Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: Mnk7cNjmyUF4ryDw+QKtxnWBc4VKziuRnmfwWUM+IuQ=
Subject key identifier: EC:C1:7D:F5:14:43:FC:A7:EC:7A:3D:0B:E1:89:FC:13:C0:44:A4:1B
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019A5375E9648C840E7104882729B6CA300C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 10:00:27 +0000
Manifest this update: Wed 05 Nov 2025 10:00:27 +0000
Manifest next update: Thu 06 Nov 2025 10:00:27 +0000
Files and hashes: 1: fq_1cNVhnRyKc2u6Tpi7nWrUD48.roa (hash: 03Y77SRPe3amrviIIQ+5UUog0n/DdIDUF4QQne3bPoA=)
2: joyVHpi7wMxjJ0s6ltsRCFgcXYU.roa (hash: OCQinmVLB46q3fla3T34H+fTxVsr8er+6b+WYrx3pLU=)
3: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: ehv6+bY6MpOWc9mOiTyYVC7G08NRWy4Vocogq3R1pT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:e9:64:8c:84:0e:71:04:88:27:29:b6:ca:30:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Nov 5 10:00:27 2025 GMT
Not After : Nov 6 10:00:27 2025 GMT
Subject: CN=ecc17df51443fca7ec7a3d0be189fc13c044a41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:55:fe:bb:3e:ff:c8:66:5f:cc:3c:ad:58:
a8:a6:ae:22:0e:d7:30:e3:db:46:83:63:7d:17:80:
ae:b9:fe:fd:aa:b2:b3:48:91:61:23:7f:f8:0d:dc:
de:f6:7e:44:57:c3:b0:29:f5:8c:15:16:b1:57:36:
65:83:2a:88:8d:64:c7:b0:99:5b:0b:c6:0a:5c:43:
a9:cc:61:d5:9e:5a:04:da:cc:b8:08:80:3a:d5:6b:
1f:d7:b0:36:9c:8f:a7:fc:c8:f4:55:ed:11:67:09:
f2:5a:e9:4a:b5:33:35:f3:7a:bf:e8:e0:c3:a4:08:
08:3f:ce:e9:ec:d6:07:76:ca:00:5d:f1:ae:d4:8f:
c1:ef:22:b9:70:b6:5a:3d:36:65:bd:4c:f0:72:39:
b4:f4:92:a1:a0:7a:e7:3c:b1:b9:28:44:6b:93:81:
ca:27:53:5e:00:a1:9c:ba:d6:37:64:70:45:c3:b2:
31:55:3b:c8:27:f2:af:7d:dd:76:24:43:bb:3d:61:
bd:10:ff:08:22:4a:09:4c:0a:9f:d6:50:63:4d:98:
00:22:01:a2:56:9b:a1:d0:0e:f8:36:46:df:60:9f:
b0:ac:7f:92:91:89:a6:51:ea:cb:92:88:0c:67:fc:
88:ad:c1:70:cd:eb:b8:eb:21:f7:42:59:7e:0a:c2:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C1:7D:F5:14:43:FC:A7:EC:7A:3D:0B:E1:89:FC:13:C0:44:A4:1B
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:10:5a:80:e7:9c:a1:96:27:60:f5:0a:30:f3:b7:b8:49:bb:
03:b2:ba:cd:1f:14:71:fd:21:18:f2:6b:1a:8e:d6:ec:70:8c:
b6:31:a9:23:92:93:5c:ba:3e:9f:24:7a:a2:83:0e:5e:61:03:
f0:33:0a:b9:ba:d8:09:0b:89:59:c2:fc:8b:87:22:fa:da:8e:
6e:66:1e:5c:33:11:3b:d2:2f:eb:9c:67:98:f8:19:ef:5c:5d:
22:4d:21:89:e8:85:45:39:37:e5:84:06:c3:bf:66:2f:1c:fa:
11:3a:79:60:d4:5f:4c:39:2b:05:7d:54:4b:ab:ba:e3:aa:1f:
72:df:86:e1:6c:cf:b7:b4:c5:71:9a:7d:31:ba:bd:48:75:3e:
60:cd:eb:4d:ad:9d:d5:3b:54:d3:40:f7:5c:18:32:99:e0:7f:
10:2d:2d:88:0a:05:6e:5a:ca:5f:dd:b4:ca:7c:d8:4a:d7:bb:
b6:35:a5:d9:59:d9:35:11:c3:a3:89:72:be:0d:f9:95:a1:c6:
3c:9c:87:08:cb:13:da:9e:cc:58:25:06:7b:50:ec:16:63:8f:
39:63:bf:2b:ce:1d:a2:8f:b7:27:e5:79:5e:24:a6:99:17:c5:
cc:3d:3b:ec:a7:52:9f:1f:64:87:0d:b4:c5:f0:c2:86:83:1d:
d4:31:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:22 2025 by rpki-client