Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: UBJL2DirGcVQEHVXeUcMHihaeQfVXaL5rw94YadzGxM=
Subject key identifier: EE:4C:24:A3:C5:D0:25:75:DB:B6:F0:4B:83:C2:6D:1C:C6:26:83:A0
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 019A4F629E9EBC3F175E4F63EE12AC2EE478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: z2TbbNzN4ZM/DLHkRBGMxoAXDYYoUuT1rK50EzgpCkU=)
2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9e:9e:bc:3f:17:5e:4f:63:ee:12:ac:2e:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=ee4c24a3c5d02575dbb6f04b83c26d1cc62683a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:ff:bf:7e:2d:2e:58:a8:e0:14:be:44:77:
69:a3:fd:9f:16:8f:9c:6a:a1:2c:84:44:8e:ed:02:
26:1d:0d:93:05:83:84:c0:ab:ed:01:57:67:a5:6d:
b7:dc:46:a7:0b:00:3f:d3:5b:1f:a1:bc:2e:38:fb:
ce:f7:8c:11:94:40:20:f9:22:7d:85:29:71:8c:56:
e6:47:55:d2:5a:2a:78:47:6e:43:ec:fd:60:af:a2:
59:7c:2a:93:8f:6c:f8:21:13:00:85:4a:7e:ac:ec:
df:be:84:49:61:83:db:cd:2c:69:ea:6a:74:af:3e:
34:e3:f0:b0:99:4f:89:5c:6b:07:48:ca:17:27:a4:
e3:8a:8c:74:3e:e0:18:97:9d:68:78:2c:c3:1c:cd:
c7:58:47:67:bf:24:bb:af:19:d5:86:86:be:37:da:
bf:5f:38:7f:12:e5:c7:10:a4:63:aa:be:8b:a1:0c:
e0:1d:05:c2:5a:37:ee:5a:21:59:55:15:d0:5e:63:
02:34:9e:45:c7:ec:3c:2c:cf:b4:93:0f:f1:cd:92:
c7:fc:46:1f:d6:84:b2:1f:71:26:a2:8d:93:87:e4:
62:8e:04:cb:52:ad:0a:53:ba:e7:fd:16:ed:21:0f:
20:09:c1:c8:7a:c7:36:8f:e6:82:59:66:43:1a:04:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4C:24:A3:C5:D0:25:75:DB:B6:F0:4B:83:C2:6D:1C:C6:26:83:A0
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d1:b2:73:35:ae:c6:31:98:18:dd:dc:d7:ac:c0:63:b7:ac:
7a:d7:37:69:b1:b0:c4:ea:f2:ec:13:aa:d5:de:3d:eb:52:44:
18:c7:da:5b:58:45:f5:46:8e:8b:3e:cc:61:e8:71:7d:4b:58:
be:8d:c3:a7:0d:19:9a:03:ba:2a:c6:a5:8d:ea:f9:77:88:5c:
fc:1b:f1:be:51:df:ea:a3:82:7e:8d:36:f7:64:10:65:2b:ec:
62:7d:aa:bb:75:38:b6:ee:3a:b0:fe:81:51:82:03:98:77:1a:
8e:03:e6:71:28:90:36:3b:14:28:3c:05:74:76:d6:cf:96:94:
8d:fc:a5:8f:04:f7:6c:44:09:ee:e4:7a:b4:d1:9e:b0:89:58:
67:95:57:4c:11:a7:41:97:ab:0f:0a:34:61:14:48:27:a9:51:
43:09:7d:ef:9c:34:70:9c:7f:06:10:10:8f:b9:8e:e3:a4:8b:
c2:c3:a2:5e:1d:ea:d8:1f:f8:e0:b4:7d:6f:6b:f0:72:f8:c7:
66:08:35:28:bf:02:c5:aa:ec:35:4c:74:56:13:46:cf:16:75:
5b:74:47:4d:4a:ab:82:ab:bc:de:f7:95:c7:25:87:51:28:f8:
81:c4:58:10:0b:f4:72:33:bc:f3:72:e0:f3:2a:b8:10:d7:ed:
2a:43:29:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:38 2025 by rpki-client