Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: pTSR5ZRL5EBfDlIt6Bp9/PqIklB6cvDw1LR0IN+ONvs=
Subject key identifier: 81:92:E6:CF:5C:58:E4:F0:D1:F1:C5:15:66:90:7C:96:C0:85:3B:04
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 019A541AE092F0F7AAD09F2B5ABD4FA2C269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 13:00:38 +0000
Manifest this update: Wed 05 Nov 2025 13:00:38 +0000
Manifest next update: Thu 06 Nov 2025 13:00:38 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: 6aH7MK4cbriNw1MeIEb5+3Kz9hlozj181NwFdtQy+RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:e0:92:f0:f7:aa:d0:9f:2b:5a:bd:4f:a2:c2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Nov 5 13:00:38 2025 GMT
Not After : Nov 6 13:00:38 2025 GMT
Subject: CN=8192e6cf5c58e4f0d1f1c51566907c96c0853b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:ef:b9:cc:8c:d4:d8:5c:01:50:93:41:8b:
3f:e1:7e:2e:f5:1e:0c:23:d0:f9:84:85:40:20:26:
1a:99:35:8b:41:15:50:ad:00:f1:64:ca:bf:bf:e6:
b0:59:e0:bb:7b:09:18:47:84:18:f7:79:6c:d5:07:
bf:38:8b:5d:67:f7:37:dd:99:31:29:dc:fc:ff:38:
d9:de:52:1d:00:f2:1b:48:7d:95:1e:a1:b2:2a:7d:
7a:79:c7:a1:68:ae:9e:7e:47:a1:95:62:dc:cf:66:
03:3c:eb:0a:f3:f1:f0:20:28:9e:77:55:26:63:7d:
2a:2f:2e:38:c2:07:44:ac:61:03:3e:26:84:3d:bd:
ba:91:0f:85:47:f9:08:e7:fe:0d:5b:fc:17:95:f5:
8e:99:db:3c:ec:90:c3:9f:99:a2:6b:a5:85:82:cd:
5e:14:8e:95:a8:40:da:c0:dc:1b:dd:1c:b1:cf:5a:
4b:e0:c9:5e:bd:ab:08:96:66:a3:b5:3e:35:1c:80:
d4:75:25:92:c5:3f:33:d4:97:b4:35:2e:54:2d:b2:
aa:b2:8a:66:e5:31:a5:f0:c5:5f:c5:01:5b:f0:97:
8c:b5:df:ba:3a:f9:c1:cd:64:51:03:c8:2c:18:06:
f7:40:37:4a:97:e7:2b:90:b6:f1:21:c2:4e:35:4a:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:92:E6:CF:5C:58:E4:F0:D1:F1:C5:15:66:90:7C:96:C0:85:3B:04
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e7:a3:1b:f9:6f:ea:67:1f:07:9f:d9:a6:17:f1:91:9b:d9:
45:a5:95:ad:f7:04:2c:d6:45:d2:35:19:22:a1:b3:dd:24:02:
8e:a7:5c:df:69:22:b0:ed:52:ce:ba:7d:20:dd:0e:29:ec:95:
7b:0b:f0:98:b9:f8:92:7d:f9:c1:b8:f5:f4:4d:a5:9d:f5:70:
ce:b6:5c:fd:60:1e:a9:67:d4:a2:c9:df:0b:20:4f:bd:43:ec:
59:ea:8e:ac:8a:89:4c:5a:79:56:6f:5c:a3:c2:11:c9:02:57:
06:8a:d9:c6:e0:50:95:7d:68:e9:19:42:62:1d:9e:03:42:63:
66:d9:c5:12:52:46:08:12:7c:bb:61:59:c0:7d:23:f2:3c:5b:
6f:d2:d9:9e:4c:b1:27:8a:7f:14:4e:5f:7d:f8:68:5d:2b:17:
e8:99:d6:bd:58:8c:2b:20:23:18:5f:d3:70:4b:ca:93:04:59:
ba:f3:e2:84:61:3c:44:e4:dc:a9:75:49:89:ca:a7:c6:ed:69:
ee:06:0a:b7:53:a8:a9:d6:d5:71:52:fb:de:e0:f9:18:73:93:
95:d8:b2:22:a6:03:17:c7:f8:29:6d:ea:c9:fb:9b:07:e3:e3:
e8:9b:e5:f0:1b:3e:81:b4:68:f1:06:5a:55:68:a0:a7:17:52:
81:d5:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:00 2025 by rpki-client