Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: IsNT5x7g4NWj+YbhtL3ESYDvMdB3T6AYIYPnr5SHWek=
Subject key identifier: D7:61:EF:DA:D4:F4:DA:86:65:48:4D:7D:EA:66:09:06:FC:68:83:07
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019A50E30F4A70BECEA55E6A753CECBF88ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:00:48 +0000
Manifest this update: Tue 04 Nov 2025 22:00:48 +0000
Manifest next update: Wed 05 Nov 2025 22:00:48 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: A3JQ38ZU0sRk0YR1aNh6he86P5m5j9FUthPLYb1zDlc=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:0f:4a:70:be:ce:a5:5e:6a:75:3c:ec:bf:88:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Nov 4 22:00:48 2025 GMT
Not After : Nov 5 22:00:48 2025 GMT
Subject: CN=d761efdad4f4da8665484d7dea660906fc688307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:6f:cc:db:89:1c:96:4f:85:86:1e:43:c7:
b8:ee:3a:dd:3a:06:64:0f:ec:1d:ff:05:9e:5c:79:
38:5d:0d:c8:f8:dc:2a:80:e8:81:8d:8a:09:0c:d1:
69:26:22:13:67:e2:16:df:d6:43:33:9d:cb:2e:9f:
f9:8f:80:d7:b5:03:ef:5a:7a:80:bc:a3:47:ae:8b:
ca:78:fd:69:4b:0a:05:bd:57:d7:25:7c:0a:00:ee:
d5:70:3b:d5:14:41:8b:6e:20:6a:26:b2:d6:96:63:
ce:b7:38:e5:fe:da:01:3c:bf:56:fe:78:c2:40:4f:
7c:ed:59:eb:cd:0a:0c:f6:5b:6a:88:c2:1c:b0:03:
fa:66:b2:61:48:0d:5b:68:ef:a9:b5:a4:86:0f:33:
d4:50:23:c0:a1:40:0b:be:96:f3:8f:9c:22:5f:4a:
1f:3d:17:e5:26:3f:6f:04:b7:ac:98:04:42:24:2e:
17:ff:05:a0:5b:2c:28:1b:3c:44:0d:ab:89:1c:b3:
12:30:4a:52:05:8a:0d:aa:3a:3b:f7:db:71:b1:a9:
e0:39:6c:20:31:58:19:af:a8:05:38:bb:4a:5b:f6:
71:b4:8b:9e:3b:4f:0d:51:0d:29:35:60:48:ee:5b:
bf:23:1d:e9:cb:b2:cc:ae:e9:63:b5:59:3b:e4:09:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:EF:DA:D4:F4:DA:86:65:48:4D:7D:EA:66:09:06:FC:68:83:07
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:28:08:a0:8e:8c:25:87:fb:36:1b:96:c9:e2:80:bf:6f:01:
61:b2:e9:26:03:4d:b2:ff:16:3f:ec:d1:9a:b3:75:0c:b9:cc:
48:23:71:77:61:2a:df:3f:69:88:7f:c6:fa:86:9b:63:dc:6b:
d3:15:27:c0:50:88:c6:80:fa:bb:c9:cf:6c:81:02:65:6a:b9:
df:79:b5:5d:30:6a:d4:8a:49:e7:90:b6:fa:1b:0e:86:38:bc:
d3:0b:a6:ea:87:a7:21:2d:6f:2d:ba:4d:18:a2:c8:6e:f9:70:
45:16:a0:07:6a:33:ce:9e:3b:55:6d:44:51:b0:61:e3:f7:a7:
3e:89:af:80:10:35:dd:d9:a3:68:9c:9d:59:91:bc:2d:ee:37:
f8:4e:a6:df:ed:60:51:e1:7a:d0:b1:0c:91:9c:b7:86:44:f6:
0d:4c:13:cb:4b:09:71:99:6c:5a:02:29:cd:dd:7b:e1:07:c1:
ec:89:25:bc:db:37:0f:c1:57:fb:2b:03:4f:6a:be:ee:6c:22:
40:6f:fc:df:dd:69:dc:9f:bb:c2:cd:64:e4:03:fd:dd:c4:4d:
6a:19:16:6a:b8:9d:99:48:8d:34:0d:3b:fb:51:ee:81:59:f4:
9f:9b:5e:5a:a7:a0:11:86:a0:89:ee:4c:9a:a2:1d:3e:37:ce:
59:9b:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:06:22 2025 by rpki-client