Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: YQn5GPA9FQS/2eGsLZHJwgoQjm/bwJvSDlOMQ+lahds=
Subject key identifier: C3:FC:BD:79:17:95:F7:61:6E:67:26:D2:46:C8:2B:B7:C2:86:3F:77
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 019A52D295CE8461CD343929F0F195C4D8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 1717
Signing time: Wed 05 Nov 2025 07:02:03 +0000
Manifest this update: Wed 05 Nov 2025 07:02:03 +0000
Manifest next update: Thu 06 Nov 2025 07:02:03 +0000
Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: GJ8RJKNtLX3HPfIRlMY12SN0JqLys4cCA1hMeyTfqGE=)
4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:95:ce:84:61:cd:34:39:29:f0:f1:95:c4:d8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Nov 5 07:02:03 2025 GMT
Not After : Nov 6 07:02:03 2025 GMT
Subject: CN=c3fcbd791795f7616e6726d246c82bb7c2863f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:91:fb:cb:40:b0:1e:03:d4:6c:0f:6f:26:b3:
78:e6:cf:7f:a6:5c:b1:20:29:98:67:a0:94:29:ff:
a2:7c:b1:33:e1:eb:10:cd:e3:ac:1a:3a:83:59:12:
9d:6b:f5:2c:b1:41:68:05:d1:c5:4d:0e:68:c9:ca:
ef:26:80:f4:92:0e:cb:c2:f2:55:93:86:ac:a9:12:
a3:08:0b:25:34:e9:d3:94:7b:7a:87:3c:f0:dd:81:
eb:7f:21:56:8d:63:a2:0d:6e:4d:4e:71:8b:3a:f0:
94:61:40:1a:76:15:e7:62:0b:de:5f:c8:9c:5e:3f:
c0:0f:9e:ca:3b:41:e3:42:33:a8:5f:dc:3d:57:54:
76:67:bc:0e:d7:54:99:3d:46:5a:ba:e4:ec:26:62:
3a:d8:50:28:95:9e:5d:1c:47:e3:35:c6:c8:3d:0c:
97:a8:74:0f:a5:06:88:b0:8e:37:b0:e4:69:2d:54:
c5:fe:f0:c3:e8:5a:d0:95:6f:8f:3f:f9:d4:77:98:
98:76:87:79:39:41:a7:d0:89:89:f9:a9:a6:80:2d:
db:8c:a3:f0:5d:b2:ee:a1:90:ab:89:f3:7a:9c:ac:
f7:48:e9:39:76:27:65:1e:40:f1:44:9e:48:60:fe:
37:2f:0a:83:c4:55:b6:17:67:d7:1d:4a:09:1e:79:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FC:BD:79:17:95:F7:61:6E:67:26:D2:46:C8:2B:B7:C2:86:3F:77
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e8:c1:4b:14:c6:d1:06:1f:bc:31:c2:dc:d6:5d:35:a7:21:
87:c2:09:15:b3:4f:bb:1a:89:92:09:30:65:fc:32:e6:5c:50:
1e:81:1b:25:42:71:7c:5b:67:6b:81:a3:60:1f:2d:ea:dc:73:
76:f0:8e:91:a5:ad:90:ca:09:8c:50:7f:47:a8:5f:d0:52:4d:
72:a6:28:97:b6:84:09:34:8e:94:3b:f4:03:92:c2:6b:55:c0:
7e:fa:47:1a:b8:48:bf:e8:74:ed:b6:ee:e8:34:30:ad:46:73:
7e:12:18:e0:9b:ef:01:6a:ab:75:e3:dc:35:7b:e9:07:c1:52:
5b:79:68:83:b3:5a:ad:0e:c0:2e:ca:5f:ad:cf:b4:af:ac:b7:
76:3f:63:db:ec:92:2f:40:8f:ed:b4:a1:fa:0e:f0:7c:48:8c:
d5:9c:f8:be:03:b7:27:23:5f:ed:40:75:81:5f:e6:69:56:8a:
86:12:33:bc:8c:45:1e:4c:63:2c:3e:a7:5f:f4:13:1e:fe:cb:
de:99:23:31:5a:fb:9f:75:67:03:6b:ec:bd:c0:5b:7b:57:11:
aa:30:87:bd:d4:d6:a5:27:46:cc:84:70:98:60:eb:e6:f4:ca:
3c:9a:92:5c:3e:9c:a5:de:79:68:12:b2:03:11:6b:8a:02:78:
19:f9:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:59:16 2025 by rpki-client