Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: UVgDNpMHXmxtl53V7GZHIX29GSsspTeKNo+JLuQFfJc=
Subject key identifier: C7:3E:14:09:34:C0:02:18:45:EB:03:50:16:6F:2D:27:C7:4B:69:22
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019A52D1F604A03166F248EB6072F32996E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 07:01:22 +0000
Manifest this update: Wed 05 Nov 2025 07:01:22 +0000
Manifest next update: Thu 06 Nov 2025 07:01:22 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: 8feP0u6MYmHYKBQp3myXCl/pjP0pNuTnQMqXhn9Cw88=)
2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=)
3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f6:04:a0:31:66:f2:48:eb:60:72:f3:29:96:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Nov 5 07:01:22 2025 GMT
Not After : Nov 6 07:01:22 2025 GMT
Subject: CN=c73e140934c0021845eb0350166f2d27c74b6922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:b3:74:b9:65:a0:5e:aa:4b:86:72:4a:c3:
b3:30:88:f1:e3:ba:28:b1:1f:b8:e1:f2:b5:f7:d3:
a2:64:36:17:18:bd:b5:0f:07:30:fb:1e:67:4e:91:
89:09:49:de:b5:98:ef:34:6c:c2:ed:33:a2:4c:bd:
7b:dc:66:1d:e6:6d:8b:a5:5d:d8:7d:10:04:e2:32:
2e:57:0d:7a:45:5c:b9:29:e5:56:fb:d0:de:19:71:
44:6e:82:be:8f:9b:32:f0:9d:e5:b4:f1:81:94:0f:
98:5e:4d:22:d2:a6:18:d0:fe:88:6d:8f:5f:d6:a8:
9c:64:bf:f8:dd:db:53:cc:31:99:1b:7f:39:92:84:
51:87:1a:07:a5:03:ca:24:fc:85:91:97:28:af:52:
a8:5b:50:44:c6:20:b9:46:cb:b7:b5:d0:5a:ad:c1:
40:ee:f9:d7:23:a9:55:2c:0d:e2:63:b8:38:41:60:
af:1f:d8:aa:c6:db:11:62:79:19:d8:19:15:e4:85:
ac:da:81:52:85:53:41:36:e0:3d:1e:d3:d3:62:0c:
65:a9:ef:e2:31:31:fa:a9:77:08:7d:fe:f6:2b:22:
77:f6:60:de:69:52:14:23:e7:e6:e2:d7:b4:33:07:
47:ab:e2:6e:b6:b0:4c:4b:f4:02:2e:f7:c2:f0:74:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3E:14:09:34:C0:02:18:45:EB:03:50:16:6F:2D:27:C7:4B:69:22
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9b:dd:65:96:03:ce:02:d4:26:88:3e:f6:58:ea:53:31:64:
8c:3d:3f:11:e7:b1:37:f8:2f:5c:cc:9e:5f:8e:a2:8e:75:23:
3d:68:ed:66:76:55:60:fd:98:1b:f5:bb:7d:e7:a2:a3:9b:f2:
41:36:b4:85:04:a2:af:32:54:a4:86:16:9c:41:79:db:45:8e:
5e:ff:42:97:31:52:04:cc:9e:53:bb:66:bc:df:57:f8:e3:98:
a9:53:7e:d7:cd:9a:5f:db:3d:21:84:64:17:d3:e7:53:95:9a:
9a:58:9c:8e:39:5e:7d:17:39:4f:5c:2d:fb:46:24:db:bb:9e:
f5:f3:8b:28:09:ca:22:2d:87:07:8d:f1:d3:a1:35:79:a4:f6:
a9:40:bf:59:32:cd:83:d4:28:5b:89:a4:92:57:76:30:94:78:
c4:2e:d9:fd:38:d4:a0:25:b8:d7:99:d0:ee:f1:8b:b6:82:cd:
7e:66:92:b3:79:1f:d7:28:4e:14:af:f8:7d:a6:48:cd:d1:c0:
d5:16:ba:e8:71:d4:38:c8:f2:f4:2b:9a:3e:29:d5:c5:27:d3:
b6:a0:67:36:4b:73:4c:e3:a9:58:06:c5:fb:01:7b:49:4e:a6:
1d:43:2c:10:ff:21:2f:f1:9d:4f:f3:51:bc:bd:a3:5d:87:60:
ea:cc:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:36:36 2025 by rpki-client