Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: GXGsTulKQNzQgARBmDsP5mfvNZ2LfySYWymz2I9G15k=
Subject key identifier: 26:6F:FA:45:AF:01:A2:03:40:39:15:69:6B:5D:A0:4F:42:D9:AF:1B
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 019A4F624BE5DA07B3B7117F161C15779CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 16CE
Signing time: Tue 04 Nov 2025 15:00:33 +0000
Manifest this update: Tue 04 Nov 2025 15:00:33 +0000
Manifest next update: Wed 05 Nov 2025 15:00:33 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: 4ZSI056PAJax+zAfVL2g4m8BT7kcWQKfrSqVeAs8ETM=)
2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4b:e5:da:07:b3:b7:11:7f:16:1c:15:77:9c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Nov 4 15:00:33 2025 GMT
Not After : Nov 5 15:00:33 2025 GMT
Subject: CN=266ffa45af01a203403915696b5da04f42d9af1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:60:e6:0e:63:9a:2d:45:28:a3:cc:72:a8:
38:b4:97:27:e0:96:c7:b3:71:5d:30:98:ea:ae:4b:
31:ac:e8:cd:fb:9b:df:6a:83:e5:c9:19:81:22:12:
07:c8:bb:10:93:a8:90:65:e3:3d:1b:c1:fb:39:8c:
b7:04:e0:20:42:ef:0d:49:58:98:16:04:12:d7:e4:
50:4c:bd:de:d5:e3:b5:9b:7e:f1:9d:3b:8a:6c:81:
64:68:34:03:1c:d5:95:4c:7d:2e:29:2f:8e:a3:20:
ac:93:d1:ab:17:bd:48:78:d4:b7:1b:4e:b6:0f:f6:
62:d8:d9:1a:cd:d3:db:0d:c7:7a:5d:89:8b:02:9a:
23:b3:df:54:1f:ed:ed:f3:ba:e6:50:ef:6c:86:6b:
85:80:42:cd:cf:97:ec:f4:60:de:7e:0b:93:7e:f8:
1a:e7:e5:02:8a:34:6e:01:95:fd:00:cd:35:86:75:
be:a0:cc:b9:04:a1:e2:c0:1a:b0:53:7e:c1:2c:f3:
a8:d9:16:38:48:5e:c4:af:4e:d4:75:f4:ae:81:04:
4e:7a:d1:85:2f:5a:4e:91:ab:77:b3:37:f6:ae:83:
92:84:90:a1:eb:43:86:9b:37:9e:0a:57:08:a9:ff:
39:bc:fe:7f:01:7a:79:a0:33:97:db:1b:6b:ab:25:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:FA:45:AF:01:A2:03:40:39:15:69:6B:5D:A0:4F:42:D9:AF:1B
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a8:e0:9e:1e:09:98:c1:9b:55:3b:a3:01:79:5b:5e:bc:6d:
82:0c:eb:05:07:55:d3:82:24:3f:10:f4:5f:17:03:13:a2:61:
32:05:3e:0d:e1:51:8a:eb:78:f3:0a:cf:d8:fe:a5:53:da:62:
05:68:e0:61:56:3b:73:12:39:b2:0f:04:dc:dc:70:3f:ff:e4:
71:0e:21:78:ef:e4:5f:53:12:f8:be:dd:e3:8a:98:76:a0:01:
d1:cb:c4:6c:25:88:8a:3a:56:7d:63:d4:92:a4:be:41:81:34:
ff:55:90:c7:1a:e8:e5:39:1d:2c:50:07:9e:4a:d6:71:c1:50:
bd:99:f9:56:ae:a6:93:98:89:2d:ef:65:17:e1:e6:19:de:c4:
ae:b4:0a:2d:93:79:98:ee:46:1c:9e:c4:16:58:ab:83:6e:08:
ce:4b:9f:6d:e9:ae:c4:82:6a:38:34:e9:2a:e3:c5:cc:d6:62:
c4:2d:6f:1c:f9:f3:97:50:af:ac:07:ab:27:dc:4d:11:6e:b9:
e6:35:cc:cf:ee:da:78:f9:9c:cc:56:35:af:e7:69:e3:a4:10:
f8:82:ee:69:d8:62:08:db:84:f8:fb:e3:a8:84:c7:ff:a4:97:
3e:53:65:bf:5b:26:57:86:aa:c9:1f:9d:4f:9a:2e:81:d3:6c:
c0:5e:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:09 2025 by rpki-client