F:74:B4:05:FF:92:54
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 019A4F61F26DC07D222F43B96FC9E1C7670F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 073F
Signing time: Tue 04 Nov 2025 15:00:10 +0000
Manifest this update: Tue 04 Nov 2025 15:00:10 +0000
Manifest next update: Wed 05 Nov 2025 15:00:10 +0000
Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: G6u3d5LFBVz2qMQvEGNBXV98adPedcK8VNPpRIS4+aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f2:6d:c0:7d:22:2f:43:b9:6f:c9:e1:c7:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Nov 4 15:00:10 2025 GMT
Not After : Nov 5 15:00:10 2025 GMT
Subject: CN=2eeb0c3045db0c0adb70a709c88f74b405ff9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:41:fe:c8:1b:bc:5d:da:85:1d:19:87:c0:
9d:d2:04:6c:31:1a:92:40:61:bd:c1:f5:17:07:85:
c5:2a:08:38:6e:14:1f:04:c7:0a:78:8b:77:76:81:
00:59:ab:ff:cd:31:4a:e7:a5:7a:94:3d:ff:da:db:
54:26:f5:e0:95:38:c4:e8:d8:3c:29:17:50:a2:04:
ad:40:83:74:a7:ed:45:fe:cc:53:1c:c8:1c:37:4e:
9d:33:b3:60:7f:ca:94:4f:4f:cc:69:04:87:79:8e:
a8:f9:16:9d:2d:d3:b2:91:20:d9:d2:78:ac:11:f4:
83:1b:25:27:b2:64:22:55:b1:09:05:fe:5c:fe:69:
99:0a:e9:8a:ee:b6:b4:c3:00:49:0a:80:ee:ca:ba:
b9:df:6b:ac:6d:c9:4b:68:68:72:64:23:86:a5:8b:
20:0a:a6:21:7f:a0:dd:d5:e2:b9:b2:76:f9:0f:1d:
9d:1f:59:09:b5:77:62:f8:f8:1c:85:cf:f5:0a:5f:
44:cc:b2:1e:ea:e6:a8:68:99:3b:db:e6:7d:82:08:
e3:88:dd:64:ce:e8:43:12:03:06:1c:59:3d:1c:b7:
9a:e9:6e:38:4f:2a:d4:b9:06:4d:94:0a:d1:9b:02:
18:95:1d:8d:cc:27:46:72:89:c4:24:8f:29:05:5f:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EB:0C:30:45:DB:0C:0A:DB:70:A7:09:C8:8F:74:B4:05:FF:92:54
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:f1:68:27:22:5a:4f:59:cc:fe:da:c4:78:b3:c1:49:4b:
95:a9:6e:54:7f:97:f0:66:47:75:0a:c8:23:2d:31:0d:87:2d:
bd:65:b2:54:9e:3f:23:5c:af:d8:3f:b4:8b:d4:a6:80:0d:31:
d0:d4:8b:6e:d4:fa:a3:1c:d6:b4:2d:69:af:f9:7a:00:dc:7d:
e8:8d:bc:f9:10:6f:36:50:11:25:2a:28:8e:ad:be:62:59:51:
b7:2f:9b:01:f4:59:ac:38:fb:60:fb:e9:0c:52:66:27:d6:9d:
5a:13:b1:b4:d4:1a:f1:f8:de:ff:fd:f3:6d:32:91:54:83:86:
1b:c4:59:f0:4e:9e:f0:a0:5f:6f:ef:e6:23:0b:b6:28:36:3a:
20:06:9c:ab:5a:99:08:64:9f:a7:a1:78:a7:08:43:2b:bd:8b:
c2:e6:11:e7:53:3f:61:61:ca:fe:30:e8:4d:bb:80:5c:81:f3:
de:5b:b2:9e:85:a1:8d:5a:9a:c3:0f:8d:b2:ec:3b:01:27:cd:
78:f1:cb:01:ff:e5:44:98:fa:51:90:f7:02:2e:d0:15:35:fc:
2e:8e:c5:72:7f:45:16:7e:f4:0b:89:b0:6a:b1:92:7d:b8:18:
9b:47:80:92:0f:db:69:77:e0:9e:94:1d:e8:d1:5d:8a:78:c1:
3a:15:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:17:04 2025 by rpki-client