Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
File: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft (raw, json)
Hash identifier: MFKxJfH/J5D+stU741py1qOD6MZv1RaZoeEFaQbHVtI=
Subject key identifier: 8E:57:63:00:36:F6:94:56:D8:90:A0:99:7D:B1:EC:46:86:BA:E1:62
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial: 019A4D3CEAAE1CDE82CFB0459D8756FE9DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
Manifest number: 0761
Signing time: Tue 04 Nov 2025 05:00:29 +0000
Manifest this update: Tue 04 Nov 2025 05:00:29 +0000
Manifest next update: Wed 05 Nov 2025 05:00:29 +0000
Files and hashes: 1: 1-7BUvW0DqpGIoHRUThEcreOn85U.roa (hash: 1h+BwanAoTba+J1D0yPZhO85Nea+fKXXhs9HYI66nl0=)
2: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl (hash: 0fMv1Bwx08Xy+3f+lIIdVp5/mW8UH1FbncmbTldITWU=)
3: bAacBV2Nw5dlSOAXdJOoA7HEvjE.roa (hash: fR7tFabVPNstEHxx+U9K/CBKuKf4T3tR3OGzVsaSh0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ea:ae:1c:de:82:cf:b0:45:9d:87:56:fe:9d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Validity
Not Before: Nov 4 05:00:29 2025 GMT
Not After : Nov 5 05:00:29 2025 GMT
Subject: CN=8e57630036f69456d890a0997db1ec4686bae162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:23:ef:26:ee:37:02:c7:5f:7b:5b:2a:2c:
6c:64:7a:57:68:0b:61:91:7c:00:5e:4d:c5:9d:76:
2a:89:35:cb:33:d7:34:e2:f7:2b:df:23:88:3f:87:
f3:08:ef:be:51:44:ad:a7:d0:7e:c9:5d:32:81:b4:
ef:f6:c9:7e:e5:20:f8:74:94:4f:33:e7:95:1b:ef:
a7:bf:87:3b:25:bf:39:2c:e7:ac:d8:67:76:8f:00:
38:dd:3a:c9:58:da:e3:33:da:cf:75:bd:6c:d0:a2:
ac:9e:89:66:55:2d:27:32:58:fd:08:f0:7b:34:d2:
97:02:96:24:6c:bb:94:ac:27:26:c7:46:b7:dc:26:
84:82:68:36:bf:5b:95:21:b7:37:49:a7:9f:a1:3d:
78:3e:64:70:39:80:0d:46:a9:8c:6d:92:ae:bd:fe:
68:c1:10:fb:92:19:2f:c3:5b:30:16:24:f7:b5:b3:
a0:ae:59:3e:29:18:f2:d4:8e:41:63:7b:7e:b7:76:
d3:6e:fc:32:86:62:01:33:08:27:17:86:97:26:13:
c0:bc:18:a1:d7:bd:3c:6e:9f:3e:b4:d0:20:7a:e2:
24:94:c3:bf:ca:85:da:8e:22:0e:f4:d0:7f:c4:a9:
42:70:ee:31:ee:f4:d4:d6:5f:b1:60:0a:7c:88:91:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:63:00:36:F6:94:56:D8:90:A0:99:7D:B1:EC:46:86:BA:E1:62
X509v3 Authority Key Identifier:
keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:de:6d:50:f7:24:53:ba:88:26:9f:a2:3b:6e:1f:79:09:d1:
fe:d3:ef:15:3d:41:5a:58:26:5f:fc:6a:32:a7:52:8d:e0:02:
1c:95:9a:de:f9:2e:2f:ea:5d:05:18:a2:8e:f0:50:83:48:60:
b3:44:6a:f2:65:cd:5b:30:cb:91:8e:0a:fe:78:63:0d:df:11:
7f:b5:0a:51:2f:2f:6f:85:b8:3e:66:d1:52:36:c6:a0:73:0e:
0e:65:3a:aa:79:c7:54:45:60:10:af:06:14:b8:ae:d9:5e:c4:
69:a3:32:12:80:9c:0d:af:6e:91:a1:a6:6f:86:f2:a3:b8:93:
6f:37:66:27:8d:ef:3c:e4:b8:ba:fc:6b:be:b2:5c:13:57:eb:
e1:c9:39:cb:f8:53:73:f6:db:bc:b6:5a:59:44:f4:93:34:22:
d7:aa:bd:f4:de:47:1e:ed:d4:79:0e:10:70:32:e3:00:0f:e6:
8c:51:80:30:4a:ef:5a:1c:3e:61:8a:23:3f:54:66:a9:55:21:
da:3b:a4:cf:67:b8:9d:43:c0:da:be:42:15:7c:d1:97:ed:67:
a2:2e:2d:d4:14:37:91:fb:54:9d:25:06:fe:28:57:c2:79:f1:
c2:70:65:18:84:dc:11:d7:81:4c:b1:43:a6:c5:6e:31:5f:d8:
4b:1d:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:53 2025 by rpki-client