Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: NjeDkcxIbcpq/ZsrTb97a55tjTaBHVQqG8+aItyEKxc=
Subject key identifier: 7B:C9:78:1C:48:62:4B:C9:5F:FA:E2:C6:90:F8:7B:61:54:D2:68:42
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 019A4E5005E664BD6C6A0FC589D53229AE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 13BA
Signing time: Tue 04 Nov 2025 10:00:58 +0000
Manifest this update: Tue 04 Nov 2025 10:00:58 +0000
Manifest next update: Wed 05 Nov 2025 10:00:58 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: k2BLphrjz2XAkS+HlUBYj3v77ET66nNW96LMjgrInv4=)
2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:05:e6:64:bd:6c:6a:0f:c5:89:d5:32:29:ae:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Nov 4 10:00:58 2025 GMT
Not After : Nov 5 10:00:58 2025 GMT
Subject: CN=7bc9781c48624bc95ffae2c690f87b6154d26842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:82:be:74:f8:8a:29:74:3a:af:81:82:b7:
f4:63:4d:da:d1:2f:1f:93:fb:20:97:4a:24:35:52:
96:0b:dd:cc:61:77:25:6b:35:14:b7:17:c6:fd:57:
5a:7a:4c:3b:e2:34:46:a1:b4:d8:4b:ef:d2:ed:6c:
7d:a0:32:d1:fc:02:23:00:8e:36:df:01:86:ba:5a:
e5:cb:d0:99:5e:88:d1:30:25:94:45:ea:bf:13:f3:
4f:cc:17:2d:18:a3:5b:21:13:63:47:5a:96:81:79:
f6:3a:aa:5b:bd:07:bf:53:35:89:62:e4:8f:b4:88:
df:90:25:14:41:87:f8:d5:dd:ec:6a:1c:28:32:8f:
78:05:ee:2c:c3:1a:1f:a2:ab:99:ae:c0:f8:23:e4:
37:52:54:1b:a5:3b:77:b0:7b:9a:90:42:63:e7:f5:
74:37:cd:f8:e1:c4:31:7f:fb:bd:b7:38:b1:18:e2:
6b:bb:8e:de:09:ab:96:31:bf:36:99:d7:62:a4:1a:
42:b5:3f:7a:48:3a:89:65:ce:53:20:52:5f:2b:6f:
e1:50:f3:df:10:f7:b2:11:5f:74:8d:f8:a2:cf:80:
24:e8:bc:09:58:24:b7:a7:e0:d7:75:e5:55:53:45:
20:7e:31:49:dc:f0:ba:2c:eb:1d:99:7c:d7:46:3e:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:78:1C:48:62:4B:C9:5F:FA:E2:C6:90:F8:7B:61:54:D2:68:42
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bb:06:0c:99:71:ec:cb:2d:68:b5:ec:bb:56:e2:3a:24:c7:
c6:2b:df:fc:a2:82:31:e5:b3:2c:00:4e:1e:ae:bc:64:4b:3f:
5d:62:cb:aa:14:c6:e6:ad:fb:78:71:0f:51:14:40:36:b4:c6:
e9:f3:58:26:0a:4d:2c:12:7b:69:fe:99:67:35:b2:6c:5c:7f:
49:66:fa:aa:97:b1:64:b4:51:7e:2c:d1:6d:bc:c9:fb:cc:5c:
59:61:cd:d2:e2:0c:70:23:c9:4f:5f:aa:0a:41:a2:70:ac:00:
08:be:f7:00:d9:e5:c5:44:55:48:06:42:8b:a1:d6:11:22:e4:
42:9d:45:67:0f:fb:57:6d:77:c9:d0:04:aa:8b:cf:63:a6:29:
de:f4:e0:b2:b5:a5:db:24:75:4b:c8:7e:40:8a:63:1d:da:07:
82:a8:d1:87:0c:52:f8:39:33:18:e9:41:9c:05:2f:52:5e:de:
9c:e3:56:05:ea:0f:69:3f:92:76:89:76:29:ff:f7:4b:bb:90:
59:eb:2f:c1:68:9d:38:d2:e3:9c:40:2d:ac:2b:b3:c1:65:0a:
89:49:49:ea:c1:8e:b1:87:c2:31:9d:88:a0:8f:9d:c3:68:ed:
fe:c0:ec:2b:11:f4:aa:71:7b:a5:6b:b0:2c:0f:c2:3a:ad:7a:
87:81:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:20 2025 by rpki-client