Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
File: R_hjAUxgM_HYkkKz5elWFIn5wmo.mft (raw, json)
Hash identifier: OcpHrI96NqsRSmEQR+5DZyP/MpgoXlyDp4d7K6DeGYk=
Subject key identifier: B6:0D:FE:C2:E2:F9:5E:B2:C8:65:9A:C9:8D:C6:59:56:E2:10:6B:9E
Authority key identifier: 47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Certificate issuer: /CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Certificate serial: 019A55641947CF620665D73A53D6F65D5908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
Manifest number: F3
Signing time: Wed 05 Nov 2025 19:00:14 +0000
Manifest this update: Wed 05 Nov 2025 19:00:14 +0000
Manifest next update: Thu 06 Nov 2025 19:00:14 +0000
Files and hashes: 1: B9bjJc5Oae9PEKPXIiXsKsSs9WQ.roa (hash: KKshRszJ3ZpgC0vij+vjmzbzFw7agfxG++MlKjyF07Y=)
2: R_hjAUxgM_HYkkKz5elWFIn5wmo.crl (hash: CfXkaWJEOA5Tv4luKkvJLG+yimiPI8n3TwEEWLeDEPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:19:47:cf:62:06:65:d7:3a:53:d6:f6:5d:59:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Validity
Not Before: Nov 5 19:00:14 2025 GMT
Not After : Nov 6 19:00:14 2025 GMT
Subject: CN=b60dfec2e2f95eb2c8659ac98dc65956e2106b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:86:a9:d4:b2:6e:a3:6a:c2:58:13:34:1d:
1c:6e:00:6a:a3:ad:12:a6:82:8b:29:a3:da:27:b7:
e6:6c:da:b6:a9:dc:91:ba:59:7a:ba:6c:71:a5:86:
8d:7d:75:19:ad:00:bf:89:3d:4a:a7:41:06:d1:40:
b7:b2:a2:8e:59:80:da:0a:66:77:7f:a2:51:9a:76:
58:87:32:36:a7:f7:67:0a:d7:e4:d1:90:33:de:37:
a4:e6:6b:e0:ea:26:6f:d3:df:b9:7a:6d:0f:48:55:
40:2f:e3:44:e0:b9:ea:7c:3b:f7:6d:26:86:0f:98:
31:36:56:bf:f8:f1:f9:60:53:bd:04:cb:be:77:12:
63:44:93:43:36:24:19:09:77:34:b9:bb:9d:4a:07:
aa:4e:20:da:a8:ff:cb:7b:0d:6a:8a:62:31:a7:bf:
a2:4b:95:1c:6e:d4:a0:3d:8a:e3:fd:ca:df:1b:16:
4f:61:70:0d:f7:83:bb:4c:28:b2:a1:2b:d0:fe:90:
97:de:22:36:68:65:35:6f:da:a4:b7:4e:06:4e:4e:
0f:3c:16:8d:8f:8d:8f:e8:8f:5a:ba:54:e2:27:bc:
eb:0b:2d:de:75:e4:c4:3d:1f:a9:1a:fd:c2:ff:43:
bd:d5:e9:ce:f7:2d:39:18:34:eb:32:1b:e0:13:d4:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:FE:C2:E2:F9:5E:B2:C8:65:9A:C9:8D:C6:59:56:E2:10:6B:9E
X509v3 Authority Key Identifier:
keyid:47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:30:4f:ec:dc:86:60:cc:2e:88:b0:ab:e7:d0:2e:6c:06:ed:
d2:71:0c:8a:bd:37:5d:a6:3d:37:32:c6:b9:30:1b:2d:6e:56:
c9:f4:1b:96:44:6a:bc:f7:4a:d9:46:b4:58:cc:4e:1b:53:9d:
1f:4d:61:f4:2f:7b:78:b2:60:f6:13:76:59:dc:46:da:2d:16:
b8:37:a5:33:0d:92:c7:45:e5:42:0a:5b:90:82:cf:52:da:cf:
9d:5d:05:90:68:9d:1a:6c:cd:74:cd:f8:26:69:81:4b:33:40:
76:51:7f:5f:c2:a3:2a:97:a5:94:3a:2e:7e:06:2a:6d:cf:2d:
6f:15:7f:7a:e1:48:8c:fe:b8:e4:bd:99:9b:fc:03:39:e8:15:
69:a0:4b:bb:69:ed:22:ce:1d:0f:39:ce:97:05:36:87:c6:de:
84:d9:80:1d:64:43:5f:15:e4:7e:d6:4b:60:1e:09:20:a0:8f:
0e:91:0a:d1:62:1c:63:20:82:5e:2d:f8:41:54:ca:1a:db:a0:
a9:4c:f8:1e:94:97:71:b3:ad:f1:11:d5:b8:66:82:7f:dd:82:
08:e6:cb:25:49:a1:d6:a8:20:2b:df:3c:a9:5e:b2:79:09:2c:
23:e3:ef:2b:2f:61:ca:85:eb:9f:ea:72:73:c8:07:ee:a1:74:
39:38:38:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:19 2025 by rpki-client