Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: 1XvCslbZtOzIYC0RIlOz0kODPCZi4RyxmMh2y+O0Iho=
Subject key identifier: AC:DC:F2:F8:35:FE:D2:92:37:FA:61:29:54:9A:B1:71:22:F9:D2:DF
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 019A4E86376DBF6ABD7AE5A371A47EAA4DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (hash: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: 92n4HsWeExvc3dgrYlG/tNfMiCJ+HuhKNOO55cl6DiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:37:6d:bf:6a:bd:7a:e5:a3:71:a4:7e:aa:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=acdcf2f835fed29237fa6129549ab17122f9d2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:73:4a:c3:2a:4f:74:cd:54:ff:05:dd:3c:
76:da:82:68:94:1a:05:9c:84:06:cd:55:86:b7:03:
be:17:1a:56:9f:a4:69:23:16:e1:3a:a9:e3:fa:6f:
b9:95:15:b8:d2:16:9d:7e:8e:a2:66:c6:2c:b4:9d:
a6:03:92:a3:81:62:95:40:de:57:80:6e:87:11:97:
3b:a0:0e:9e:70:aa:15:d7:9a:60:f5:ef:98:20:1b:
ca:19:eb:2e:61:cd:bf:be:ef:1d:b1:dd:5d:b5:42:
af:e9:c5:c9:ee:82:10:83:8a:b9:6b:74:14:c9:a8:
46:51:55:eb:0e:df:77:8e:bb:db:6c:1e:e8:3a:92:
ea:50:a2:94:bc:46:7f:ff:8e:dd:21:81:2f:d6:1b:
06:57:a5:37:d9:7d:ec:eb:51:a3:13:d5:ff:36:4c:
61:8b:5f:71:35:db:b9:d4:03:47:a0:89:c3:9d:bc:
f7:1e:e6:ee:9f:59:89:a3:1e:f4:a4:aa:18:d4:fa:
f1:2c:0d:d8:a5:4a:44:4f:f4:0c:a5:41:68:6f:b9:
2d:5d:9b:0f:b4:a1:e0:1d:94:00:a4:e6:bf:7b:69:
49:16:0b:39:4b:70:c2:6c:10:93:84:d8:5e:53:28:
88:4b:8e:6b:1d:8d:ca:68:f4:85:bb:e5:71:5b:41:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DC:F2:F8:35:FE:D2:92:37:FA:61:29:54:9A:B1:71:22:F9:D2:DF
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1f:02:09:6a:c9:e7:be:4b:20:be:02:b8:86:76:a9:75:b3:
5d:1f:ea:27:ae:ae:27:29:b8:10:90:76:94:b0:e6:b4:da:da:
17:f0:54:f5:1a:e3:87:d0:f8:1e:6b:64:22:45:53:f5:de:e7:
1d:ea:98:8e:11:96:b9:de:56:00:61:b2:61:02:a8:90:a6:b9:
8c:4c:99:05:8a:b0:40:00:81:2b:cb:f5:ac:86:10:34:ce:58:
9d:0c:58:cc:ee:c2:3a:05:5a:bf:3a:01:be:c8:82:e5:bf:af:
bc:a5:82:26:32:24:b7:08:c2:c8:4b:57:a5:e0:c7:f9:61:3b:
ee:64:4e:80:e1:37:59:34:50:64:64:7a:32:81:80:a8:5c:5c:
83:b2:d9:db:b8:7d:30:1b:13:0b:b9:30:15:84:47:f0:cf:9e:
d8:d0:65:9c:57:43:2c:c3:f2:c7:4f:1e:2b:a5:48:59:63:a4:
d9:e5:b1:ef:9b:14:84:eb:53:34:2c:e9:ed:20:63:88:80:d4:
ce:d8:ef:fd:8b:89:e1:7b:04:d7:20:cf:b6:0d:5a:fe:e6:b5:
47:4b:e7:bd:fc:0a:ee:2a:84:38:e2:ba:a2:82:c5:42:8d:a0:
7a:06:ff:ce:4d:a8:92:bc:01:27:42:67:c2:f8:84:04:7e:ab:
91:74:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:11 2025 by rpki-client