Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File: e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier: sWdxAOyayfNdazIbmgHd57alKA3/xfI9fogtrcQj2uY=
Subject key identifier: D7:A6:37:D1:65:DE:2D:77:31:91:2B:73:BB:70:46:EE:0B:FE:00:94
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial: 019A4EF51586BBA21A4B50A004E5778135A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number: 06FD
Signing time: Tue 04 Nov 2025 13:01:15 +0000
Manifest this update: Tue 04 Nov 2025 13:01:15 +0000
Manifest next update: Wed 05 Nov 2025 13:01:15 +0000
Files and hashes: 1: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (hash: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=)
2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: 2QtcHX2ADOjt4QghLUpkHWRyK7cPkWbGS7N+ydE38r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:15:86:bb:a2:1a:4b:50:a0:04:e5:77:81:35:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Validity
Not Before: Nov 4 13:01:15 2025 GMT
Not After : Nov 5 13:01:15 2025 GMT
Subject: CN=d7a637d165de2d7731912b73bb7046ee0bfe0094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:f7:4b:0f:10:f3:32:4a:cf:3d:76:19:6d:
f5:e2:b4:ac:f7:c9:44:e0:d8:d7:84:3c:7b:6c:b1:
59:04:f6:1b:91:fb:4c:00:88:ca:60:d1:9f:94:a0:
82:c5:59:03:98:cf:ee:59:e2:af:a2:f9:9b:5f:2b:
30:8e:ba:68:0b:b5:37:06:56:00:ad:e6:0a:f4:ca:
33:3e:40:65:c8:53:1b:b3:35:ab:6d:69:12:3e:82:
b1:21:f9:7f:3f:38:ab:1d:60:18:be:cb:3c:a0:5d:
8c:09:76:dd:be:59:06:4e:40:8c:cd:d2:89:85:a1:
48:27:a8:46:5b:ef:8c:78:ae:dc:3e:df:a8:37:d8:
c9:02:4a:d0:9e:fe:54:92:92:c9:03:22:07:cb:a1:
02:79:af:4e:a8:bd:bc:22:00:c8:22:3d:f4:40:22:
89:eb:47:7b:50:cc:69:e9:d6:39:54:27:69:dc:d1:
04:c6:48:74:38:e4:7b:79:60:21:ff:37:0b:b1:4e:
73:99:d8:83:c4:6a:c6:88:d3:8a:fc:af:3c:14:58:
77:a6:48:78:9c:be:c1:8a:7a:c2:6e:fa:c1:91:d1:
94:a0:00:d4:58:5b:7b:d1:be:7b:c4:7a:a9:f6:00:
d6:95:cf:f3:d3:27:e7:99:b9:5a:5b:ff:84:e3:8a:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:37:D1:65:DE:2D:77:31:91:2B:73:BB:70:46:EE:0B:FE:00:94
X509v3 Authority Key Identifier:
keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a3:10:59:48:4e:a6:06:db:d8:10:ef:dc:20:5d:50:bf:71:
f3:55:9c:e1:37:57:1d:90:17:65:a6:8f:b9:7c:91:04:0a:32:
88:79:c7:90:7a:3d:52:86:73:7b:9d:ca:49:2a:20:6c:79:91:
cd:60:58:1c:67:d6:4d:e7:41:39:2e:bd:c4:06:04:3a:bb:ef:
74:00:f1:2a:df:85:17:03:31:88:be:83:82:74:bf:71:29:8d:
39:c7:0c:b0:24:a6:1b:8f:4a:b5:80:d0:97:a0:0f:bd:a0:5f:
54:20:da:b2:de:c9:fb:78:9b:81:6b:77:cc:a3:0d:44:1e:aa:
09:de:67:0e:db:93:1f:06:70:71:5d:e1:98:ea:50:7a:c4:6a:
19:ae:26:b9:bf:f2:d1:e1:d5:fd:74:52:4e:4f:ec:c1:ea:a5:
c3:1b:2e:89:7b:f0:30:79:94:c9:ab:1c:30:55:00:f6:2c:fe:
a2:b2:9e:86:b6:18:96:bf:0a:a2:0f:6c:8a:01:06:aa:a3:4c:
41:f6:5c:7d:3d:e0:f1:5c:a4:8e:02:be:92:3a:d4:55:66:06:
fc:f2:77:bf:12:05:14:d2:9b:d5:f5:97:84:6c:1a:05:09:98:
9d:94:57:9c:3d:70:c7:f3:73:6d:f2:ae:43:12:b9:b4:12:14:
6f:ae:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:22 2025 by rpki-client