Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: fo6jgCZHdbnknsxn1P9InrG47bsvd0TgaOHI+4I/fNk=
Subject key identifier: 50:4A:E5:2F:E9:CA:67:6D:D2:CB:4B:A0:16:B0:25:ED:23:A9:F8:6D
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 019A50E3E403D358E72EA999F235228D4373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 07E1
Signing time: Tue 04 Nov 2025 22:01:43 +0000
Manifest this update: Tue 04 Nov 2025 22:01:43 +0000
Manifest next update: Wed 05 Nov 2025 22:01:43 +0000
Files and hashes: 1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: i96e2chX+gKskEB9AOkbpzjUYKA+eDgKIGP5rNx625E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:e4:03:d3:58:e7:2e:a9:99:f2:35:22:8d:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: Nov 4 22:01:43 2025 GMT
Not After : Nov 5 22:01:43 2025 GMT
Subject: CN=504ae52fe9ca676dd2cb4ba016b025ed23a9f86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:98:a0:63:35:c4:02:84:3d:22:a4:e9:dc:
67:6e:56:ae:f9:f4:b4:00:33:5f:df:46:6f:cb:49:
3d:b1:4a:48:e3:43:f6:40:c1:66:ef:2e:cc:b1:88:
28:92:d8:f0:d0:76:38:f9:22:08:db:13:90:5c:d0:
5d:a5:bd:da:12:a2:0a:f2:e6:55:22:a4:cc:e8:bf:
c6:50:99:5c:85:31:bd:3d:3a:e2:4d:65:36:a9:18:
54:25:df:75:5c:06:5f:93:85:30:d2:c4:3f:be:ed:
41:6e:75:dd:c0:d8:ad:7c:a8:26:15:9a:51:9a:43:
f8:60:c8:b3:d6:4a:f8:f7:7a:2e:f6:45:6c:97:58:
7e:96:02:a8:7d:86:60:8b:d8:c1:74:70:59:cb:db:
1a:02:a7:f0:f7:3d:52:3e:0c:22:21:a3:fd:b7:3a:
61:ec:a8:c1:10:1f:99:78:65:6d:19:c9:5b:75:f3:
94:92:81:a4:9e:6c:e3:c4:94:e3:1f:83:63:01:04:
52:13:3e:0b:e5:a5:99:af:e1:b0:ba:c2:d4:af:55:
00:d8:d3:90:0c:a0:fa:99:32:f6:e3:ae:b1:c6:24:
ab:ab:8c:37:2e:ea:00:ed:f4:dc:c6:19:13:5c:76:
4d:0b:f7:b2:b7:5a:83:7c:57:d6:2c:a4:2f:b8:96:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:E5:2F:E9:CA:67:6D:D2:CB:4B:A0:16:B0:25:ED:23:A9:F8:6D
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b7:37:70:86:c6:b3:93:f8:13:dc:f0:c4:ee:7a:8f:75:ad:
c7:19:a7:4a:9a:3f:bd:11:6a:09:8e:e1:ab:18:06:ce:41:49:
c8:31:ed:f5:9b:fd:d3:0b:de:42:e5:b0:c9:fb:ba:47:45:25:
bd:ff:89:63:de:2d:4f:f6:5a:5a:42:a6:0d:34:8c:ef:f2:25:
88:2b:b8:76:1b:e1:c4:b3:b0:1c:be:6b:05:46:4c:dc:c5:e4:
93:52:ee:16:a7:28:f7:b8:8d:e4:d6:4e:5c:e5:83:af:cf:8d:
15:34:0b:42:1a:49:e3:2c:b1:15:30:91:99:d8:63:b9:3b:f4:
67:bf:4e:69:3f:f0:48:41:2f:b9:c7:b2:ae:b3:57:55:5d:16:
81:97:dc:c9:ba:8c:59:e0:7b:a0:ef:5d:39:70:53:b9:06:de:
12:f7:3c:c0:68:53:93:d4:26:47:2d:14:7d:30:81:3d:45:84:
fb:d2:77:00:95:56:fc:93:4c:54:e4:77:88:14:b8:a5:36:43:
bd:54:b4:0a:67:1f:d1:fc:f5:35:8e:d0:18:8b:10:bd:8c:f4:
f8:f4:a4:e5:1d:59:44:79:e5:fb:34:30:ec:15:ca:1b:a5:4d:
7a:72:b2:cc:03:91:f2:ae:04:cc:86:c3:76:66:fb:a4:6b:8c:
fc:a5:a0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:27 2025 by rpki-client