Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File: Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier: wZmOtgWTa0eGQGpWKo6a+0L/etG7UQnoONgrqkPRLRo=
Subject key identifier: FD:1C:10:A9:A4:15:61:78:E0:B3:1E:83:E1:8A:62:0B:88:B3:70:BF
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019A51199C14C5F5B6533367A43AA5A7F6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number: 15A0
Signing time: Tue 04 Nov 2025 23:00:24 +0000
Manifest this update: Tue 04 Nov 2025 23:00:24 +0000
Manifest next update: Wed 05 Nov 2025 23:00:24 +0000
Files and hashes: 1: Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa (hash: 4N+U7+PRWNjJVqJ2KygRwPrjK1Ien5sO5KXTSIsM0Ro=)
2: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: mLQ49FJSZc6TsTJAvzbIKuvJyKvn5XVGis9MDaKDOjU=)
3: jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa (hash: Lc1enY7HbrV71Kk7B0ntI6Fug2DvBrGWJwGE9EwyfTM=)
4: mbp15f0zxyh0dCrGSwd4xsonIIo.roa (hash: sfiOy/EdM6txH5f3xqJYHSVySCyvLRH3tGusFyVii6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:9c:14:c5:f5:b6:53:33:67:a4:3a:a5:a7:f6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Nov 4 23:00:24 2025 GMT
Not After : Nov 5 23:00:24 2025 GMT
Subject: CN=fd1c10a9a4156178e0b31e83e18a620b88b370bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:d0:e9:85:43:45:db:0d:99:bf:cf:f8:6f:
2a:c6:38:f3:01:b7:d9:4e:5c:81:29:fe:cc:5f:bf:
12:2f:51:39:e8:d1:3e:c2:b1:a9:15:c7:5f:5f:7c:
b8:e7:17:96:c3:7d:af:54:ae:9b:a3:0a:62:a9:ad:
02:9b:8d:aa:9e:39:68:6f:63:49:73:2c:76:03:92:
25:4e:c5:c7:f8:56:bf:39:d0:28:a9:82:3b:ea:62:
c0:e8:d4:b0:af:98:79:22:22:47:09:eb:71:c5:3f:
0d:ed:04:b0:61:b1:09:08:16:6b:35:45:64:15:b4:
b0:88:45:da:6f:59:86:b0:fc:50:af:b7:36:9e:8b:
83:11:ad:89:28:c0:88:5c:9f:eb:ea:a9:57:ae:3c:
0b:54:7e:64:bf:eb:94:b1:5e:2d:16:a2:c6:a1:72:
68:4a:e4:0f:29:d0:07:cd:65:64:32:52:90:84:f3:
0e:db:11:5c:62:67:26:a7:d4:8a:41:fe:aa:6f:0e:
61:49:9a:c0:85:89:f5:f3:ef:8a:8c:04:89:f9:ea:
f5:a9:9b:34:ab:0a:c1:88:0d:a7:9f:6b:40:18:fb:
2b:ec:c7:dd:30:2d:6c:11:c7:46:a8:93:88:77:10:
2b:d9:7b:f2:14:e4:d6:c6:1e:1d:d4:82:45:90:c2:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1C:10:A9:A4:15:61:78:E0:B3:1E:83:E1:8A:62:0B:88:B3:70:BF
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:68:eb:ab:be:11:b3:82:cd:85:52:a8:84:e2:18:26:f2:d0:
39:cd:c3:42:19:37:85:15:62:ef:b9:21:83:f0:a0:51:51:9c:
18:6f:a4:ea:ce:bb:72:5e:ef:0d:23:25:82:20:f5:be:c5:6a:
51:bd:ea:53:ae:0a:be:8f:a0:e9:46:82:24:3b:13:6c:9c:37:
26:25:c6:3d:cd:f1:33:68:de:a0:a4:5d:82:99:fc:1a:26:31:
ff:32:8f:ba:dd:13:8a:f3:9a:04:e8:8e:78:01:a9:27:d8:17:
79:91:3e:60:f9:a9:37:a4:4a:7b:f9:a9:de:92:18:fa:a5:37:
7b:ee:1f:8d:22:36:84:8a:77:d1:b1:2a:11:c5:f4:35:60:5f:
7d:30:fe:f5:21:4a:3e:4e:33:86:38:0c:f5:27:d0:c0:3c:84:
7c:5b:9c:e9:26:36:34:be:75:04:8f:87:4d:5b:d6:46:f6:09:
2b:0f:35:e6:b1:e3:ed:3a:fe:8a:14:23:d9:27:0f:8f:e2:26:
79:46:8d:73:88:c8:e8:b3:cc:38:d2:4c:29:84:e1:55:ba:0f:
2e:08:62:08:1a:88:f4:8e:4b:b5:10:1a:4b:bc:08:97:0f:cf:
0b:df:8a:85:a6:00:fc:5e:ca:cb:98:e9:27:be:d4:3e:d1:66:
f4:88:99:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:52 2025 by rpki-client