Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: XfpWTxprXHQTIE8H/+qcXjuC9fDQ/1S5gmQXaCVQP7A=
Subject key identifier: 12:A7:BB:76:34:F7:C1:6C:3C:12:91:52:50:92:B4:7A:4C:8F:CE:41
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019A51F559A33E64F059166A9F55F7CDDD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1716
Signing time: Wed 05 Nov 2025 03:00:25 +0000
Manifest this update: Wed 05 Nov 2025 03:00:25 +0000
Manifest next update: Thu 06 Nov 2025 03:00:25 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: J8IEAIcBqlw4iIifKRmFie9tUrNWf84ahrDRERmyrBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:59:a3:3e:64:f0:59:16:6a:9f:55:f7:cd:dd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Nov 5 03:00:25 2025 GMT
Not After : Nov 6 03:00:25 2025 GMT
Subject: CN=12a7bb7634f7c16c3c1291525092b47a4c8fce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:78:90:76:3b:ff:ac:84:6a:88:b2:73:40:
4b:54:f6:52:3c:8e:6d:23:75:90:5c:37:4b:c7:39:
70:db:1e:7c:d3:32:a5:f6:16:1d:2b:99:81:85:58:
3a:da:57:3b:98:cd:28:5f:e5:8d:28:b1:a9:e0:b9:
e5:db:81:06:96:92:c6:70:41:cb:25:66:d9:b2:0c:
c6:87:38:38:fd:a7:43:88:8d:46:02:5b:7b:7c:6d:
e9:d8:2c:76:e2:df:eb:75:69:64:d9:0c:f8:99:4b:
a0:cc:8f:68:ae:11:e9:dd:0f:ac:36:d1:9c:df:c4:
0f:16:3e:e1:02:db:5f:2a:8c:55:87:95:1b:9a:e7:
eb:2a:fd:30:a4:62:74:73:2c:7c:8b:04:63:fb:a1:
f3:4a:c4:8d:1f:dc:91:a1:9f:ef:2c:64:d0:df:fd:
2f:25:47:1d:db:55:e6:e4:ad:65:fc:0d:0b:82:8d:
2a:e4:dd:e2:be:f0:80:cc:56:63:c9:df:51:2e:1d:
a1:c8:6e:3a:07:30:0f:ef:74:82:d0:e4:6a:ec:1c:
42:92:06:d3:ab:a8:1a:f9:e4:44:3c:bc:19:eb:fc:
7b:16:b8:5f:05:f8:ef:64:d4:53:f2:c7:1a:ec:60:
54:c4:36:e3:91:12:e9:52:fb:bc:62:d1:22:2c:f7:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A7:BB:76:34:F7:C1:6C:3C:12:91:52:50:92:B4:7A:4C:8F:CE:41
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:78:a3:9b:4a:d9:17:8e:df:cf:30:38:43:8b:1e:ee:6e:
e6:b7:30:d0:61:12:2a:4b:66:91:d5:90:f3:84:5d:d5:cc:03:
1b:8d:f1:3b:eb:d5:02:8d:e6:7c:d3:a2:5d:a8:c9:3c:bf:b8:
16:68:54:e0:db:fd:29:34:b2:1f:87:9d:85:f7:14:a3:a2:a2:
20:1f:15:5f:8b:67:f1:f7:b1:7a:0e:ae:36:a6:bd:c2:e6:d1:
53:14:24:c9:d5:94:40:87:80:02:ba:5c:fd:91:91:0a:1d:82:
9f:86:3d:0b:f0:ba:3c:ec:f4:f8:f4:0c:5b:26:24:7c:b4:31:
0c:a0:c8:1a:6b:10:7d:03:41:31:a4:7a:6b:41:fc:0c:1d:4d:
aa:64:d7:25:b3:bb:5b:c8:95:3f:8f:62:4c:b7:9f:83:d4:89:
c9:76:4d:a3:cf:67:a7:79:6d:01:e1:2d:cb:87:f7:b2:df:ec:
a9:eb:ac:82:a8:de:8e:b5:91:90:4f:38:23:a7:bb:ae:0f:0e:
5f:0c:39:bd:74:89:9a:4e:39:61:78:ad:ef:24:7a:68:9c:2d:
c4:5a:45:19:83:f6:5a:51:e4:09:5f:d3:7b:c7:b8:c3:90:d8:
65:ed:b6:c6:af:c8:20:30:c8:e9:da:ba:0b:b2:c5:a8:a4:86:
b1:2a:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:45 2025 by rpki-client