Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: lFQenwN0bdeo4cCywG/R6O/YIzgNmIPeiEnMv+WJkFo=
Subject key identifier: F6:2E:B9:A9:90:11:74:12:20:5B:A7:B0:C0:63:BF:F6:72:FC:86:18
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019A51194AA3FA80CD63FDED0DF119D793F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 048C
Signing time: Tue 04 Nov 2025 23:00:03 +0000
Manifest this update: Tue 04 Nov 2025 23:00:03 +0000
Manifest next update: Wed 05 Nov 2025 23:00:03 +0000
Files and hashes: 1: Q3DzC8Xezd_wUJe_qmHOdRY16z8.roa (hash: UbPlIZy2nFY/zJS4B8sCeti8RZE/Rxf0ELKnlfBMfvg=)
2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: EusowbBJ/uMUkQ0du/r2rTV3nz1ET+0QQ2EhNnYtCwk=)
3: ypFsEEGfd4O6J1p0mZ1RbqGav-M.roa (hash: g61lW89AaUIOw5VOlu2FfGAQF1zl2FJ+pmT3aU1q7R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:4a:a3:fa:80:cd:63:fd:ed:0d:f1:19:d7:93:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Nov 4 23:00:03 2025 GMT
Not After : Nov 5 23:00:03 2025 GMT
Subject: CN=f62eb9a990117412205ba7b0c063bff672fc8618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:b5:64:75:86:90:d9:0b:43:76:7c:2f:4b:
8a:f9:86:dc:c1:45:f7:41:c2:2e:c1:5f:45:a0:e9:
79:ab:00:45:8b:35:e9:ce:df:5d:b7:f7:04:af:d5:
1d:bb:28:54:a8:ef:75:bf:10:b0:9a:b1:03:6e:6f:
b7:f4:09:9e:c1:39:ac:3a:88:45:7d:4e:7e:a2:b6:
b8:71:88:99:75:6c:57:c5:4f:2c:e4:97:d1:91:29:
d3:48:44:a9:0a:e5:89:9a:4d:6a:23:58:33:b3:61:
47:1d:83:4e:1f:05:69:6b:77:4f:31:c0:64:bb:f5:
d8:da:aa:76:9a:9c:e6:03:03:9d:0d:3a:12:d3:1f:
bc:2f:8a:17:42:43:b1:97:4f:19:70:61:af:48:f1:
36:c1:ef:82:33:fd:d6:de:6f:46:25:fa:10:e9:04:
0a:e2:33:a9:6e:6f:fb:2b:42:ff:6d:ec:34:56:4e:
8b:1b:b2:5c:72:82:21:73:73:2f:1d:0c:d5:1e:f7:
a8:d1:d9:d9:05:fe:4b:45:ec:f0:13:78:39:80:31:
97:3a:2d:9f:74:2b:80:9e:6f:39:61:c0:30:9d:7d:
1f:e2:50:bd:7d:bb:38:22:0a:38:43:b1:55:d8:e7:
4f:f6:4e:46:53:1f:2f:8a:1a:56:14:51:79:ab:d2:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2E:B9:A9:90:11:74:12:20:5B:A7:B0:C0:63:BF:F6:72:FC:86:18
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:de:e9:c5:40:9a:64:bf:fe:e6:be:98:97:5d:c2:d0:56:d1:
1a:b4:de:6a:95:8b:2d:5a:a7:54:2b:f8:40:e6:40:67:f0:7d:
e3:6a:42:d4:2b:2e:eb:d3:c9:61:50:37:b2:55:d9:59:93:a8:
4e:bc:8d:17:12:72:36:54:00:91:74:26:f7:64:d4:ff:41:58:
43:19:c9:10:61:66:d6:aa:6e:1a:94:cd:91:6a:9a:e5:4b:d4:
be:4d:f5:47:55:35:f2:9c:69:16:7f:a0:47:76:4a:cf:66:dc:
f4:3f:c8:e2:bd:fe:62:f7:5e:13:9c:bb:3c:c3:c3:22:8c:b3:
9f:b4:8c:4c:8e:b2:36:d3:d6:98:35:f2:eb:ed:fa:b6:28:4d:
3a:21:da:25:3a:e5:2e:34:ce:75:34:98:c2:a1:46:90:8a:f3:
c4:44:23:89:74:52:70:67:a7:2c:d7:70:d4:c4:61:e9:8e:49:
7d:ae:3e:5d:4b:8a:87:7f:ad:0d:16:d9:a9:e6:54:a8:7d:bf:
18:e7:d1:42:5a:46:a3:6b:46:87:23:1b:3b:12:35:9b:f1:51:
2d:f1:26:89:02:ef:e2:c5:77:b1:91:59:96:9c:60:d4:b4:72:
88:7a:0d:61:4e:30:65:b7:82:7c:d2:66:54:31:aa:df:06:e0:
bb:2b:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:00 2025 by rpki-client