Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: t+p8Icyh9qB0e8k9SGh+i/1zG02Kw72tKqmEPvD0kKk=
Subject key identifier: B7:2E:65:A1:8D:E9:B0:6F:94:FB:E5:F6:7C:C1:8C:01:A5:06:13:27
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 019A4D05DE472B3CEA6200CDDC6AF3FD71EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0BDD
Signing time: Tue 04 Nov 2025 04:00:21 +0000
Manifest this update: Tue 04 Nov 2025 04:00:21 +0000
Manifest next update: Wed 05 Nov 2025 04:00:21 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: RdTv33ihHq13KRzNz0CsIN9ZvtnLjlvnlp/WeIsKj+0=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:de:47:2b:3c:ea:62:00:cd:dc:6a:f3:fd:71:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Nov 4 04:00:21 2025 GMT
Not After : Nov 5 04:00:21 2025 GMT
Subject: CN=b72e65a18de9b06f94fbe5f67cc18c01a5061327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:f8:01:e4:3c:70:de:d1:3c:9b:69:d0:f9:
f3:6b:21:af:9d:12:7f:43:9c:a8:b1:00:fd:fc:11:
5e:cc:8b:1e:4c:da:d3:6d:60:ca:54:94:f4:83:7f:
6d:b0:8a:a5:74:be:7f:de:f2:11:55:c7:f8:9f:44:
2d:b5:49:56:10:de:54:ce:06:bd:a8:4d:60:d3:7f:
15:1a:e7:76:cf:6f:f4:1a:81:16:f2:fd:5c:f1:e5:
a0:ae:5b:4a:9c:5e:c6:3c:de:c4:59:62:f5:80:ed:
38:a1:3e:5f:5e:43:b4:3a:b6:d9:e1:be:9f:d5:ca:
bd:8a:2f:f5:2f:e1:0f:17:b1:fb:30:77:d9:e9:08:
3b:70:ef:69:1a:7a:e6:99:4e:d5:82:f8:eb:a5:da:
71:53:2c:8e:9c:0e:b5:5e:f9:28:83:12:96:d3:23:
e4:5a:b6:fd:ca:63:d2:61:4f:0b:44:b6:66:2a:c3:
c9:6b:4f:f3:ff:f3:e2:d5:8f:4b:f3:b8:45:ed:3f:
16:df:b8:16:0d:51:76:d0:eb:b7:b6:df:ab:f4:49:
96:79:9d:94:7a:79:d6:99:ed:27:42:b7:91:5b:04:
1d:80:58:c7:f9:b5:78:f2:de:a0:47:a1:21:72:79:
0a:60:54:69:cb:cb:f3:f4:86:35:84:02:df:38:65:
69:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:65:A1:8D:E9:B0:6F:94:FB:E5:F6:7C:C1:8C:01:A5:06:13:27
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:27:2b:a2:9e:ae:f9:11:d0:53:50:23:5b:a7:59:94:6c:41:
c7:c3:74:38:cb:ea:f0:0e:a0:61:4f:bc:e7:02:22:4d:54:77:
3c:ae:b2:5f:aa:77:bb:65:2b:31:95:24:bf:a2:a7:34:e7:6a:
28:9b:f0:07:5a:93:a0:ea:fa:d3:85:0d:69:74:9d:19:10:5e:
71:ab:95:16:c8:e9:a4:29:57:c9:a0:de:5f:66:4a:df:28:cf:
e0:64:8a:bb:d2:69:13:97:67:7a:d0:e0:88:bc:97:cc:76:d1:
11:05:c7:b8:22:1e:d8:05:cb:e9:b8:08:90:33:24:1d:5b:f1:
d5:38:ca:9c:37:3c:b2:8f:1c:d2:06:75:cf:c1:40:a2:a5:e4:
0e:9b:1a:89:14:b9:c9:18:89:8e:44:9d:6b:4f:c5:12:56:9e:
6e:d7:5d:dc:a6:38:ad:f4:4c:68:96:86:3a:98:7c:7c:40:81:
c4:9a:a2:82:5e:59:5f:ae:ce:f1:d8:a5:be:81:55:8b:33:4e:
0b:4f:7e:4a:5f:00:63:55:fe:16:6c:92:1d:5e:50:38:96:97:
fa:fe:33:e2:29:ff:1c:de:ea:75:b5:49:21:40:e3:a4:f6:c3:
c3:4a:08:0b:53:e4:41:59:21:6c:35:cc:c4:d4:c0:53:26:ec:
0e:7c:d3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:02 2025 by rpki-client