Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
File: En6fnV_UXaAQaVzEISr35nt7NI8.mft (raw, json)
Hash identifier: Yn2MsfpE9J8q57zSltSJqj2WUQ7kdcbfyKTr/kBI+u0=
Subject key identifier: C7:5E:EA:9A:3E:73:C9:D6:3D:B5:A3:94:7C:78:A7:B4:EE:AF:3F:AD
Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Certificate serial: 019A4E86615BD899A71D5E6DE0FABB50D0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
Manifest number: 128D
Signing time: Tue 04 Nov 2025 11:00:20 +0000
Manifest this update: Tue 04 Nov 2025 11:00:20 +0000
Manifest next update: Wed 05 Nov 2025 11:00:20 +0000
Files and hashes: 1: 7chXrCB-kcx4BDbNvUre62zCVs0.roa (hash: kM2S2XstoTcg0W9WF7loN86FbRs2E6G/NWJAtjB1G7s=)
2: En6fnV_UXaAQaVzEISr35nt7NI8.crl (hash: fxKkrawjVdBj0ci8R3J7F+mfRaC+Mgz92ASgN668Rgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:61:5b:d8:99:a7:1d:5e:6d:e0:fa:bb:50:d0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Validity
Not Before: Nov 4 11:00:20 2025 GMT
Not After : Nov 5 11:00:20 2025 GMT
Subject: CN=c75eea9a3e73c9d63db5a3947c78a7b4eeaf3fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:d6:e1:15:57:36:08:3c:9f:8d:25:01:42:
ed:e9:f3:a4:f0:4d:e4:28:94:cc:35:ad:20:99:9e:
07:ec:a3:c3:48:5d:3f:b6:06:36:d1:1c:16:3d:b1:
f4:39:d8:a3:1b:4f:d5:cb:9a:c6:16:4a:4a:03:4e:
03:65:4a:dd:8d:8e:c3:3f:27:05:b9:89:72:27:81:
43:51:92:13:4a:a9:fb:28:8b:48:4a:bb:ba:43:fc:
d2:b9:14:d0:64:9f:19:13:97:34:fb:8e:74:94:83:
2c:96:ea:2f:77:ae:79:ff:5f:bd:de:cb:9b:81:46:
cf:85:ff:db:37:b7:a4:29:e5:3a:df:b2:98:ca:44:
27:b3:d9:dd:b9:1b:2f:bd:f9:78:4e:56:aa:63:dd:
a6:1c:7f:3f:83:92:a6:c2:e2:bc:1b:40:9a:73:62:
d4:b4:f7:43:a7:08:6b:6d:05:0f:c9:a3:8a:d3:a8:
80:8c:8d:bb:75:2d:d2:35:30:05:bc:7e:b0:74:cd:
28:e9:c7:3b:a1:6d:41:c8:02:ff:90:20:83:ad:41:
88:b4:46:9b:03:cb:f5:9f:fc:9d:6f:bc:87:a3:21:
c1:db:e3:56:2d:6c:01:ac:11:6a:d2:25:a0:f2:d1:
32:29:9a:00:5b:48:3c:72:fe:50:ba:42:13:83:df:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:EA:9A:3E:73:C9:D6:3D:B5:A3:94:7C:78:A7:B4:EE:AF:3F:AD
X509v3 Authority Key Identifier:
keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:53:19:70:d2:fa:21:55:b7:a8:65:e0:de:68:84:a8:29:
87:f5:08:88:39:f3:af:56:6b:c7:29:b6:9d:b1:81:e7:64:3e:
37:0c:e2:69:37:c7:55:16:a8:6e:60:71:04:90:4b:ee:6e:50:
03:a6:d3:6d:c3:33:30:69:08:ad:b3:53:7a:08:d6:ce:8a:65:
19:e5:a5:3b:d3:df:a8:5a:96:b1:ec:26:dc:38:71:cb:bb:e6:
cf:ba:13:79:4e:a2:6c:88:7e:8b:53:e2:a1:cb:e9:47:58:b1:
5e:de:af:cc:30:03:68:64:bb:0d:db:99:b4:6a:b6:9d:1c:03:
0c:90:31:bb:c2:05:cb:2b:e7:76:58:1c:07:28:ad:93:46:3f:
9c:95:02:36:3a:43:29:2a:2e:b7:4c:98:ff:44:50:cc:75:0b:
99:e0:d7:b9:58:6b:52:6b:36:a5:2a:9d:02:d4:2d:36:fd:59:
9d:07:85:79:55:fa:2a:9d:11:42:d0:fb:bc:49:79:32:41:88:
b2:d5:cd:72:86:c3:20:a9:78:1d:cc:ae:da:17:2f:db:44:e4:
1e:98:84:ee:03:7a:d6:95:79:cd:ba:80:db:62:b1:d7:43:09:
e2:50:6c:ec:c7:ae:42:d0:a2:f7:67:46:0d:4c:87:2c:89:e1:
a0:50:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:03 2025 by rpki-client