Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: +qQW7aDHsW6A82b751uV/34c3xHH1qjXZ9GZpuxurSs=
Subject key identifier: B9:F9:60:85:08:77:07:06:59:4E:03:DE:03:95:27:BE:80:10:E3:5C
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 019A51BE163614CC31C18D47D98F3A8D848F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0C00
Signing time: Wed 05 Nov 2025 02:00:03 +0000
Manifest this update: Wed 05 Nov 2025 02:00:03 +0000
Manifest next update: Thu 06 Nov 2025 02:00:03 +0000
Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: V5GFSRsdVK9+F5ZkIefKSQx1v11YrKGG3F5tOCu04/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:16:36:14:cc:31:c1:8d:47:d9:8f:3a:8d:84:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Nov 5 02:00:03 2025 GMT
Not After : Nov 6 02:00:03 2025 GMT
Subject: CN=b9f9608508770706594e03de039527be8010e35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b1:10:f9:17:3c:57:9a:36:dd:2e:62:49:92:
3c:4e:53:33:e8:35:34:9a:86:d9:b8:96:90:d9:86:
8c:df:32:66:26:0a:75:84:08:31:6e:c3:f1:44:f1:
48:50:2d:ca:f7:22:e9:0f:ba:dc:ae:14:01:5e:0d:
42:b5:dc:84:dd:e7:5f:a0:99:74:eb:e6:02:0e:ae:
f2:fd:ec:60:d6:6f:74:ff:6f:bc:34:8a:db:50:28:
88:db:fc:2d:48:f8:ff:4b:52:89:5e:9c:56:76:90:
cc:c4:c4:72:72:f9:ae:7d:b7:95:48:e0:e0:2f:eb:
f0:b8:6f:5c:39:8b:b2:e0:7c:de:a2:de:9c:f3:6f:
71:6d:54:90:1b:74:ea:e5:f4:f3:4c:e8:05:f7:6a:
5f:63:96:a7:bc:12:94:57:c3:ee:ec:83:3d:c8:c6:
d5:46:c5:9d:a6:9e:a6:a7:65:b6:7a:20:de:bd:29:
16:88:a4:3e:1b:07:7b:d0:ca:56:13:73:8b:05:01:
12:9f:44:b4:b9:73:00:ab:6c:ed:23:32:25:49:ac:
14:ef:97:76:a5:a9:87:6d:d5:a9:97:07:7c:4b:98:
e6:d5:70:2c:c3:cb:b1:7e:8b:18:54:8a:73:d7:be:
af:c8:7e:17:b5:3d:d8:7d:cc:ff:c8:e4:d8:17:1c:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:60:85:08:77:07:06:59:4E:03:DE:03:95:27:BE:80:10:E3:5C
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1a:68:65:c1:f8:70:7c:4b:b2:93:31:40:21:36:c9:cc:8d:
a2:7a:04:85:0d:a4:fa:bc:f7:aa:fd:e6:57:8e:18:a8:8b:56:
8a:ce:c6:14:98:2d:36:aa:3d:63:cc:1d:4a:f1:64:f1:87:d3:
1f:3d:50:51:dc:ad:d1:cc:7e:0c:1d:6d:e0:bd:20:c2:e4:55:
5b:93:66:b6:d8:55:87:29:3a:3a:0b:28:15:70:ab:77:33:8a:
14:4a:96:17:11:8d:80:2e:5b:fa:8b:61:99:ac:b1:d3:53:78:
01:c4:82:b9:75:84:1c:e3:05:09:51:66:f7:b3:25:87:07:31:
31:39:ec:cb:f7:78:f7:6f:b3:e7:7c:29:57:fe:4f:73:4f:ba:
69:84:5d:39:55:44:56:94:16:cc:0d:de:72:3a:87:23:b3:8c:
ed:84:42:f6:31:b1:17:ae:66:17:b9:ed:cc:2c:68:ee:57:4e:
92:85:c8:b3:c5:01:a0:79:85:84:ce:6e:f4:c0:86:55:84:76:
85:d7:a2:cb:f0:6e:0f:c4:21:81:a2:cf:53:3b:22:ea:10:5f:
09:f9:35:5f:7d:2d:09:1f:b5:90:3b:ef:54:4e:1a:37:d9:f8:
4d:ac:98:54:d1:47:ab:b0:bc:be:5e:8c:1a:53:70:e1:a1:34:
61:3f:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:53 2025 by rpki-client