Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: EOasUg7kCko3umvlsQChi5pOSZ2IogHihn5tStPszIk=
Subject key identifier: 69:BC:E5:A1:82:52:8A:12:D5:ED:A9:80:B5:0A:34:6A:5F:3D:74:EC
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 019A4FD00BB6F027AA76B99FDE3EA43250E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 17:00:25 +0000
Manifest this update: Tue 04 Nov 2025 17:00:25 +0000
Manifest next update: Wed 05 Nov 2025 17:00:25 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: KsZFcIosHH2Qxw8vUv3T6pUP6r2qyYpYi7uGvtwHibA=)
2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:0b:b6:f0:27:aa:76:b9:9f:de:3e:a4:32:50:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Nov 4 17:00:25 2025 GMT
Not After : Nov 5 17:00:25 2025 GMT
Subject: CN=69bce5a182528a12d5eda980b50a346a5f3d74ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:62:d7:ec:86:63:fb:3b:bc:39:b4:69:57:
3c:c7:3c:32:28:d6:65:d2:de:11:c5:54:9c:27:c4:
87:dd:66:40:7a:b8:67:52:40:3c:1c:5d:9c:b5:d5:
36:af:34:ac:fb:5a:a2:86:9b:e2:54:ae:5b:6e:5e:
b7:b0:fe:63:3d:b5:1c:f6:46:eb:64:e7:86:af:24:
47:17:9a:62:02:8b:83:24:e5:39:f7:4a:46:9b:80:
99:0c:04:fc:d0:23:1c:39:fc:e9:58:e6:ac:47:3f:
30:23:81:e9:7d:85:dc:6d:6d:73:c2:02:4e:9d:6c:
0f:6f:cb:10:2c:b6:3c:94:14:4a:82:e9:02:d1:9e:
22:4e:1d:f2:8a:7f:ed:56:5f:99:79:a1:e3:1e:62:
78:53:00:fe:0e:7a:45:76:2b:e0:9c:4d:32:db:51:
eb:f0:1d:ee:64:ff:3e:0e:f5:d3:2c:ff:73:fb:16:
72:be:05:9b:69:ad:d9:e7:60:b7:eb:99:5b:03:35:
c2:ba:02:b0:10:38:cf:f5:06:09:14:ed:3c:c2:9d:
4f:ea:b1:29:67:07:5d:3f:8e:38:de:e4:e8:a1:69:
e9:83:05:67:6e:55:ce:83:5c:ff:ba:2a:63:c1:fb:
e6:d3:ac:bd:9c:5d:f6:a7:c4:84:34:c0:cb:74:11:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:E5:A1:82:52:8A:12:D5:ED:A9:80:B5:0A:34:6A:5F:3D:74:EC
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7c:2a:8d:c3:65:97:8e:2f:ae:fd:7e:74:e1:ef:2c:03:64:
1e:61:fc:7c:4f:f0:c4:53:2d:e9:7a:74:b4:d9:7c:a6:20:55:
6e:b0:eb:4a:33:67:21:80:bf:b9:e9:9d:0b:c5:0c:8b:c5:33:
b7:a8:2a:0c:f4:aa:0e:3e:9f:90:01:03:68:33:ef:3e:24:c7:
47:27:ec:90:b1:3d:00:4d:65:20:1c:bf:5f:99:95:f9:ae:03:
51:5e:6b:c0:3e:7c:91:cd:ba:d4:d3:a0:6e:f0:9e:59:c2:e5:
bc:f5:a5:ab:4f:44:96:61:1a:ee:46:89:5f:60:ca:3c:1a:12:
07:97:7e:36:ac:46:d5:25:01:35:e3:84:1a:4a:84:61:11:9b:
47:f8:74:d6:dc:40:65:52:d6:4c:96:95:89:d8:d6:90:7a:23:
01:37:37:db:a8:eb:d9:eb:2f:dc:45:ce:83:c4:cc:c9:22:72:
e1:33:ec:64:b4:da:3e:4c:1d:f8:43:62:be:41:74:b5:be:50:
8e:e3:06:f1:c7:5c:f7:36:a0:b3:d7:72:ee:0c:76:82:af:e2:
45:2c:6b:19:66:96:45:b4:b6:e6:c4:8c:cd:97:9c:f6:1d:31:
fd:b5:59:cd:49:15:fa:53:40:86:09:11:2b:c9:c0:6c:31:e3:
ae:9d:77:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:51:34 2025 by rpki-client