Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File: c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier: MyMzsbOKRWKKlc5IcDH4erUbLZ4aJOPm2ibvNi3GIZw=
Subject key identifier: 89:EB:F6:42:48:35:B3:E3:52:54:E0:18:0B:A6:52:7A:06:F4:A4:35
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer: /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial: 019A4D3D37B6D9C1133B2FE86247FE52F227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 05:00:48 +0000
Manifest this update: Tue 04 Nov 2025 05:00:48 +0000
Manifest next update: Wed 05 Nov 2025 05:00:48 +0000
Files and hashes: 1: TTDv1twa5Oq2wS4kqb31Wa4mKwc.roa (hash: kNwC0HcE7BSu6NKB5QfTvVm3I8iIUDuBU4W9LJhw8AE=)
2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: x79/89w2TRwn9Fn4lIwuqqN53GIcUq8k2P27nhjAqiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:37:b6:d9:c1:13:3b:2f:e8:62:47:fe:52:f2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
Validity
Not Before: Nov 4 05:00:48 2025 GMT
Not After : Nov 5 05:00:48 2025 GMT
Subject: CN=89ebf6424835b3e35254e0180ba6527a06f4a435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:50:fb:62:0c:bf:c2:b8:b5:c1:d2:05:aa:
42:00:0d:4d:74:0d:3e:e3:b3:6e:67:b0:f3:33:5f:
9e:84:74:ae:5c:1d:ab:04:cb:ed:54:ad:1e:22:0c:
d2:de:da:7c:c4:72:77:9d:19:1c:d2:d6:d9:0e:d6:
08:87:f4:c4:99:01:61:9b:d0:bf:08:9a:1c:1d:e1:
f2:7c:9e:b6:a9:6a:af:d9:50:6a:e5:d4:2c:85:15:
7d:13:28:c5:e8:cb:98:be:f8:0a:9f:4c:bc:66:f3:
7d:f8:d8:90:1a:4c:d2:93:a1:0d:ed:bb:94:50:a5:
91:cf:08:50:4b:74:e6:e8:27:d8:86:f6:4c:42:05:
d0:b1:85:d4:33:83:80:7c:b0:27:3f:f7:2f:f3:1c:
92:43:93:b2:96:05:1e:93:1e:e6:90:5c:a9:d3:1b:
71:36:cc:4b:03:51:67:2b:0f:36:c1:08:19:c3:de:
de:02:e3:40:7e:aa:99:4f:d7:44:f5:9a:5f:a4:fa:
df:09:c9:d8:5c:8b:95:46:9e:37:94:f7:f0:25:80:
f8:c9:77:b1:f1:59:5b:09:33:68:b4:17:9f:35:52:
f9:fb:cd:03:c4:43:cb:da:5e:56:d5:3e:7e:78:5f:
0c:31:9a:d2:8b:d6:96:32:11:97:a5:d9:59:6e:14:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EB:F6:42:48:35:B3:E3:52:54:E0:18:0B:A6:52:7A:06:F4:A4:35
X509v3 Authority Key Identifier:
keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:df:64:12:45:a1:d3:10:72:6a:67:ac:b1:e2:23:3d:d8:4f:
1f:ad:77:50:ff:b2:1b:27:15:79:74:2e:d1:c5:67:59:a3:b8:
6c:d2:ba:08:02:03:bc:e7:67:bc:2b:a3:e7:e5:56:c9:dc:8a:
b9:7a:15:bc:59:b3:64:56:89:84:19:f3:02:9b:7c:07:ea:c3:
8d:bf:9a:e6:b5:06:83:e7:3c:b8:55:fe:c9:ba:81:27:8a:b6:
ba:10:1c:3a:1b:d1:07:67:77:62:b3:96:8f:11:45:0d:6f:56:
ab:30:b4:fb:4e:32:f7:58:0e:75:65:85:3d:ea:25:22:5a:e3:
49:19:bf:5a:80:9b:3c:03:a9:0e:7a:45:ba:f7:40:42:0c:a3:
8e:49:26:df:68:cc:70:58:fb:10:a6:63:24:d4:ce:11:06:58:
ea:50:63:5a:91:3f:8a:bf:be:d4:e9:a1:67:c0:3f:27:06:5d:
81:f2:4d:3f:cb:f1:6c:2c:3d:07:32:23:17:14:b7:e2:ba:66:
f6:e6:da:80:eb:a7:21:32:a9:f5:1c:f9:f2:1c:13:ee:ae:d3:
12:63:8f:58:c6:2b:7c:08:9b:f7:dd:28:f2:3a:54:cb:d7:56:
53:c0:41:5a:f4:34:63:42:60:3b:c6:1e:9d:8d:b4:8f:21:fa:
fc:fd:4e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:44 2025 by rpki-client