Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File: V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier: JVEK5p1LLcn01HQGESzFSdPOviDw3w8B/I3YLFIZnyY=
Subject key identifier: B5:9E:CC:64:00:9C:FA:95:E3:0A:8F:05:5C:9D:D5:E2:54:55:C9:80
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer: /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial: 019A0259757ACC24822DE57902647FABBD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number: 12CC
Signing time: Mon 20 Oct 2025 16:00:08 +0000
Manifest this update: Mon 20 Oct 2025 16:00:08 +0000
Manifest next update: Tue 21 Oct 2025 16:00:08 +0000
Files and hashes: 1: K1RXDd41ejHM6gE_h4XPr9eqXqg.roa (hash: HFPOwF7yl1DzvJdGJnqBFfDZ3/PqP2JlTX3PgCcBwh0=)
2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: IJIA4X1Q3Bu6ORsrDt3zljvZg7XBFT+xDD+LLkbRRew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:75:7a:cc:24:82:2d:e5:79:02:64:7f:ab:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Validity
Not Before: Oct 20 16:00:08 2025 GMT
Not After : Oct 21 16:00:08 2025 GMT
Subject: CN=b59ecc64009cfa95e30a8f055c9dd5e25455c980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:78:3f:ec:09:13:9d:63:a8:9b:19:a1:fc:
17:22:0a:7e:30:f8:cd:28:b8:f0:f6:4f:8b:76:97:
99:b2:fb:dd:0d:2d:a9:7f:02:ae:43:b4:f2:64:21:
ed:8a:5a:6f:7c:99:33:83:c7:5c:a3:2d:7e:76:fd:
ef:7a:5f:86:46:0c:be:42:a9:f9:59:9d:e4:5e:95:
8d:30:04:30:82:a9:ca:a8:56:b9:b0:26:ec:0d:fa:
c2:98:f3:41:04:d0:18:26:e0:3a:46:c5:9f:2b:f7:
88:29:88:33:a4:ac:7b:7b:ab:55:57:97:83:7f:e0:
90:2b:09:30:6e:56:11:5f:35:71:47:18:f2:42:21:
f4:2f:d5:0c:6b:c5:af:e2:b7:80:c0:24:89:bd:68:
05:a5:90:08:31:ff:e3:1e:49:3b:8f:48:75:94:fb:
6c:09:24:52:e6:0a:2d:df:91:7c:af:1f:65:d5:51:
c1:28:66:19:b6:34:ae:64:dc:b2:c6:7c:9b:5c:18:
d8:dc:23:a4:9e:65:1e:2c:c9:02:c2:92:7a:a4:28:
78:52:34:a9:de:e0:d8:42:47:a6:34:ef:30:b4:3a:
99:d0:bc:4e:96:66:c2:2a:68:49:b1:90:6e:6b:eb:
23:11:6b:a9:69:09:3a:bc:d6:21:7d:9b:34:4c:b1:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:CC:64:00:9C:FA:95:E3:0A:8F:05:5C:9D:D5:E2:54:55:C9:80
X509v3 Authority Key Identifier:
keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:50:5c:eb:1e:73:67:af:59:d8:e1:34:d9:33:ee:91:1a:5e:
fb:5d:be:41:75:3f:e5:da:20:17:6b:3c:17:0b:31:97:01:39:
d6:72:73:49:b5:b5:fe:7b:4f:fd:e2:94:07:39:d0:a7:f3:ef:
32:76:e6:e1:5b:33:84:93:48:86:10:a8:dd:85:1b:8e:89:ec:
8d:97:26:ef:68:ec:5e:e6:ba:93:60:8d:63:83:bb:e7:f2:0e:
e0:72:d6:98:6e:c2:3b:4b:99:1c:cb:16:bf:8a:e3:8d:aa:51:
23:cf:87:01:b9:9b:0b:f8:7c:4e:d3:cb:18:53:c8:f0:18:85:
08:fd:13:cb:f8:c9:95:93:20:2b:52:b2:c8:0a:e6:e2:bd:ef:
6c:c2:4c:7b:0a:32:a5:49:bb:1d:3d:e3:1f:45:bc:cb:75:80:
d7:1d:e3:91:5c:89:70:c4:1b:ae:6d:30:23:d4:b8:fc:78:a9:
69:00:b4:67:54:4f:0b:62:51:80:67:7a:86:f5:c7:3a:7e:9d:
54:e0:4a:72:7f:41:0a:6c:f4:0e:86:02:3c:a7:f9:2f:8f:7e:
21:54:2c:d1:dd:5a:79:86:31:b9:85:25:06:4f:4f:c9:bc:93:
86:1c:2a:e7:d2:c9:71:96:9f:39:01:2b:f2:6a:b8:dd:96:f8:
eb:a1:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:07:09 2025 by rpki-client