Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier: wm87d71QNrowxc/S1Gv+3RRqBt6jMbhIbKzU9b+J3zw=
Subject key identifier: EA:BB:5D:4B:05:0A:1A:FA:9B:EB:00:76:2E:11:37:F8:56:EC:2D:5F
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial: 019A5119ECFD5705BCF67532F2F4725CF79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number: 0703
Signing time: Tue 04 Nov 2025 23:00:44 +0000
Manifest this update: Tue 04 Nov 2025 23:00:44 +0000
Manifest next update: Wed 05 Nov 2025 23:00:44 +0000
Files and hashes: 1: Ypuf3qV0JE2AXfUrk2eNRiGtQN0.roa (hash: AxG4SgT0VS5arc9FHux7pFhrFyFYGK0/0AgX9zPeSBE=)
2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: dtpreF2Y6wGaSKlXl4EeFFo4g2EocwuZB2fAmucaiOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ec:fd:57:05:bc:f6:75:32:f2:f4:72:5c:f7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Validity
Not Before: Nov 4 23:00:44 2025 GMT
Not After : Nov 5 23:00:44 2025 GMT
Subject: CN=eabb5d4b050a1afa9beb00762e1137f856ec2d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:f3:d0:64:dc:1d:e7:29:c5:4d:32:ed:a4:
22:52:d2:22:43:43:7b:03:ad:62:e2:4b:91:f7:c7:
7b:c2:d9:1a:87:31:09:8e:c8:1f:87:18:1e:9f:56:
94:8f:74:c2:bb:e6:1d:06:93:ed:be:ee:82:1a:90:
7c:08:fc:54:33:5c:4c:ac:41:a2:a4:41:9d:8e:36:
d3:b4:22:e8:de:2b:65:d0:f4:6f:45:37:af:1e:a2:
11:4f:76:a9:72:7b:6f:a4:aa:16:ed:f5:57:47:91:
63:8f:22:45:2d:dd:45:ad:c6:9d:71:4d:aa:78:1a:
4e:ab:b5:c6:16:a2:b8:c3:70:3f:60:d3:46:32:ac:
56:bb:79:62:17:95:58:27:c7:fe:ff:b5:b1:f1:72:
f9:bd:f9:6c:1e:1c:62:e0:47:01:3d:bc:55:63:7c:
f3:44:75:a4:f9:b7:c3:be:4c:52:61:ab:2a:d2:e3:
72:0b:80:45:bd:49:9b:87:f1:6f:ff:59:e1:17:30:
1b:2c:21:d6:2a:04:93:9d:38:64:29:29:6a:7e:c7:
f2:28:40:3d:33:6c:f0:19:a1:ac:57:58:d1:e1:3b:
b7:a0:6a:63:6f:e1:89:04:68:57:cb:b7:97:3e:f1:
01:e7:3e:8a:1f:2a:57:29:7c:85:f4:80:a2:3b:0e:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:5D:4B:05:0A:1A:FA:9B:EB:00:76:2E:11:37:F8:56:EC:2D:5F
X509v3 Authority Key Identifier:
keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d9:8e:b7:0c:28:9e:af:79:f2:58:7b:05:a8:6c:6c:11:5e:
f3:99:b2:f5:61:7a:d9:88:48:a3:d4:bb:81:8d:9b:69:4b:13:
6a:f8:52:45:1d:e4:bf:74:5c:38:07:b0:c3:8f:15:63:3b:12:
18:7f:9a:29:be:f3:41:2f:70:ed:4d:7b:e8:fb:54:74:13:1c:
70:70:29:37:6c:c6:ac:e8:d1:70:aa:d5:4e:28:b8:98:e0:a2:
fc:63:70:41:a6:d7:be:82:0f:12:34:d8:a7:42:bb:ef:01:b2:
73:b0:47:48:87:ce:35:2d:00:80:9e:94:6e:ef:78:75:97:f5:
bc:76:5e:a7:b5:80:72:a0:7b:83:37:d0:65:91:e7:1f:77:35:
0b:4f:9a:1a:d8:43:55:60:93:0a:c6:cf:db:24:8e:f9:60:65:
7e:87:c4:7a:06:48:7b:af:9e:76:39:38:04:47:95:b5:1b:fe:
4f:d6:48:62:2e:38:af:67:ea:c1:80:5e:71:14:d6:a6:22:62:
52:15:10:e7:95:c5:db:5c:48:55:95:f3:c6:25:ef:e3:37:ab:
3e:ee:f3:d3:35:99:4b:66:21:29:4f:82:47:77:26:f5:95:8a:
70:70:ba:06:61:ed:4d:ce:2d:4d:ad:50:5c:82:c0:0b:88:20:
59:32:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:34 2025 by rpki-client