Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: OEU82QoqC0s1qz8fgFOl8V3APKzLqay+FV5febhDndI=
Subject key identifier: C1:62:E9:0F:2C:E7:71:A5:DA:53:02:E0:B2:1C:66:B6:0F:B6:10:7C
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 019A4D3D0C62C8C2FCC61B16323527E9D0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0E46
Signing time: Tue 04 Nov 2025 05:00:37 +0000
Manifest this update: Tue 04 Nov 2025 05:00:37 +0000
Manifest next update: Wed 05 Nov 2025 05:00:37 +0000
Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: iDWUEcEVVlWlJhRDXLj/vOn7hPG1V56X5njmwjUpOdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:0c:62:c8:c2:fc:c6:1b:16:32:35:27:e9:d0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Nov 4 05:00:37 2025 GMT
Not After : Nov 5 05:00:37 2025 GMT
Subject: CN=c162e90f2ce771a5da5302e0b21c66b60fb6107c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:5a:8b:11:47:92:ce:6c:68:9c:2f:08:4e:
e7:24:74:f9:66:85:04:c7:3e:9a:e5:22:5b:09:77:
11:57:fa:a9:ef:99:e2:bf:2e:e0:a6:b1:c4:50:40:
fe:b9:59:dd:db:3e:1e:66:27:33:e8:ef:20:57:5b:
22:4d:15:b1:a2:80:1a:79:41:78:5b:e2:98:3e:07:
a0:61:9d:9e:59:4f:c0:75:37:02:4c:8e:b4:60:02:
a7:80:80:5f:a2:cf:28:22:9c:3f:e3:42:84:9b:c9:
5e:01:1f:0f:7a:92:69:23:92:75:c4:2c:36:d8:9b:
b1:0f:6e:69:9c:3d:7b:7b:92:67:78:76:19:cd:7c:
3e:c9:1a:1b:8f:a8:a7:7c:28:94:64:1b:68:8f:41:
cd:e7:1f:ff:ef:43:7e:9a:1c:fb:e9:8a:38:4d:12:
c9:1d:20:1b:73:03:1a:a4:77:97:c6:60:66:95:92:
74:ed:a4:67:e9:2d:03:e9:5d:82:ff:f3:aa:ee:46:
a4:65:75:0b:e5:d1:29:92:2a:45:44:11:8b:a1:59:
27:7e:45:ef:ab:4c:e0:db:c2:5f:8f:99:29:c7:3e:
a2:d2:af:56:c7:c5:fb:d0:72:e5:d3:18:b3:fc:65:
73:6b:08:d3:26:f7:2f:f3:3e:d7:cd:58:69:df:39:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:62:E9:0F:2C:E7:71:A5:DA:53:02:E0:B2:1C:66:B6:0F:B6:10:7C
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:56:a5:4d:69:93:fe:90:57:38:0c:66:33:dc:3b:1e:f3:08:
82:74:bf:b9:12:1b:7c:24:52:26:7d:db:70:ff:c8:e1:1a:54:
bc:f6:26:96:50:c4:06:7b:6c:ab:96:58:7c:42:3c:a5:8a:b2:
80:90:c6:a6:4a:eb:93:02:dc:0a:a2:7f:0b:bf:b4:65:da:05:
dd:30:b4:40:09:87:a5:6e:37:ea:05:36:6c:d4:1f:20:34:68:
de:8a:f8:24:6e:c2:cd:e8:73:87:2d:90:3c:05:fa:53:c2:53:
c9:39:ff:23:aa:ad:55:94:08:d7:6e:fe:43:95:df:77:57:c4:
4d:17:da:ff:c4:95:22:df:73:b6:6d:c6:eb:80:2d:df:04:63:
0c:32:56:d4:7c:1e:db:ef:5a:6b:3a:a3:22:3e:7f:5e:e3:5e:
20:3d:78:96:e4:75:cc:d5:92:94:1c:60:2a:a8:54:8e:5e:07:
3c:85:5d:6d:04:58:e1:48:9b:17:00:b8:ab:4b:20:ab:18:cb:
e0:00:4d:a8:c9:15:58:3e:94:be:c7:c4:73:eb:c2:1e:48:13:
89:9b:df:9d:a6:2f:8d:0b:28:8b:6f:84:3f:76:e6:3d:19:17:
73:72:c5:a2:6d:ce:4b:14:cc:94:20:6b:d7:d0:9f:96:6e:72:
2c:07:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:21 2025 by rpki-client