Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: EiQccsWizmbWUxwOe8LhPgBt3kx49LBjdv2dVxAwIGM=
Subject key identifier: 15:0E:46:A0:A1:B5:E5:11:A9:41:1D:2C:22:CE:01:F8:41:9B:C3:E1
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 019A4E18EFAE5DC3438F82F8ABC5808E522F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 048C
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: q6zMk+geBi3An741Wmijif6Z2T/LT2cIoF69GcUfx5E=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ef:ae:5d:c3:43:8f:82:f8:ab:c5:80:8e:52:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=150e46a0a1b5e511a9411d2c22ce01f8419bc3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:a0:e3:18:d4:7c:a8:dc:84:00:27:16:ea:
7a:e4:38:2c:44:4b:66:b3:54:0d:e8:c9:55:99:82:
77:e7:82:6b:fd:98:d8:33:0b:20:c2:e0:a2:dc:89:
2f:c3:d8:68:17:db:8f:83:95:b7:52:e6:18:46:d0:
da:3b:56:2f:96:6d:d9:74:14:a9:dd:ee:d6:49:2a:
d8:68:b3:09:c3:6b:62:e7:b3:9e:82:4b:0b:4e:0a:
86:e1:5c:2b:7f:51:ed:a5:e5:94:b0:5f:fb:af:07:
5b:5c:3f:7b:50:cd:1a:8f:50:1d:f8:95:8b:b4:ad:
45:82:33:d8:06:0c:26:9c:a0:01:64:5d:67:17:bf:
12:97:7c:1d:cc:d1:26:3c:8c:7b:cb:ba:5d:65:07:
b0:23:d7:22:1c:5d:de:bb:be:40:b7:1a:2f:8f:03:
a9:eb:7f:1a:af:77:c3:91:59:0b:b8:8b:dd:df:68:
45:4b:5e:57:f2:c3:75:90:7a:ec:f8:26:ee:5a:ef:
3e:72:1e:7f:07:3b:9a:88:aa:95:91:dd:51:2c:bd:
38:ba:7f:18:bc:93:39:e5:d1:cb:2e:27:b3:4f:06:
4c:9d:fb:a8:d4:29:b7:5a:00:5e:73:ab:81:42:c7:
d7:91:72:87:de:ac:c4:15:e7:65:c1:22:3d:1e:71:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:46:A0:A1:B5:E5:11:A9:41:1D:2C:22:CE:01:F8:41:9B:C3:E1
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c0:91:53:ce:94:e6:31:af:ae:4c:35:7a:21:bc:69:79:35:
97:b8:02:63:f6:20:d2:cf:a4:0b:9e:36:c1:9b:2e:3d:1b:17:
22:f2:22:d1:c1:b3:cd:d8:9c:2a:40:3d:74:58:9b:ac:ad:dd:
93:0b:07:ed:9b:55:c2:5f:72:b0:2d:1c:8f:4d:9f:07:b1:30:
30:11:b8:38:b7:8b:99:0e:57:74:6c:95:63:ae:18:75:06:be:
21:06:ef:06:46:af:59:3f:87:f6:bb:0a:4a:78:68:3d:20:f0:
fd:b2:84:3e:6d:8e:78:88:24:7a:8c:46:5f:35:6f:66:11:3c:
31:eb:cc:ab:ea:33:10:1f:12:a8:d1:ce:66:66:94:cf:d4:8b:
14:49:c7:22:99:27:e5:47:87:2d:f3:18:52:e7:20:36:4b:c7:
1c:28:8e:3f:cd:3d:e3:30:d6:25:5b:e5:85:a1:e9:fa:53:3e:
14:2c:01:a9:35:2f:ba:8b:20:0b:34:83:11:5b:b1:9a:56:47:
3a:91:79:3e:39:d0:1e:16:b2:0e:bf:a4:81:d6:e7:46:d9:8f:
8f:0b:97:2b:e0:88:c7:a9:6e:5a:d2:c3:fb:7c:40:5c:4f:e6:
31:42:0f:45:47:05:03:4c:5a:24:33:ef:38:6f:58:54:5b:29:
0b:a6:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:18 2025 by rpki-client