Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File: R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier: ikv/2VVX2XW/Q6U+v4rLzR43ZzVdYu0OcEg78NpkBjM=
Subject key identifier: 42:19:B8:46:33:A4:CB:00:E7:1F:22:BC:FE:E3:4C:C3:CD:E9:74:A7
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 019A4E187B0FCA7248D80606488455B8D70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number: 1720
Signing time: Tue 04 Nov 2025 09:00:18 +0000
Manifest this update: Tue 04 Nov 2025 09:00:18 +0000
Manifest next update: Wed 05 Nov 2025 09:00:18 +0000
Files and hashes: 1: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (hash: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=)
2: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: FbNliaYi+Fb1KYDtluW8B92dgCu2PAic3isaCLMq2LA=)
3: YI4k3ENYRJqaDSUhSenx1oLWDr4.roa (hash: /gA7fz8Cy1YxK69gPpp37L8R7jjMwoMYWidH5G4YDU4=)
4: j5UDDhxpTv4ushx1mWgWUG65pLw.roa (hash: /0/V6H+X8Ix/QnnafguyBKn8HfbnAIhcS2Wv2jx5XnY=)
5: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (hash: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=)
6: jT6NkmL7YzecSayVxKLBX2lYFl0.roa (hash: pN4nTNkxgnBnRMvOcO7lpmhLow3FyCajR2fUpr6WK+o=)
7: shVxNeuAvqU2EZg6AvUFKFXrrss.roa (hash: swqDkI/VzYd3AR5PZIZqpbPJTNwO2OZsMXyq7SU+z6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7b:0f:ca:72:48:d8:06:06:48:84:55:b8:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Nov 4 09:00:18 2025 GMT
Not After : Nov 5 09:00:18 2025 GMT
Subject: CN=4219b84633a4cb00e71f22bcfee34cc3cde974a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:15:da:51:3d:e7:4c:c1:cc:79:7d:bf:a8:
29:e6:9e:e6:9a:60:72:f1:c7:9f:ae:9b:15:a9:dd:
de:ab:6d:98:b0:2d:c7:2b:54:39:6e:aa:97:fe:87:
0b:20:fd:cf:63:9a:75:4f:10:48:62:2c:d7:8f:07:
dd:48:03:69:2f:fb:c5:16:50:c5:05:f5:53:c7:45:
3a:dc:ef:ef:55:32:7d:17:96:c0:7a:7a:da:3e:7d:
a2:6e:00:44:21:b2:23:55:ab:30:3a:4d:46:6c:0c:
53:04:f3:3b:36:e5:27:c5:04:a5:33:7f:4b:27:7d:
93:e3:58:95:37:47:73:5d:29:2e:e8:c5:47:67:27:
f7:e5:d6:fd:e7:b1:03:40:58:f5:cc:b0:e6:99:33:
d1:c8:dc:37:2e:f0:ad:50:8d:30:e4:1e:4a:6c:c6:
4e:c2:c1:c0:75:58:ae:6b:fd:a0:b6:12:5d:56:7e:
f0:4a:cf:34:f4:2c:2d:07:8c:ef:17:bf:86:3a:72:
bd:fd:17:d0:65:ff:01:8c:be:08:5c:bd:dd:b3:e9:
cf:04:2a:d7:8f:95:ea:3c:42:78:d7:e1:b8:55:7f:
c1:f8:90:29:38:06:ac:7c:0d:4d:ad:33:a8:c5:1d:
56:bb:46:61:8e:03:bd:75:54:58:f6:c0:20:7b:a0:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:B8:46:33:A4:CB:00:E7:1F:22:BC:FE:E3:4C:C3:CD:E9:74:A7
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:74:14:75:0b:46:0d:c8:08:39:6c:d1:86:fc:3b:b9:c8:7f:
a2:1a:37:0b:80:c4:e7:16:eb:b6:5a:84:98:d3:3d:ee:d2:98:
f1:b1:7b:3e:0f:cd:d8:c8:64:1f:fa:8d:8d:b6:5c:eb:91:f1:
16:20:77:6c:8a:a7:2c:0a:02:ab:31:09:63:e2:6c:96:65:6e:
2d:29:4f:3b:98:14:51:c0:77:fb:03:6e:f4:5b:46:25:d7:a2:
d4:81:ca:c7:8a:eb:21:ef:59:64:0a:65:0b:7d:74:18:02:f1:
26:cc:70:2e:a6:92:3e:71:d2:a4:48:de:be:48:d5:f2:00:70:
e1:f6:71:01:f1:5d:1c:fc:f4:a7:a6:85:bd:28:bf:2b:ab:5e:
72:a6:6f:a0:da:e4:c1:17:23:e3:ce:77:7f:54:3b:34:37:0d:
39:07:8f:05:43:33:95:80:95:8f:41:af:65:46:24:d9:85:01:
a4:f8:a9:12:34:91:1d:9e:64:9c:fa:ff:da:fd:8c:d0:9a:e4:
82:f3:6e:0d:49:19:79:f0:96:54:69:16:6a:b1:74:41:e8:fc:
6b:40:21:10:f2:fb:b0:06:f0:ff:0f:6e:61:d8:a3:47:ad:10:
54:ac:17:3b:8a:ff:8f:28:98:94:c8:36:c3:5f:f0:c2:a0:f6:
e9:35:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:20 2025 by rpki-client