Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier: tg2jywyEm6Kh+EOajPMT2uovNcTIDGPv3c8jzIxBKSM=
Subject key identifier: CC:51:6D:9A:E7:1B:23:1B:88:F2:B6:EA:AE:9F:56:B7:78:06:5B:1F
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 019A4F2B77DDB8856A0CB93DAF7E587925CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 14:00:40 +0000
Manifest this update: Tue 04 Nov 2025 14:00:40 +0000
Manifest next update: Wed 05 Nov 2025 14:00:40 +0000
Files and hashes: 1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=)
2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: DMHWDNQA6NXxIbBYbCTIBKWZHEgm9fRT9pGoqdhnwxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:77:dd:b8:85:6a:0c:b9:3d:af:7e:58:79:25:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: Nov 4 14:00:40 2025 GMT
Not After : Nov 5 14:00:40 2025 GMT
Subject: CN=cc516d9ae71b231b88f2b6eaae9f56b778065b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:b4:aa:1b:2a:7c:1f:60:49:c8:04:11:2c:
c2:24:d8:21:50:2f:2e:0d:ce:71:b4:06:fd:f1:04:
39:42:ea:65:70:9a:c4:e1:45:5a:dc:34:7f:b2:92:
fd:ab:73:17:c1:06:d1:3d:8d:13:a5:a7:7a:fb:54:
7d:d5:76:92:a1:8c:1c:0b:f1:6b:f5:b3:d9:15:7e:
2b:ca:27:24:a5:41:c2:6b:30:93:ce:72:19:62:c3:
da:6f:dd:7e:72:3e:d2:ed:1b:85:e5:82:11:cd:d4:
a7:44:6e:5e:5d:a4:c2:0a:0f:a4:7a:6e:bf:9a:14:
ba:7e:b5:7d:f3:2b:31:2e:b0:d4:6f:3a:a2:e6:42:
ab:7a:4c:9c:59:0c:03:54:3a:a7:08:11:ba:46:f2:
6c:60:4d:a2:c6:81:6e:4e:a0:83:f3:d1:09:24:89:
ad:c6:c9:88:74:82:9f:c1:f4:ff:e4:12:c6:cc:85:
5c:00:bd:cd:85:72:8d:21:de:be:05:25:c5:1c:4b:
b0:eb:ab:01:04:37:a7:26:17:4b:4c:ae:14:ad:4a:
1e:ba:3f:a4:6b:51:86:32:cb:02:7c:ea:52:d5:a6:
d8:81:13:54:d5:24:e0:94:59:2c:9f:0f:f2:bc:b9:
05:13:a2:57:75:e4:25:a5:08:fc:df:bd:36:fd:f3:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:51:6D:9A:E7:1B:23:1B:88:F2:B6:EA:AE:9F:56:B7:78:06:5B:1F
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:66:19:8d:72:56:ae:1b:fa:91:fe:4c:4c:a0:dd:6f:9a:d8:
d8:91:f3:1b:f5:ab:8b:c6:8f:d3:3f:95:d5:f0:ec:64:cc:19:
46:cd:c8:bd:ec:fc:e4:8d:5b:73:50:0c:38:a1:19:d7:6b:fc:
52:3a:d3:1e:76:bb:60:d5:da:50:29:50:44:88:09:e6:09:c5:
e4:0a:94:4b:0f:28:ee:13:b9:1d:40:6f:8c:4f:f1:25:f1:60:
ff:b1:eb:23:a8:e5:ca:79:3c:ad:38:c0:dd:32:ea:54:c4:ab:
92:43:f0:1c:54:8f:cc:61:98:7f:72:5c:6d:d4:14:c5:c5:09:
e6:ea:9f:d1:a9:85:4f:89:be:73:5c:4a:2c:f8:52:e6:d4:d5:
06:08:25:e5:e3:e3:6c:84:82:e5:ed:f1:3d:04:ab:20:b6:ef:
83:8f:df:cd:ce:e1:13:55:56:ef:5c:9a:24:0c:89:33:3a:c7:
62:0a:fd:c2:24:33:b3:af:5f:34:06:9b:24:f5:65:a9:9b:c8:
a9:15:78:60:5c:c6:aa:98:0f:94:c3:5a:25:f7:8e:ee:ef:28:
c8:18:ef:91:50:f5:33:be:d3:74:a9:2c:c7:bb:01:1a:e9:49:
51:59:51:f0:cf:e1:e9:f9:27:8d:2f:ed:3b:8e:3c:2f:86:32:
0f:86:d2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:56:56 2025 by rpki-client