Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: NeFM1IPqxzbNVSRfnMsY/GeiaotySMscgTZXhK0lduQ=
Subject key identifier: EC:7F:B4:F4:7E:2B:A1:7F:73:3B:E9:AE:52:AA:75:D9:D4:ED:AF:D9
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 019A4EF47AAC8C2D17053E96437A9CDB313A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0AFA
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: 7XdSGfevcJJsevy7fOceWvja7nc.roa (hash: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=)
2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: Mc53Yw/IWjq8y9AKURi+kijf0J/pLWxBevhpQcTy9K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7a:ac:8c:2d:17:05:3e:96:43:7a:9c:db:31:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=ec7fb4f47e2ba17f733be9ae52aa75d9d4edafd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:d9:25:1d:5b:a9:fd:92:ab:d4:fa:d1:74:
ad:35:44:f9:12:04:f9:fc:ba:e6:55:72:d0:2d:07:
44:0e:28:b6:6a:06:5e:83:64:0b:67:d0:bb:dd:b6:
18:16:92:a7:14:5a:82:77:43:1a:d8:c0:a1:20:84:
ec:a6:68:7b:0a:2f:98:cc:c0:52:96:40:33:24:02:
fc:fe:89:8f:1f:71:9f:b4:b7:f6:25:4b:27:a0:41:
8f:42:1a:1d:da:73:7e:b1:9f:47:e3:9c:2f:e0:07:
60:48:a6:57:a0:81:74:c6:40:98:1a:fd:a9:01:8c:
b1:7d:82:8b:85:de:93:70:de:19:9e:f5:ad:1d:77:
1a:b5:9b:25:5a:7a:24:8d:fe:de:fa:93:5e:dc:ae:
00:49:84:65:56:3c:b2:b9:18:bd:bc:e6:e8:2e:86:
57:61:56:dc:21:19:a3:ba:13:7e:23:92:4b:9e:29:
cb:76:63:f4:09:17:98:1b:76:1d:d2:f2:8c:68:f0:
0b:d9:20:a3:b4:94:16:3c:1c:46:05:bb:81:6d:44:
09:6f:b1:4d:73:51:31:3f:3e:3e:b3:0e:ec:ef:87:
c2:62:d2:30:1e:62:f4:09:57:52:b9:47:16:bf:e8:
6f:49:af:23:2c:20:67:32:37:63:70:9d:12:98:f3:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:B4:F4:7E:2B:A1:7F:73:3B:E9:AE:52:AA:75:D9:D4:ED:AF:D9
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cf:61:af:fd:85:17:77:8e:db:ca:0f:fb:27:82:c3:14:f6:
c4:eb:19:34:6a:41:39:2d:fc:ff:52:50:f8:7a:e0:3b:c5:a0:
e0:87:ae:7f:ff:57:05:66:0a:89:d8:41:ff:19:29:fc:99:0f:
79:5b:6b:49:2e:4f:2b:2e:2d:05:2b:4b:ec:69:dd:58:42:11:
44:e6:f5:6e:77:75:0a:7d:72:01:f4:cd:9a:e2:42:df:e5:e9:
53:5d:f7:7f:e1:28:7d:5b:77:86:45:ef:c2:05:13:00:19:79:
87:6b:0d:7b:67:7e:9c:5b:47:44:23:4e:70:67:f7:43:bb:a0:
f7:58:11:50:46:41:8b:b1:26:ec:f5:72:16:f9:fa:0e:ba:19:
52:22:7c:27:b3:c1:5b:15:58:50:09:df:64:73:03:58:39:73:
5d:23:4c:16:83:90:95:13:a2:d7:3c:f5:f5:8c:f2:eb:25:91:
b0:85:bd:1d:2c:8f:06:1e:57:43:5d:69:58:68:a2:82:7b:36:
1c:05:0a:33:ab:78:ed:62:db:99:66:4b:b8:5b:2c:60:ba:ca:
25:75:ff:21:35:ee:42:d4:75:f0:31:4f:e3:6a:3d:62:f2:6e:
8e:84:2b:b8:39:83:15:0c:8f:b6:52:45:e8:f4:ca:c6:48:9c:
96:3b:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:57 2025 by rpki-client