Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: EA/e1/P4XF49w/Jp1Uvy4uCAImTe7tVoEoFnVig50lo=
Subject key identifier: 24:50:AA:3A:3F:8B:AC:A4:D5:7C:C0:15:DF:DA:03:94:96:EB:E3:CD
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 019A4EF4585F0FDD7AA8B055ED82C6F65B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: 3bjCEHAH+QwYJMp7XfzohDDALvwvmdxJmbzaaHQjD5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:58:5f:0f:dd:7a:a8:b0:55:ed:82:c6:f6:5b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=2450aa3a3f8baca4d57cc015dfda039496ebe3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:99:53:4d:1a:9e:d9:1b:42:cf:2d:28:79:
73:4c:36:fa:6a:98:11:de:d7:aa:1c:a6:e4:a6:f2:
be:97:51:b6:df:66:e2:52:ab:73:fb:88:ff:6b:81:
fe:d0:a3:b8:54:e5:18:c3:a1:f6:ae:69:e4:52:95:
5c:a6:8c:9e:80:19:e7:a8:6b:97:9f:4c:3a:f2:32:
a4:17:fe:8b:9d:55:b5:d0:ef:c3:a9:57:2a:a5:eb:
05:e5:dc:24:04:c7:fe:6f:66:cb:78:ac:37:d5:67:
c1:f1:cf:01:d3:60:05:e3:9f:bc:a3:f2:3e:8e:30:
d7:7b:73:0e:7d:0d:0d:28:eb:32:37:85:b8:67:c3:
dc:24:e7:1f:79:50:73:ad:f7:40:d1:9e:ea:30:41:
6b:94:75:a9:44:84:80:58:f4:eb:3b:12:46:84:55:
9b:2f:85:b2:4c:8a:d5:0b:75:61:74:81:9b:21:af:
75:62:3e:22:41:9c:26:0d:e6:a0:9a:65:9a:30:65:
b1:90:36:f9:e2:83:c2:ae:3b:d7:a8:a2:73:2d:b9:
22:8b:f9:5e:78:70:3e:90:85:76:4b:7a:39:f5:c1:
a5:5c:2c:b9:55:b0:a2:e2:b7:48:f4:38:0c:16:d6:
ba:df:1f:0e:bf:15:50:7e:51:05:16:20:6b:ba:1a:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:AA:3A:3F:8B:AC:A4:D5:7C:C0:15:DF:DA:03:94:96:EB:E3:CD
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f9:1b:88:28:59:e1:a0:d8:f8:ed:34:18:d8:02:53:9a:53:
c8:16:88:64:b5:06:78:0a:35:05:57:d1:6d:88:fc:d0:ff:18:
9d:b9:49:cf:14:54:d9:86:ba:bb:87:d7:9a:0a:ad:be:1c:1f:
94:57:ab:6e:25:fa:ea:a1:45:ef:e5:6e:11:1b:1b:dd:1f:fd:
82:11:e5:e2:d0:8d:d7:63:1f:26:d4:8c:28:0a:9d:75:9b:47:
99:fe:ec:8d:ce:65:9f:d8:ec:0a:22:83:7a:54:56:f5:d7:d7:
e6:0f:00:b4:e2:2b:32:22:7d:7c:ae:b9:dc:77:2e:23:da:e3:
c3:f1:4b:99:c1:ed:b6:c7:6d:1f:06:71:3b:38:ed:68:f0:63:
3c:e8:88:6e:ce:5f:ae:40:02:51:d8:09:6b:13:ba:9a:3f:fa:
c9:a6:d2:cd:f0:3f:96:ad:5d:ba:72:d7:b4:a1:df:96:7b:93:
18:b9:09:44:80:aa:76:30:10:01:2e:11:fa:77:8d:1b:90:43:
6a:51:61:b7:7b:09:6b:a8:20:d5:59:9d:3d:71:db:51:5a:e2:
2f:48:28:67:37:35:3b:77:df:01:30:08:9e:01:eb:c5:63:14:
04:e8:70:6f:3f:ad:4d:7d:6d:3c:e8:65:f7:85:86:b8:89:8f:
07:b8:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:50 2025 by rpki-client