Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: Bl1NK6PFPngU8XcV7sQzRJUpm8p82oRSIVsbwppGEHE=
Subject key identifier: 49:99:69:F1:FF:89:27:27:7D:F3:61:2A:36:59:FE:9D:44:FC:F5:64
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 019A4E8699B6932CD949CBBEDCCE549B5103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:35 +0000
Manifest this update: Tue 04 Nov 2025 11:00:35 +0000
Manifest next update: Wed 05 Nov 2025 11:00:35 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: PHmIlcJAMKaUCf176lVhWz-T4Wc.roa (hash: bNQSW/1JZ77X2TCkKdD1g52s5lNQ368QaQCo0ZhUqTw=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: gFKGaEC3t9V2D54gakiN0mZyzpXKCwY1ev8txY+kNJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:99:b6:93:2c:d9:49:cb:be:dc:ce:54:9b:51:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Nov 4 11:00:35 2025 GMT
Not After : Nov 5 11:00:35 2025 GMT
Subject: CN=499969f1ff8927277df3612a3659fe9d44fcf564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2a:20:9a:df:fa:66:7c:da:37:17:33:ea:7a:
08:5f:9d:a7:b1:8b:be:bb:a9:32:54:36:5f:6d:46:
9f:a5:87:c4:c9:95:60:c3:e3:c8:48:29:50:36:31:
fc:61:00:43:ae:b8:ca:4f:b1:26:ee:e7:73:c4:2c:
0d:c6:40:c2:29:4e:11:5d:7f:06:63:65:10:62:43:
61:d6:11:af:6c:b0:5b:a1:03:8d:2d:7b:25:22:e0:
19:59:dc:df:6d:c2:b3:84:c4:ac:61:03:f4:be:09:
f8:8e:4c:22:16:aa:74:6a:86:0f:cf:0c:24:f0:4b:
cf:47:80:8a:a5:67:ad:37:53:02:70:29:ae:54:81:
36:cf:37:d9:78:c9:41:a4:e2:b9:2d:05:0d:2a:e4:
08:f3:e7:9b:2e:e0:bd:67:42:7d:0b:2f:fe:0a:57:
ea:d7:34:ff:48:4d:86:c8:db:2e:46:c7:c0:f4:b7:
42:6e:d9:a7:bf:61:e1:dc:18:ce:07:46:71:4d:39:
e7:21:4c:00:bf:0a:c0:be:54:06:9b:8f:b8:fb:61:
b8:08:91:cf:ea:f2:c1:ec:74:42:74:be:d6:95:bc:
0a:62:64:d7:5b:7c:fa:94:cd:1f:6a:2b:2f:42:46:
9d:36:61:da:c4:64:38:48:71:47:0a:54:47:25:58:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:69:F1:FF:89:27:27:7D:F3:61:2A:36:59:FE:9D:44:FC:F5:64
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0d:4a:53:cf:6b:25:f0:9d:06:12:a0:30:b4:29:c7:0c:9b:
25:2b:00:88:3c:86:c1:a1:3f:b3:ac:a8:1c:97:0b:1e:10:b2:
da:1b:de:7d:4c:d6:33:79:1f:7f:19:53:87:1f:48:d3:58:ab:
f5:03:05:7d:c8:2c:25:01:33:41:d4:52:37:5f:db:89:ba:b5:
b1:5f:fd:40:b8:18:98:fe:42:89:9e:a0:6a:47:39:c5:23:fd:
12:fc:30:c7:52:73:59:7c:9f:e6:7b:92:b6:17:e4:9f:28:e0:
4a:a9:90:85:63:5d:45:ab:72:5a:4f:b0:75:7c:1d:a9:15:dd:
c9:37:6e:a1:62:e7:72:a1:3e:34:fd:48:a0:c5:59:48:9b:99:
b2:ed:e2:60:7d:e1:06:30:a2:cb:d1:40:07:21:e9:53:90:db:
81:73:16:94:af:6e:d7:29:6d:d0:8d:b0:fa:6b:81:c6:8f:52:
d6:1e:1f:90:62:4a:90:ce:13:75:e1:bc:2c:ad:72:97:64:ed:
0c:6a:09:ba:99:6b:4f:84:cf:f5:2d:c5:a0:c5:04:c0:70:56:
57:9b:60:b1:a6:94:bf:a9:8f:b3:bd:6d:06:c7:a2:bd:07:8c:
b6:c7:8c:aa:90:d2:e2:ea:44:ae:aa:b9:51:3b:2e:98:0f:03:
b5:4f:ff:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:25 2025 by rpki-client