Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: Sc5If+6dz7l0N0VovPml+sZh4CB14MXuykmnWxxuLko=
Subject key identifier: BE:35:EB:AD:BD:99:8C:2B:75:C3:D7:F3:F9:8D:AA:6E:A9:81:34:1A
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 019A4E18C858ECAAEB0F9AAA3D5663338ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: gMmkMcF6M7/VMd1pfJr9quOiKHHRJ4awrvA0MHdJSQA=)
2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c8:58:ec:aa:eb:0f:9a:aa:3d:56:63:33:8e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=be35ebadbd998c2b75c3d7f3f98daa6ea981341a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:fe:58:df:1f:64:b0:2c:af:56:9f:d2:63:
eb:b7:3a:f2:20:9c:27:e7:51:2f:09:02:b6:37:7b:
ce:23:a3:f3:7a:59:c5:3b:b9:b0:30:99:6e:e1:2a:
46:14:b5:51:84:12:e8:21:c9:bf:ed:fd:f1:5a:fa:
43:1d:54:e7:60:e0:f2:09:cd:90:4e:2f:71:69:50:
f5:d3:c5:d9:c7:29:77:0b:57:2a:f8:9a:45:2d:61:
2e:63:cd:44:52:6b:2d:27:41:7e:e9:bd:e9:15:27:
2d:30:a2:3f:5f:ca:5b:4a:81:5e:02:c4:bc:d5:6b:
22:f9:0b:29:f1:f1:67:14:10:94:e8:36:b5:d8:89:
7e:31:4c:f9:47:f6:7e:cc:e2:06:34:ef:2e:84:10:
ea:bb:5d:42:e3:8c:10:cd:78:7f:59:8f:16:19:4c:
6f:be:fe:26:3c:e4:7c:24:fa:10:ff:57:f8:78:38:
8e:32:1c:8a:15:3b:b1:2f:cd:44:70:4e:35:64:33:
e4:f8:24:17:96:2d:6d:24:12:d5:bf:70:db:19:cb:
2a:a7:f9:11:dd:f6:15:00:ae:e7:25:81:57:37:e8:
5b:84:61:7d:4f:71:3e:9e:07:62:de:f4:23:03:61:
51:f0:81:5f:6a:49:e7:c1:2e:a1:4c:ab:6c:64:cd:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:EB:AD:BD:99:8C:2B:75:C3:D7:F3:F9:8D:AA:6E:A9:81:34:1A
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:89:64:8f:d1:9d:f7:d4:3d:c9:88:78:ba:ee:53:79:9f:71:
94:28:b1:b5:be:1e:84:59:2f:92:d1:d5:e8:a0:ac:e9:b0:d5:
22:51:d9:dc:47:61:92:fb:a9:77:1e:36:f4:33:bf:03:d1:24:
98:89:0e:25:3c:98:bd:19:6f:58:2f:a0:35:92:56:a9:10:e3:
b5:db:76:ba:d2:a0:1c:eb:c5:6c:d4:79:5f:1b:a8:d9:e8:dc:
c9:20:d9:ea:1b:5a:d2:62:5a:03:2d:ca:8c:65:42:e3:49:29:
5b:68:c2:ff:98:20:52:0c:ce:f8:b1:95:b2:84:71:31:f0:4e:
de:60:83:14:26:3c:d9:36:18:b2:15:a9:18:71:1c:57:e1:f2:
67:b5:ee:38:52:38:8c:f1:d7:f8:0e:f7:87:5e:af:1c:e1:20:
8d:60:15:13:93:36:52:f0:44:f8:60:3d:c3:fe:4f:27:21:27:
ef:5f:1e:03:f3:33:bb:08:4d:e6:08:3a:e7:cc:a5:de:0d:55:
9b:7e:3b:f7:86:5c:8b:5a:03:e0:07:f6:7b:3e:bd:ab:69:d7:
a8:70:51:85:bd:a6:85:ab:46:0e:83:db:50:21:d4:f1:16:86:
61:d0:a7:9e:fd:48:56:85:d2:f2:df:f1:20:29:4d:da:c0:65:
64:a6:0e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:38 2025 by rpki-client