Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: 55XQUUx5sVD0bqwwPNmnmE86MsMLdkTo0CZE/ebVXAA=
Subject key identifier: 9A:A0:C8:90:9C:8E:4A:ED:C6:15:F3:C6:ED:B9:EF:A7:A5:28:9A:0A
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 019A4EF5C86435BBE97785F44E2C94DBEC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 1225
Signing time: Tue 04 Nov 2025 13:02:01 +0000
Manifest this update: Tue 04 Nov 2025 13:02:01 +0000
Manifest next update: Wed 05 Nov 2025 13:02:01 +0000
Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: nR6SIEBMARIQs9LyXC4akDezq1PJRGgVG3vyv4QEdQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c8:64:35:bb:e9:77:85:f4:4e:2c:94:db:ec:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Nov 4 13:02:01 2025 GMT
Not After : Nov 5 13:02:01 2025 GMT
Subject: CN=9aa0c8909c8e4aedc615f3c6edb9efa7a5289a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:7d:f0:dd:d9:87:8b:b0:86:ff:b8:60:30:
32:1b:77:38:44:7e:21:04:1f:6e:01:af:c4:1d:cc:
76:bd:50:68:fb:c5:9a:e8:aa:ef:18:3c:45:d6:b0:
92:c7:f0:07:46:1c:2d:41:cd:95:5d:29:d7:04:03:
6e:64:e8:c4:1c:67:85:ce:4f:fe:df:da:01:a4:3e:
b2:1b:bf:af:cd:e2:1c:16:b3:c7:9c:bd:ef:95:41:
6c:45:d1:01:27:11:6e:b6:45:ce:f7:5e:49:87:63:
50:6c:be:db:67:19:65:45:bf:e0:42:ef:51:16:66:
f8:2b:2c:d2:c0:70:5b:59:c3:66:73:f8:ac:b1:50:
92:2c:85:80:7a:05:b1:54:85:38:6b:a3:77:59:99:
6b:a4:04:02:86:70:ca:54:31:f1:5a:e9:1d:38:b5:
43:45:d3:dd:e7:55:66:1b:8f:d6:94:ac:ec:7b:f4:
37:84:61:f2:9a:3e:76:18:2e:41:80:cd:53:bb:f2:
bb:9b:25:93:83:ee:e5:96:3f:30:1b:5e:ab:fd:3c:
5a:98:e9:4a:29:af:8f:33:19:d0:a1:39:dd:3b:27:
a2:be:56:97:d2:e9:13:ac:76:84:f9:df:de:4f:ac:
02:ff:f8:a1:e2:82:c0:e7:de:ba:19:23:1a:d5:11:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A0:C8:90:9C:8E:4A:ED:C6:15:F3:C6:ED:B9:EF:A7:A5:28:9A:0A
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8e:ab:79:fd:6c:95:c2:9e:46:65:56:f0:02:b4:1f:cb:e2:
71:c9:43:ef:3e:e9:3d:5f:23:62:39:dc:d0:e7:90:44:38:5f:
4f:c3:cb:54:fb:b3:36:fd:29:ea:c9:8f:ea:c6:c3:e1:54:15:
2d:6d:e4:70:e5:b0:d4:26:53:1a:ed:90:55:2c:40:f2:97:fa:
7c:1f:02:f4:fd:4a:ec:7c:55:7e:fc:2d:69:76:aa:0f:f5:db:
43:5f:9b:9c:ac:4c:b4:06:6d:36:ae:e0:e5:0f:55:88:6d:7b:
28:81:fb:75:05:5b:bd:03:ad:37:72:d9:bb:b2:ad:1e:5d:b1:
2d:8a:3e:e9:eb:1e:a2:f4:75:f9:6b:13:b2:f6:9b:22:cb:fd:
a4:9b:b0:79:b9:f9:b4:c7:8e:fc:1d:a0:35:32:80:2c:b1:f2:
c3:ba:9d:27:43:61:69:e0:35:8a:22:a0:6f:0e:bf:a2:fc:35:
42:88:2a:e5:80:87:df:6c:86:0d:d5:c3:f9:eb:ee:9d:ed:62:
ad:6a:36:2a:57:50:da:32:ed:63:89:7d:41:54:f1:fa:23:6f:
41:46:11:f2:83:56:ed:47:ad:fa:e8:0d:47:95:a4:9c:22:f0:
28:b9:03:d1:ac:20:38:7f:06:82:c2:a7:97:2a:3c:90:dd:6d:
61:58:3e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:56 2025 by rpki-client