Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File: RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier: wCZRHonpqISpPA0s92rCEC8vx1UDQ/STXz6Zu9n6hck=
Subject key identifier: 33:FA:FC:C1:0A:A7:77:17:D8:66:4E:C3:72:DE:2F:95:C5:05:20:E0
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial: 019A4EF418A879E060EB9E88C713D10EFCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: weC85+rPD0JgzlMhf5/VSVYaq5ei6CsXKXAHjjervts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:18:a8:79:e0:60:eb:9e:88:c7:13:d1:0e:fc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=33fafcc10aa77717d8664ec372de2f95c50520e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:43:2c:7a:b2:c6:2d:e4:b7:e5:b2:88:cf:
24:5b:4b:22:e4:10:e9:50:13:7f:25:74:e1:ff:9c:
fc:ff:14:e5:31:f5:17:fc:86:43:e3:de:e6:2c:1f:
fa:e6:09:c6:a1:cf:20:f4:23:2d:3f:42:01:42:4a:
50:54:c8:90:12:88:55:48:1a:e9:56:42:c1:6d:94:
3b:48:0a:1d:80:80:0e:75:b4:a6:aa:a5:79:49:59:
71:58:54:c5:2d:15:6f:d2:1e:5a:b9:4f:71:bd:ef:
91:8e:f0:63:a6:b5:84:18:a1:61:ff:15:d7:a5:54:
8d:24:ba:9e:11:9a:4e:6e:58:ad:44:06:59:f1:78:
5b:8b:f2:e6:a4:81:6f:f3:28:2c:f4:54:43:33:7a:
f1:a5:a7:b3:ec:b3:70:67:5a:e0:3d:f7:2f:59:53:
90:81:33:92:7f:93:e9:7f:da:00:31:11:c9:d7:62:
92:6f:98:0e:cf:c0:ec:61:32:67:cf:7d:0e:44:09:
18:96:9a:e4:48:7a:ac:d2:bf:a8:fc:64:b5:b0:df:
15:cd:00:67:d0:af:e5:24:d3:7b:6d:1a:cd:28:f8:
e3:88:cd:e5:7a:bc:f9:05:b5:9c:75:98:c0:33:a6:
65:41:d3:8f:d2:4f:01:45:8f:f4:d9:38:37:96:8e:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FA:FC:C1:0A:A7:77:17:D8:66:4E:C3:72:DE:2F:95:C5:05:20:E0
X509v3 Authority Key Identifier:
keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:08:ff:e0:3c:31:9a:04:e0:4a:c6:08:68:b5:7e:01:3d:84:
be:43:d0:41:f2:f4:41:84:b3:a3:71:25:29:29:47:5a:2c:02:
2f:d4:8a:8d:58:77:ed:f7:f0:3a:7a:a0:fb:cd:10:24:2f:dc:
fb:7e:99:fd:69:32:9c:14:08:e4:16:e6:01:b6:18:b1:fb:aa:
86:12:64:98:7a:4e:6e:03:29:80:2e:07:29:ee:fd:e6:1a:1f:
d1:ec:bd:9a:c8:f1:b5:4f:cc:e1:dc:03:59:c2:1d:63:73:f5:
e3:e2:d3:f0:5c:fe:89:7a:d5:1d:c4:27:e5:b5:9b:bd:f9:b3:
59:46:da:ba:40:0b:9c:d1:ac:e3:d3:f7:97:a4:30:a5:80:f9:
a0:bb:72:29:2e:1b:1f:b2:90:a1:b4:9a:93:e7:ce:81:43:64:
17:1b:e8:7c:1d:ac:b7:e1:3b:85:ba:75:d9:72:a7:8a:1d:bd:
a8:85:8b:01:09:b0:c2:8c:15:35:88:03:02:12:03:c1:c1:92:
49:ca:4b:bf:dd:f1:cf:cc:e1:f4:f8:64:ca:6e:57:bc:6c:a9:
cd:f0:bc:e5:ce:42:cb:2a:2b:55:0e:cb:db:c7:e0:14:b6:cf:
6a:f3:18:8c:49:f8:cd:d7:0f:b8:7e:a4:56:a8:fd:be:d0:ab:
7e:f5:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:25 2025 by rpki-client