Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: e4dT27ag7CH7tWx2qocBhopi+iTBjOO6VjP1P3QI4M8=
Subject key identifier: 78:35:D4:04:BC:3C:D2:35:E7:59:22:0D:B5:97:40:43:7D:DA:2B:0A
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019A4C6180F8CE0AFC828AE65BED1018FD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 1109
Signing time: Tue 04 Nov 2025 01:00:49 +0000
Manifest this update: Tue 04 Nov 2025 01:00:49 +0000
Manifest next update: Wed 05 Nov 2025 01:00:49 +0000
Files and hashes: 1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=)
2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: vDifdEpvoc+VyZk5G8qQVf9g2m20efpyNXWS+zHzRmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:80:f8:ce:0a:fc:82:8a:e6:5b:ed:10:18:fd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Nov 4 01:00:49 2025 GMT
Not After : Nov 5 01:00:49 2025 GMT
Subject: CN=7835d404bc3cd235e759220db59740437dda2b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:6c:fa:4d:ec:38:09:83:ae:8f:d8:56:db:
74:37:5d:1c:a7:ad:99:97:21:72:ab:fc:ed:76:42:
ae:1c:60:00:f3:d6:5e:1a:9f:83:9f:fd:81:d3:8e:
3e:4d:cb:69:5a:52:d8:ef:7e:29:3e:62:ba:56:89:
f9:6f:b7:b3:43:a6:e5:e3:c0:12:e4:12:39:90:02:
2e:a8:06:dc:06:6e:54:5b:f3:b5:84:4d:60:96:df:
18:4c:8c:54:30:b4:d3:93:9b:62:fc:e7:d0:7a:ed:
3c:97:4f:6e:fb:39:fc:e9:2d:b5:dd:ba:f8:60:da:
69:04:cb:2a:30:a8:25:f4:04:94:b7:f9:35:21:b9:
a9:fc:57:aa:5c:06:45:f0:e3:47:3f:d5:8f:e0:54:
a1:9c:ed:d8:f9:79:6d:67:50:11:e5:f0:a5:51:47:
45:07:a7:0e:11:d4:9f:3f:7c:2a:2b:92:41:f3:29:
0d:e7:d5:87:42:50:88:d2:93:5e:92:7b:ca:ca:c0:
e1:7d:b1:ca:c3:28:03:7c:bb:c3:f4:88:b9:89:52:
a4:c3:31:0a:72:6b:e4:d4:57:8a:a7:79:37:39:af:
70:89:7e:64:a5:35:41:0c:52:c5:5c:ba:c7:43:9b:
04:6e:52:78:9f:ea:44:7b:45:05:fe:20:27:a7:01:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:D4:04:BC:3C:D2:35:E7:59:22:0D:B5:97:40:43:7D:DA:2B:0A
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7f:ad:45:c9:bf:fd:4a:42:50:ad:da:9c:a7:d9:a1:05:cb:
9f:c4:25:64:03:61:da:cd:bb:cc:a4:65:e2:a3:b7:ce:db:82:
3b:1c:52:f5:b3:77:05:e4:11:84:57:37:32:d2:04:80:33:67:
b2:2b:0d:2c:10:fc:4a:82:84:93:70:1d:1a:20:0d:cd:1e:64:
a0:2b:f5:5c:4c:20:d6:c6:04:9e:e0:a3:d0:33:24:c0:b2:57:
c2:b1:a6:a3:e5:73:63:bf:3a:fc:3d:7c:1a:8e:8e:41:47:ae:
aa:56:ea:5b:1f:11:7b:6c:ae:cc:82:4e:33:ec:5d:34:84:11:
3b:f4:23:93:34:bd:4f:d6:df:b4:33:e8:f8:52:d0:45:e9:f0:
d4:7f:0f:e5:e8:14:1f:86:be:07:97:7e:cd:25:b8:a0:78:60:
44:58:95:23:df:85:1b:ed:ab:e4:be:f7:a5:1c:a9:25:98:e1:
0d:45:4b:47:fc:b1:eb:64:7a:1a:b3:8f:e6:47:4a:a9:f2:18:
da:65:38:ee:03:15:7d:4f:b8:fe:3c:98:4a:92:06:66:f2:68:
50:c4:d1:a3:ee:f0:eb:2d:17:da:ab:2f:1b:a8:3d:9e:90:fd:
49:ce:8d:24:b4:65:a1:12:b2:1e:47:8e:50:63:88:ff:56:99:
fb:49:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:14 2025 by rpki-client