Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File: 51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier: chBRP2z+8V61n8REInRBbOzKeIkIa+Xiy32RW+cvKLs=
Subject key identifier: 21:B0:69:D8:11:98:0B:BE:39:DC:83:57:0B:EC:95:AC:97:FA:1F:0D
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer: /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial: 019A4E4FD9A34BB88DA6ABC3A4AFB9828806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number: 06A7
Signing time: Tue 04 Nov 2025 10:00:47 +0000
Manifest this update: Tue 04 Nov 2025 10:00:47 +0000
Manifest next update: Wed 05 Nov 2025 10:00:47 +0000
Files and hashes: 1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: tssNbIS6sH5+MzICLGxTgKzK6PXeKE4os3Yg0EcKo9g=)
2: Ylfj2CG1V0DaK4f8uH_BBUtoGWA.roa (hash: CAUuMYHSplNovMOYBe0Qjx/057sd/Jrw0wK6ui3RBo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d9:a3:4b:b8:8d:a6:ab:c3:a4:af:b9:82:88:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Validity
Not Before: Nov 4 10:00:47 2025 GMT
Not After : Nov 5 10:00:47 2025 GMT
Subject: CN=21b069d811980bbe39dc83570bec95ac97fa1f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:22:76:7d:b2:2e:26:dd:0f:15:15:6e:a4:
e5:4c:66:ec:88:7e:d0:dc:55:65:73:bd:f8:ec:25:
68:e2:8b:8f:82:5d:f1:6c:53:e7:26:ab:9c:09:64:
e1:2d:fe:5e:45:53:6a:05:05:57:32:09:b1:47:77:
24:1e:e6:4c:3a:16:8a:9a:68:93:97:82:bf:01:a1:
8e:ca:10:44:ca:ce:36:e9:81:59:8f:74:dc:72:bf:
80:5f:8b:c6:cc:3c:e0:e6:6b:45:5d:8a:7e:bf:57:
6f:1e:cb:77:cf:2d:dc:c5:fc:a9:19:32:b5:29:69:
2d:0d:0d:25:35:c9:9e:e4:9b:12:14:e8:a9:46:d0:
22:90:b6:81:44:3a:2e:93:b7:8c:63:48:e8:67:f4:
d2:e5:05:11:1b:a5:b9:39:fb:e4:4d:8a:f2:c4:2d:
b0:10:c8:09:f5:bd:82:f6:6d:2e:99:35:0a:41:64:
8b:23:8d:f1:5a:8b:23:32:cb:90:da:4d:a4:8c:67:
9b:be:76:66:42:61:aa:5b:f5:f9:53:ff:6d:44:1d:
58:8d:86:a9:00:3f:5e:e7:59:9f:b1:0b:b4:29:00:
ed:e8:83:af:3f:62:5e:d3:8d:e7:1f:ec:82:5f:f6:
63:da:5c:1b:22:8e:5e:f2:9b:11:93:9d:37:d8:af:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:69:D8:11:98:0B:BE:39:DC:83:57:0B:EC:95:AC:97:FA:1F:0D
X509v3 Authority Key Identifier:
keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:12:67:b2:7e:a0:1c:45:e8:42:fc:ed:4b:d7:e4:50:6f:af:
e2:95:e9:64:5f:bc:32:86:03:f6:08:6f:01:2a:70:cd:29:c5:
42:61:d7:31:66:7e:1f:5b:2a:67:2d:41:d8:2a:fc:26:66:f9:
14:a1:76:25:32:07:81:b6:a4:88:ee:fe:23:66:cf:48:12:41:
c2:90:8e:08:c9:3e:e2:ba:5c:3c:c2:1b:b4:56:8d:1f:ba:74:
b0:7f:be:62:b8:e3:d7:24:34:03:4c:3c:58:0a:6b:f3:01:0a:
ed:02:3a:2a:d5:29:43:7c:f0:01:9a:dd:46:f2:47:7c:fc:46:
41:1d:11:62:e8:92:8f:4c:56:86:e1:8b:51:0d:c6:0b:26:33:
97:8c:85:08:bd:8b:31:c0:cb:57:23:ef:dd:27:1a:20:e4:82:
bd:23:1a:89:34:63:9c:a3:7e:04:06:c0:b6:39:83:05:5c:44:
18:15:70:07:d2:ed:d7:b4:88:2b:c9:88:9e:e7:25:52:f4:68:
d8:00:92:bf:a3:df:70:ff:6a:ba:4d:16:ed:88:4f:87:c6:ef:
b0:fb:59:30:02:65:a4:53:7c:12:d9:80:3e:92:4a:d8:f5:f9:
a6:f4:43:7b:aa:38:01:07:19:f0:6d:52:80:6c:4c:0b:1d:93:
ba:3e:72:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:19 2025 by rpki-client