Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: 0DeZnh7PX33iKtKisvfMfgoEJgSGXbarxUjNIQKu65g=
Subject key identifier: D5:3C:A0:19:CF:81:B9:FD:5A:35:FC:C5:3B:63:DD:02:C9:00:E1:09
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019A725CA12CA4E9834AEA70FE140F3407AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 16B3
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: wy6ubHvEy/zc4gR1OD0or890hopGhnVc0H/FVIv/CN8=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a1:2c:a4:e9:83:4a:ea:70:fe:14:0f:34:07:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=d53ca019cf81b9fd5a35fcc53b63dd02c900e109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:6c:60:92:e9:a4:32:95:d6:6d:32:dc:49:
c7:3e:13:71:0a:4c:d4:a9:7d:a0:31:bd:1d:23:15:
f3:80:59:03:6b:a8:5a:d0:d2:00:ee:4b:51:de:38:
d1:7a:ea:e2:57:f1:4f:61:2a:24:d1:ec:ab:d9:27:
59:c4:a9:78:d2:6f:f0:85:32:6f:10:98:58:4b:b6:
cc:7b:4d:ef:af:e5:e0:5c:c2:f4:1c:53:dd:c7:70:
7d:af:5f:d7:57:8f:c0:86:ec:91:d8:ca:84:1c:99:
5f:dc:b3:b5:0d:18:0d:98:95:4b:8b:21:ee:0a:2d:
90:3c:20:aa:53:06:88:25:4f:ba:f0:34:45:42:c6:
df:e9:8e:3e:9a:ab:4b:c2:2f:d3:04:8f:ce:02:30:
f9:3f:fb:f1:2f:4b:59:01:39:fe:0e:b9:a8:5d:05:
44:f4:c3:c9:3b:b4:d8:0a:0f:af:07:ba:2e:1c:e5:
9a:8d:6f:6e:45:50:72:ce:d1:a0:cb:55:21:e8:b8:
d4:48:c1:00:ec:8b:ca:8c:c0:49:92:f9:77:bf:86:
c1:09:7a:34:6e:01:36:ff:ad:2c:44:a2:97:c4:ae:
eb:09:a9:b4:b1:2d:f7:07:aa:72:fe:b3:4a:a6:20:
33:69:63:be:e9:69:d8:1e:9a:62:18:c8:49:0d:c7:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3C:A0:19:CF:81:B9:FD:5A:35:FC:C5:3B:63:DD:02:C9:00:E1:09
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:04:01:c6:a1:43:c9:7b:a7:33:6d:eb:d3:dc:23:6e:b4:36:
f2:d9:d2:05:8d:d9:f7:45:63:24:d4:a1:89:58:af:da:84:c2:
1a:a3:64:22:a4:53:d0:3a:32:71:c6:59:e1:27:81:a4:47:0c:
02:85:74:28:19:2b:1c:fe:ac:5a:04:49:df:0e:b2:2f:80:18:
76:43:b1:dd:ef:d2:46:3e:23:b8:f7:70:c8:23:08:ad:3b:9b:
1a:73:ea:f9:ef:fe:32:20:24:e6:e1:c4:0a:ea:92:f1:a4:78:
f9:11:c1:5d:4e:44:e6:2a:e0:9e:69:46:6e:d2:2a:33:b4:dc:
1b:94:20:ce:10:f3:d9:6b:1f:7d:12:bb:e2:25:c8:b5:15:77:
40:dd:4d:a5:9b:5b:20:84:e2:4c:82:4d:36:f4:97:0f:72:b7:
e3:b7:a4:14:8f:e1:5e:45:c9:5b:23:3c:89:e7:73:8d:94:93:
7c:07:28:ea:06:ae:03:03:7d:7f:8b:fc:0d:f9:57:0d:c5:45:
3a:c4:b9:28:34:65:71:9d:2b:ef:74:cf:3b:10:14:a5:f2:fe:
ba:aa:b4:2c:57:6f:a5:e6:4c:72:6e:d9:05:99:0e:31:a7:80:
f6:79:99:9f:eb:c6:e7:bd:13:db:7a:26:08:9a:2d:9c:3e:23:
4a:47:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:57 2025 by rpki-client