Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File: Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier: JVJlvgC7IcooAcGp0ScnAIPtvxcaBuZhPDjMN3LQC1U=
Subject key identifier: B3:B8:CD:05:D2:41:F4:F4:4F:F5:3D:79:07:3F:E2:50:05:B1:96:BD
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 019A4F61EDD10CCB862159B8F0A3F7C6F7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number: 1090
Signing time: Tue 04 Nov 2025 15:00:09 +0000
Manifest this update: Tue 04 Nov 2025 15:00:09 +0000
Manifest next update: Wed 05 Nov 2025 15:00:09 +0000
Files and hashes: 1: IhchjAlH7wZG7kzQTy4JNv3HhP8.roa (hash: MX+poTln1XfrF458aN+rzETZ5ejTHBJDcPW84QX3+eg=)
2: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: p5Bj+HUJnc+cgzLFWCtP3VCRUYh8zFX3+rRScICPkh4=)
3: m7K3o6zKpvccw8S7oHzkq7OVkd4.roa (hash: GgfDl73eI/b08tNz06PPsn6okyEEe2tBCJUd3Gjwvrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:ed:d1:0c:cb:86:21:59:b8:f0:a3:f7:c6:f7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Nov 4 15:00:09 2025 GMT
Not After : Nov 5 15:00:09 2025 GMT
Subject: CN=b3b8cd05d241f4f44ff53d79073fe25005b196bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:9c:37:bc:bf:b4:46:25:73:25:04:8d:87:
7c:77:7d:cd:58:ab:47:03:17:89:87:0e:dc:8d:d0:
74:2a:78:e5:f9:37:a2:d9:30:3c:01:92:53:3a:ca:
cd:a4:3d:29:82:c4:db:d4:df:81:f1:42:54:1c:90:
3f:82:99:ff:1c:52:cb:62:2b:e4:43:44:db:31:97:
33:92:48:28:f2:b6:e4:38:0d:68:71:38:3b:fb:43:
20:d7:10:e1:04:1c:df:46:1f:42:9a:60:d0:00:44:
de:89:33:78:d7:cd:8a:6c:36:b5:4a:b9:7c:3c:1b:
bd:a7:dc:54:46:ea:f4:20:1d:1b:f9:e7:14:5e:12:
21:45:bd:12:7e:c1:dc:0e:3d:43:2c:d2:8e:c2:ec:
27:83:ae:5e:41:85:cf:53:14:1f:44:e4:36:da:44:
61:5e:b7:26:12:e3:4b:1e:ae:f5:ff:0f:3a:42:68:
c1:5d:6d:e2:73:5d:f1:71:43:20:f9:a1:b1:71:68:
9b:cd:b7:64:77:fc:02:ca:b1:3a:02:f9:84:c1:d2:
39:20:42:c4:75:c8:80:d4:b6:e3:6c:08:4c:ed:45:
8b:a0:c3:df:36:ae:65:7e:a7:88:29:ad:e9:ae:f3:
83:eb:a7:43:68:f4:e0:dd:a3:01:e8:f5:e9:7c:59:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B8:CD:05:D2:41:F4:F4:4F:F5:3D:79:07:3F:E2:50:05:B1:96:BD
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:a7:6a:1c:23:79:01:63:1b:7a:d7:27:fc:18:77:08:89:
78:af:aa:9d:aa:c9:8a:98:71:fa:4e:e4:78:2b:ed:5d:c5:d1:
ea:e0:7c:a4:6c:bb:16:bc:99:bc:0e:ef:3b:54:35:7c:61:0e:
8a:27:2a:4a:b8:f0:60:b7:2b:52:0b:66:44:04:6a:b0:9a:e2:
ee:40:8f:25:d8:fa:bf:c7:c7:54:b6:be:84:ed:0a:a1:4a:12:
cb:6d:e2:03:5d:e1:fb:ce:09:2f:e7:39:2e:59:68:66:4f:89:
b0:09:ed:5b:70:31:5c:60:81:c9:1d:c0:6f:6b:3e:44:e5:0e:
e8:13:91:64:13:32:90:a8:96:f9:a1:94:4a:25:3d:93:08:e0:
5f:9b:67:4f:d7:c2:63:d9:cd:06:02:9f:60:ef:5e:a7:6c:2c:
d5:53:57:e6:44:2d:56:9e:f3:eb:9f:5b:c8:bd:94:3d:e0:77:
d2:4f:7e:9d:59:84:3c:66:b8:d7:57:80:11:b0:c5:a1:a8:f7:
fb:b4:32:a0:38:2d:6f:b5:7d:5d:48:76:19:8a:eb:6b:17:12:
31:49:6e:bb:b2:7d:f1:61:c8:3a:9e:24:57:7e:c0:ce:29:50:
ce:80:cd:57:17:2b:54:2a:e5:92:88:22:2d:26:b2:fe:93:77:
3a:b4:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:23 2025 by rpki-client