Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier: fVPUJIgJjYi2Do7ydK9g2XMYuKV+rd1snehz4zbFaQo=
Subject key identifier: B8:08:A6:DF:0F:94:2B:81:44:6A:AD:B7:AD:F1:B5:41:5A:F9:57:7E
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 019A4D3CD88B089419D524348C8534BBC02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:24 +0000
Manifest this update: Tue 04 Nov 2025 05:00:24 +0000
Manifest next update: Wed 05 Nov 2025 05:00:24 +0000
Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: y5SCxsR982o7Ouw4acrX+NOoIxcx1HrnDI49yQ/LWm8=)
2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d8:8b:08:94:19:d5:24:34:8c:85:34:bb:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Nov 4 05:00:24 2025 GMT
Not After : Nov 5 05:00:24 2025 GMT
Subject: CN=b808a6df0f942b81446aadb7adf1b5415af9577e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:ac:4a:51:8f:7b:60:fd:85:3a:0c:f7:8c:
14:c8:ee:90:58:79:eb:83:64:9a:a5:96:07:b1:98:
38:5b:b7:78:66:a9:5d:f6:be:01:04:81:3f:70:a8:
de:75:a9:56:38:06:06:c6:e7:f0:26:02:4a:67:16:
22:30:1f:8a:b1:14:fe:e4:c8:df:6f:01:23:04:5b:
ab:2d:15:24:a1:f0:44:5f:87:08:35:4a:7f:a7:04:
d1:1d:d0:a6:ae:c6:ec:52:be:78:cc:ed:85:e2:9e:
f4:bb:5c:76:38:01:af:8c:a1:30:40:a1:ae:e4:09:
7e:04:14:8f:da:e8:c0:57:ec:0a:c5:9d:a7:dd:d4:
e0:e7:d9:1b:49:f8:c7:6d:8d:08:72:b8:4f:83:3b:
46:7c:5e:21:68:ff:5e:eb:37:b1:a2:bb:e1:1a:28:
d8:62:f0:33:0e:eb:91:7c:39:be:d8:bd:41:ff:9a:
bb:5a:ae:75:dd:79:03:ab:df:8c:37:87:dc:40:9e:
57:d9:cc:d8:eb:c9:18:da:cb:b6:7c:4c:04:b3:19:
66:41:64:7d:80:89:37:0b:04:de:52:94:3c:21:56:
6a:d2:f9:fe:7c:25:89:48:84:20:02:60:54:a5:f2:
2b:89:57:1c:b8:79:cd:67:8c:7a:cb:4d:b4:b6:d3:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:08:A6:DF:0F:94:2B:81:44:6A:AD:B7:AD:F1:B5:41:5A:F9:57:7E
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2c:fe:c6:44:54:05:b3:e2:a9:fa:18:7d:3c:b7:c9:ca:9d:
88:24:a9:43:af:6d:22:b3:24:28:0e:3e:26:1f:df:15:ca:76:
93:23:39:7a:a5:41:8b:69:ff:99:1f:dd:e3:fe:5e:2b:bf:1c:
27:f6:ce:c0:36:6a:6c:02:ed:1d:bb:af:56:26:d1:27:9e:e4:
0c:cf:f4:32:99:3f:4c:a3:c3:6d:11:99:4c:d8:da:a0:37:32:
10:f2:02:84:f2:28:18:a7:c2:a9:96:80:42:bb:1d:a1:04:a1:
29:41:19:23:bf:cc:70:db:2c:f9:79:a2:fc:a3:11:b6:5e:c4:
5a:5e:0a:5b:c5:47:3f:6b:2e:79:dc:d2:fd:65:e5:9e:e6:a0:
62:57:a6:c4:0f:d1:20:37:f7:79:d6:a0:7d:31:a7:a1:7e:09:
d0:5d:f5:f0:33:83:bd:26:07:b3:0a:2c:52:41:36:8d:f1:89:
d2:04:d8:e8:58:1e:23:e3:81:2d:f4:de:df:fb:15:45:49:4f:
b4:4f:7f:a6:24:80:b6:13:79:ff:7a:d8:46:3a:ff:33:9d:50:
f9:b1:b1:be:9d:5d:f3:0c:5b:a4:66:f8:65:06:6f:13:f6:31:
57:e9:ba:43:10:44:8f:83:1b:89:45:1e:0d:81:60:8c:2b:30:
54:14:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:04 2025 by rpki-client