Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: NZX95O95rkKS4fDZ7IFumu2p/HHeWvvx3a1W1cmOxvE=
Subject key identifier: 41:4B:3A:EA:24:9E:20:94:44:31:6A:60:EA:CB:98:49:CF:AB:50:8A
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 019A4D737D0D017493D62429667FB698EE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 06:00:05 +0000
Manifest this update: Tue 04 Nov 2025 06:00:05 +0000
Manifest next update: Wed 05 Nov 2025 06:00:05 +0000
Files and hashes: 1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: 5NyQww4dmAZtPp/y74RSsAzeVJllNLczMk97CLoAJtc=)
2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:7d:0d:01:74:93:d6:24:29:66:7f:b6:98:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Nov 4 06:00:05 2025 GMT
Not After : Nov 5 06:00:05 2025 GMT
Subject: CN=414b3aea249e209444316a60eacb9849cfab508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:64:77:82:41:94:dd:42:b4:59:cf:3a:3c:
00:1f:e1:8c:91:1f:fc:86:71:68:41:20:6e:1e:2e:
5d:33:ba:11:83:1d:a8:c9:bf:17:97:60:c1:8f:fd:
c8:3f:c5:4a:22:55:c8:77:b6:ad:10:d1:ae:46:24:
b4:9e:63:43:ef:00:df:e4:4a:f8:55:15:a8:99:69:
97:22:bc:ec:5d:d1:31:2d:14:40:a1:ac:cf:b0:6d:
f5:b2:80:40:df:2b:48:10:85:41:6e:08:3e:8e:75:
b7:a4:bd:2c:8f:06:2a:b9:7d:d1:97:fc:88:bc:0a:
4d:98:0c:c4:d2:8d:18:25:b9:e5:00:7e:4c:7f:79:
bd:08:44:a9:16:43:5f:9f:d8:c6:cb:62:bc:9d:9f:
42:c6:75:32:bd:db:03:c7:dc:a1:50:52:5b:e3:fd:
c6:36:63:6a:74:be:bf:f6:e3:d5:a9:2d:35:54:42:
ac:bd:7f:b7:64:82:f8:8b:4f:41:29:55:0e:3a:e9:
97:40:65:3d:e2:ff:e8:b8:4c:08:cf:f3:94:e5:58:
d2:bd:2f:ec:58:d0:46:b2:1b:f8:50:a7:74:66:bd:
cc:78:58:25:cf:e0:3a:a9:9e:26:19:df:f2:60:e7:
02:f3:48:26:46:86:e7:4b:6b:e3:c0:8c:ac:c8:53:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4B:3A:EA:24:9E:20:94:44:31:6A:60:EA:CB:98:49:CF:AB:50:8A
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fe:de:c2:bb:48:08:0a:7c:95:9a:c0:74:f6:9c:c7:9a:3a:
02:d4:f3:5b:d5:5e:a3:1c:2a:8c:ff:6f:92:c2:a9:4a:d3:a6:
c3:a1:58:ae:38:5c:81:dd:1c:f2:e2:07:e9:29:a0:42:21:36:
93:5f:0c:d8:54:17:db:aa:d7:53:95:d1:f0:41:b7:3d:75:69:
35:81:cc:25:46:3c:f8:66:b2:ec:91:80:07:a1:83:16:97:84:
a6:51:30:9a:e5:a7:3c:91:88:62:f6:49:ae:8e:7d:bd:59:3c:
9e:7d:f7:e8:fd:b8:25:22:c4:72:81:bd:5d:16:dd:02:c4:24:
74:fb:0f:f1:6e:d4:37:03:a2:34:b1:b9:9b:04:2b:5c:a8:9a:
1e:ad:4e:9f:4d:c0:75:94:08:6d:bc:6e:ee:38:c5:c4:40:d9:
0c:63:aa:b6:39:27:54:66:c7:a8:c5:2b:14:52:80:21:25:7f:
f2:0d:03:1e:ca:93:81:8f:30:96:ec:4d:0c:04:72:28:b2:b5:
d6:ad:42:f9:79:69:d9:7e:0d:11:e2:3c:60:83:61:3d:16:6d:
d7:14:0f:4e:3e:d0:62:41:2d:16:0a:a6:64:c0:81:9c:e6:a9:
e9:b6:2e:30:f2:cc:e5:7e:84:b2:1c:f8:74:99:97:17:32:c2:
74:93:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:58 2025 by rpki-client