Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier: OoRKTHUEzaCKNkot1oy8o28yWG+ceuuk4tWthcI2Nzs=
Subject key identifier: 03:4D:22:00:92:89:E8:FD:1C:61:58:A6:8A:C7:64:58:E2:EB:88:1D
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 019A4E18C120C9AD22826708DEC005A19B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:36 +0000
Manifest this update: Tue 04 Nov 2025 09:00:36 +0000
Manifest next update: Wed 05 Nov 2025 09:00:36 +0000
Files and hashes: 1: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (hash: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=)
2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: n+BRt62SNPowKRZZK82OoV2YRzgM9onVAkrGZInJx1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c1:20:c9:ad:22:82:67:08:de:c0:05:a1:9b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Nov 4 09:00:36 2025 GMT
Not After : Nov 5 09:00:36 2025 GMT
Subject: CN=034d22009289e8fd1c6158a68ac76458e2eb881d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:f9:41:86:28:fd:29:c1:71:4c:6b:80:d0:
15:eb:6f:5f:94:17:26:00:02:ce:55:85:a6:20:05:
29:f4:85:1c:4d:14:b1:41:c6:7e:de:60:69:42:74:
16:78:66:7e:69:4e:48:49:6e:73:bf:71:ce:0a:f0:
f7:0e:40:94:13:a4:b9:eb:64:10:80:22:0a:3e:75:
c2:33:9b:9d:83:99:30:26:30:4d:90:bc:7a:68:e6:
3f:58:16:c4:c9:8d:25:4e:16:52:bf:86:b7:0f:9b:
ad:a5:90:af:85:b0:fe:d3:9d:64:f1:1b:8a:cc:d5:
29:e5:76:b6:cf:68:31:93:05:9d:9e:ca:46:63:b4:
a0:5c:0c:39:b1:28:2b:1c:90:b6:4e:c2:6d:a5:ff:
38:ef:a4:7d:c3:ed:fe:6e:5f:00:90:a3:fe:b7:ed:
53:b8:9f:2e:65:69:dd:67:35:7e:02:fd:b3:dc:23:
56:95:25:ac:11:9f:de:f6:87:4d:d6:43:c5:76:f3:
2a:49:47:e5:ab:fe:4e:ce:26:62:72:0e:e6:86:c1:
db:86:5b:77:d9:13:0e:cb:62:27:26:cc:14:0f:f5:
df:0c:f6:ee:00:bd:31:a5:7d:b4:ba:72:67:83:00:
77:fc:85:55:93:e2:75:7e:7d:98:ee:dc:c3:7c:b8:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4D:22:00:92:89:E8:FD:1C:61:58:A6:8A:C7:64:58:E2:EB:88:1D
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d3:cc:30:6a:ba:0c:ab:9d:89:a3:96:d7:b9:33:54:4b:5f:
4b:bf:fc:4b:7a:5d:71:af:de:80:aa:81:3b:a2:6d:13:4e:e8:
69:51:9a:b3:8b:bf:d1:63:b1:d0:fe:28:d0:63:b0:9a:ca:e8:
a5:30:fe:01:e0:b6:f4:38:0e:73:49:2d:01:55:95:0b:4e:0a:
67:25:84:33:4c:a6:5b:bb:66:85:14:c0:3d:70:b5:a7:96:3d:
30:b3:67:c4:f0:87:52:60:72:1e:31:ad:0f:26:0e:08:58:5f:
c2:35:7e:1e:a9:91:0c:88:1c:e2:2f:51:dd:a7:0a:70:c3:a6:
fa:f6:cd:1a:fd:19:75:77:57:92:5c:4d:0b:73:7f:83:1f:5b:
10:84:23:f1:ff:d7:f6:3a:2b:79:e1:a7:1c:a6:30:41:f2:37:
be:c7:c1:95:d7:c7:dc:64:cd:25:10:2c:57:a3:9e:0e:1d:05:
88:48:bb:54:d4:92:f2:57:03:8e:8c:56:1c:08:a6:6b:88:3e:
37:77:ba:50:75:9d:f7:19:42:3a:c6:39:ab:5a:7f:bb:44:58:
66:ad:79:05:71:a0:d6:df:5c:a8:c4:75:63:bc:96:5f:ae:c0:
46:db:bd:75:d4:b4:13:32:13:39:fc:fa:6c:40:14:41:cf:2a:
5f:b6:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:18 2025 by rpki-client