Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier: niEEv/v3i8TKkZcypT+Q/hZUNekAr8QTiggIAN0QEx8=
Subject key identifier: D2:16:B4:D0:5F:6E:64:80:C9:50:31:A6:EF:7B:DB:F9:53:94:F6:1A
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial: 019A4E86468A4F763925E1EE117298BD4BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number: 0EA7
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: 8wOVbHV0VuavkHBoGaSmO5f1FG3iWXGkqXDhNPMbAeE=)
2: ejFgtEL_yvwBtcTkPUKqVp7iqdE.roa (hash: 91fqX0EGnVHzpPjrAaOzm7AgDnbWTA0eBRKoj2PIzpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:46:8a:4f:76:39:25:e1:ee:11:72:98:bd:4b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=d216b4d05f6e6480c95031a6ef7bdbf95394f61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:0b:20:e4:4c:a8:f8:2f:d9:f2:59:09:be:
20:d4:d3:69:00:1d:9b:7e:75:55:50:01:69:4f:1e:
e4:1b:5c:f0:4a:7e:f4:51:55:5b:4c:8f:fc:ad:6e:
f5:10:d3:c6:11:75:6d:53:0f:7a:aa:d0:1f:0f:2b:
69:3e:f3:76:4f:c2:18:93:f9:49:29:c7:5b:4c:73:
ff:52:62:f1:d7:34:20:c6:f1:cb:ad:e1:76:41:f1:
50:53:13:1d:92:2f:96:66:3b:f8:34:9e:fa:05:30:
65:4e:17:01:a1:31:e0:2e:1f:bc:89:30:0b:cc:0d:
ee:c3:ce:13:ed:80:f2:0f:4b:80:56:60:b3:d7:7a:
e1:ba:30:2d:e8:59:9f:6d:b9:12:51:c4:65:48:1a:
8f:51:92:9b:36:f2:3f:6a:8b:1f:d2:fd:30:58:f4:
ed:b1:82:6d:5c:ba:60:ca:b2:41:0a:41:c2:51:0e:
bf:54:73:45:d9:1c:90:51:c4:9f:a7:42:80:5d:81:
0b:0b:11:86:2d:d9:ce:d4:2b:db:7a:13:10:56:8c:
0e:ee:44:a1:dd:c1:c3:4d:be:f1:f5:08:e5:68:93:
dd:d0:41:e4:6d:dc:63:bb:9d:4d:a5:c4:09:2c:a3:
01:7d:28:ee:d4:fc:ec:61:ef:2c:a7:58:76:63:4a:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:B4:D0:5F:6E:64:80:C9:50:31:A6:EF:7B:DB:F9:53:94:F6:1A
X509v3 Authority Key Identifier:
keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:47:1b:89:da:04:37:97:68:b4:22:7e:d1:6e:7d:7b:4f:be:
b4:90:9f:97:7d:9e:2a:25:0f:1e:02:cd:1b:d1:37:55:96:09:
b7:8b:28:29:cd:06:09:81:d4:b1:d1:4d:14:29:95:a8:10:76:
bc:c4:05:c5:bb:de:31:a0:05:53:44:e7:ea:6c:99:35:57:5c:
d2:77:d2:ba:6d:38:2d:63:cd:95:13:e0:1c:15:14:6a:48:64:
65:7d:10:58:e4:c9:6b:67:20:46:d7:69:df:20:0f:8a:82:ea:
c6:a3:3f:b3:e8:b9:3a:c7:25:1b:f0:9c:7d:58:f3:58:7e:fe:
ad:d5:2c:5d:20:dd:7f:94:b7:71:4e:82:39:b5:5c:6e:a3:f8:
6f:ea:f7:0b:50:6b:b5:f0:0d:9a:95:c2:08:48:a9:29:e4:a4:
f7:ef:c4:58:67:e7:c5:0c:0f:f6:93:af:5f:e9:5a:8d:f4:f8:
20:90:00:2a:96:01:1d:88:a0:37:ec:f5:39:f5:26:5f:75:72:
80:1b:63:c0:c0:1b:ef:bd:ab:4c:ed:42:fc:1a:0c:50:88:c4:
c1:ad:b8:46:1e:53:47:b9:79:f8:f9:46:78:27:78:c0:20:42:
32:75:48:90:59:9e:97:9c:3e:c2:c9:05:f3:77:14:80:98:d0:
81:f5:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:14 2025 by rpki-client