Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: XfxO5A5hTzaCf3AUp9EpvPEpUmcti+kgmzCrFo/eito=
Subject key identifier: C4:43:C1:A1:37:C6:48:32:47:35:7A:2B:F0:53:96:C6:52:52:40:64
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019A4F991ABFC629BDC6BEEF6A04DCC1AA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 16:00:25 +0000
Manifest this update: Tue 04 Nov 2025 16:00:25 +0000
Manifest next update: Wed 05 Nov 2025 16:00:25 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: K6qVsENeaE1372qYJHQwETBPkulD/+B48qAjQYo0qfE=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:1a:bf:c6:29:bd:c6:be:ef:6a:04:dc:c1:aa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Nov 4 16:00:25 2025 GMT
Not After : Nov 5 16:00:25 2025 GMT
Subject: CN=c443c1a137c6483247357a2bf05396c652524064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:59:98:2a:c3:d7:bd:48:03:b2:a3:3e:02:
c3:1a:1e:54:3c:12:ea:54:fa:17:e7:e0:2b:e8:47:
20:31:c4:c5:7e:39:5e:4a:3b:89:fd:9d:ac:2a:66:
bb:5d:8f:a0:86:43:c0:fd:41:f3:c9:3b:a5:8d:83:
18:59:20:d7:9a:25:0e:2a:ee:fb:5a:df:45:07:6d:
ba:26:e2:c3:67:0a:be:08:fa:6d:24:81:a8:fd:f7:
46:88:69:f2:0c:13:d0:4d:08:8b:01:ae:fe:ef:83:
12:e2:46:7a:42:00:a2:45:63:fd:68:5c:69:e3:6d:
7f:dd:27:4d:95:dc:35:11:1a:73:a1:7a:ee:8d:c6:
74:bc:3e:08:fa:55:bf:9d:68:3d:d0:b1:e5:4d:16:
c1:ef:6f:e4:90:40:b2:ce:3f:f9:0e:bc:6e:5b:3a:
df:7f:88:05:56:0a:a9:dc:91:72:87:e4:0a:ee:0a:
21:76:e8:be:52:74:c6:64:2d:cf:28:d6:c3:de:13:
c9:a7:e6:c3:6f:7e:f4:a6:9a:f9:ad:2c:fb:b5:1d:
34:11:63:05:fb:db:70:48:ab:65:4a:2b:ec:b8:e4:
c8:67:be:97:06:09:77:74:1d:b2:92:2b:f3:f0:d1:
99:dd:6a:65:e3:24:9c:ff:66:8c:8a:66:78:b6:ba:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:43:C1:A1:37:C6:48:32:47:35:7A:2B:F0:53:96:C6:52:52:40:64
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:54:5b:0d:7d:db:12:d4:af:2e:b1:7f:e2:35:18:02:06:6a:
a6:55:f1:40:80:f7:93:f7:46:a6:0a:5f:04:79:67:67:3d:ae:
60:0c:07:f5:8d:6b:22:5f:2c:14:c7:1f:38:71:19:ac:bf:2b:
69:86:8c:29:9f:6a:90:e8:42:52:21:75:a5:79:24:e5:98:94:
ef:06:4a:7b:97:22:7c:6e:5b:75:02:1b:c0:78:dc:26:d3:25:
88:5d:db:99:9d:37:d5:89:7f:38:df:22:a4:49:42:87:df:c0:
5a:85:6d:bd:24:48:35:f5:4d:03:ca:ab:38:b3:25:8e:62:ac:
0f:57:e9:8b:1e:d4:24:46:db:02:dd:50:c1:60:7e:1a:bb:13:
42:48:20:7a:0f:62:02:0b:71:6d:d5:10:4c:7c:9b:3a:1c:b6:
83:26:86:fe:c4:52:68:ef:6b:98:9e:6d:64:02:8a:6f:b7:36:
dd:5b:1e:ed:25:4f:11:77:21:9b:26:8a:61:01:83:8b:90:88:
a1:ca:84:b3:f5:2b:c6:a8:11:5d:a8:d7:15:28:ec:fc:34:40:
4e:f3:b9:b8:df:f2:33:c4:73:95:4d:4d:10:43:19:c2:3f:50:
79:62:d5:45:2e:14:4e:9f:08:11:3c:ca:e7:4c:d7:78:57:1a:
75:f6:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:51 2025 by rpki-client