Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier: d4iFl8tUYNXrObCAuT6yNG3/Ulk8JBaS2MElZxnG4h4=
Subject key identifier: 1D:67:6F:D9:35:8F:02:53:B6:2E:61:D9:32:D0:82:B8:BC:DE:DA:49
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 019A522C2AE1C7C9DD41B815EFFB1CF8A794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number: 1425
Signing time: Wed 05 Nov 2025 04:00:17 +0000
Manifest this update: Wed 05 Nov 2025 04:00:17 +0000
Manifest next update: Thu 06 Nov 2025 04:00:17 +0000
Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: ZLPcHdyswECH549LQX1Vo7JF+SL5UVxbADksEI6kEUk=)
2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:2a:e1:c7:c9:dd:41:b8:15:ef:fb:1c:f8:a7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Nov 5 04:00:17 2025 GMT
Not After : Nov 6 04:00:17 2025 GMT
Subject: CN=1d676fd9358f0253b62e61d932d082b8bcdeda49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:c8:65:ee:b9:a3:8c:35:90:fe:a5:cc:f1:
89:0e:f8:aa:3e:ec:0f:f7:30:9d:d7:50:30:11:1b:
cd:f8:43:0a:f6:38:8f:3b:5d:26:19:6d:77:60:40:
5f:fd:e0:7a:16:60:1d:7e:e7:24:32:d2:74:89:87:
70:98:3d:ea:77:c4:b6:80:e5:4e:87:68:ae:db:17:
f9:e7:a0:50:62:87:96:9c:7a:02:23:c8:b9:5c:19:
36:5d:5c:5f:a1:01:47:86:c8:9a:a7:9b:43:23:00:
34:41:bb:bd:58:91:ae:09:01:6b:2d:9c:ae:29:b2:
a1:45:b7:42:c8:ba:2f:32:62:7c:56:d3:a7:da:b7:
2a:d4:54:b3:0e:1d:06:32:4d:42:47:79:87:d5:8d:
14:fa:ab:e1:43:58:b5:90:59:37:70:5d:1d:3f:af:
cf:9d:8b:15:ca:06:6f:2f:73:a9:ca:17:1f:eb:61:
32:7d:0e:62:b3:10:63:90:4d:86:7b:3b:55:a8:45:
7f:62:ca:5b:3e:28:a6:f5:9e:e9:60:3f:de:59:77:
f0:a4:56:07:db:1c:8e:dd:79:15:e6:a7:a1:8c:87:
1d:40:16:93:6c:ac:87:c2:6d:7c:43:9b:b2:6b:9d:
68:c4:df:76:1f:bc:71:71:03:21:50:70:6d:7a:98:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:67:6F:D9:35:8F:02:53:B6:2E:61:D9:32:D0:82:B8:BC:DE:DA:49
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:05:9a:1f:b9:ea:0d:a6:2e:b3:ce:f5:a8:47:83:8b:05:67:
53:84:01:7f:45:2b:a0:01:58:c4:dd:bf:eb:bc:1d:1c:a6:b9:
7c:12:45:ab:52:39:d6:b7:88:f7:a7:51:85:4a:a1:15:39:55:
1e:79:ff:65:af:b4:a0:85:74:ec:b7:4e:fb:87:a3:de:d9:e2:
c2:2f:38:86:a6:f2:50:7e:74:a7:dc:a3:ad:33:4c:db:45:f8:
eb:84:28:fb:2e:6d:a6:50:f0:fd:81:ad:3b:00:a3:0d:0e:5f:
4a:d9:19:68:07:5b:1d:e8:d5:ca:38:ef:0c:ef:11:74:2a:af:
dd:3a:48:6c:94:c1:ab:c5:e9:58:5b:90:a1:d3:11:38:c5:62:
50:27:3b:51:16:a2:00:a4:70:4c:ab:3f:dd:7e:7e:2c:50:4c:
e0:72:e9:24:cc:3d:f0:0d:a4:fd:c2:b8:79:c9:62:23:56:b8:
f9:0f:29:53:28:90:7d:8e:6c:41:31:45:50:69:67:3c:21:bc:
41:ce:90:f7:4b:12:11:19:d9:fc:93:a6:21:a5:44:8b:67:e6:
9e:fb:12:63:00:11:ed:7c:e7:f3:59:ca:f0:37:59:00:d9:82:
36:90:66:29:f1:b9:f3:2c:af:8c:b9:67:92:0b:57:b7:63:68:
27:6d:79:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:08 2025 by rpki-client