Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File: c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier: WiNp30AGWyumyOPKJZ13TVdJZKmpVrAgnq6PMEzAEJ0=
Subject key identifier: 3F:E4:97:81:8E:E3:F9:97:F3:A7:F8:5F:BF:6C:B9:26:C2:A2:35:29
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer: /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial: 019A725CD84AA90250C8B3F828CDCBF903F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: 3ktEzDL0WvhnsuJm2C6DIk-mHBM.roa (hash: OJtb++yW5+MtXw5QSymaUjcZIRPMQ11YahPbPvwPK4Q=)
2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: IVg/IjhJk7laNKy8qFuFaGCkqawqPy44u6zAUQEI3jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d8:4a:a9:02:50:c8:b3:f8:28:cd:cb:f9:03:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=3fe497818ee3f997f3a7f85fbf6cb926c2a23529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:2c:54:fd:06:31:24:cc:f8:34:d7:1b:fe:
91:d2:7c:d5:54:c9:4f:f7:5c:9e:1d:5a:ff:48:27:
15:f6:60:e4:10:5b:47:f1:71:31:a6:ef:b9:2a:d3:
a4:ee:4c:9d:e3:d7:b0:49:25:df:0b:2d:c8:3a:7b:
46:11:55:8d:e6:2e:fc:fc:22:44:3f:6f:0a:d5:c9:
42:73:72:70:bd:99:40:19:e3:15:46:b3:d7:0b:df:
1c:2d:21:aa:f4:a2:a0:28:fa:1c:c5:e5:ad:b4:88:
1e:90:dc:1c:16:8f:14:a6:37:b9:9f:f7:6a:30:d2:
bc:77:f6:fb:6f:88:cb:16:d5:ec:3f:7f:b8:b7:06:
0a:06:9f:82:26:92:48:30:69:40:52:cf:8d:a8:fa:
3b:d0:5b:b4:7f:75:e7:b0:18:6b:54:b4:95:e2:bc:
b1:c3:72:86:88:8a:01:9c:0b:b0:e5:5d:c2:b2:72:
b0:c0:ed:fa:17:1b:14:d6:f1:b2:89:30:67:af:d2:
dd:58:e8:56:cf:b6:ac:4e:12:ef:4e:8e:ae:de:65:
7b:08:be:25:44:8e:d8:dc:26:2d:16:7c:72:59:c5:
7b:27:83:af:b7:d1:99:d2:30:05:4a:24:c3:34:3a:
d9:ab:91:fd:b8:67:09:b1:88:7b:f3:75:e1:81:8f:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:97:81:8E:E3:F9:97:F3:A7:F8:5F:BF:6C:B9:26:C2:A2:35:29
X509v3 Authority Key Identifier:
keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2f:51:c0:37:ed:00:8d:e0:57:a1:3f:d9:7e:8e:a7:7a:12:
8d:1e:27:f8:da:5b:af:bd:d6:ed:47:65:c1:1f:52:37:9a:5d:
c1:cb:8d:12:b6:bf:77:54:6a:f8:c2:62:02:df:f3:e1:60:13:
d0:5a:12:38:c1:5f:b3:b9:e5:93:ac:b9:14:b3:dc:b0:ed:b4:
04:2b:38:4d:97:1c:1d:7c:46:93:89:eb:73:08:22:5b:52:80:
50:33:45:c4:42:cd:a5:5b:b4:7d:be:c9:cf:78:7a:00:2b:ba:
80:73:e6:26:2d:fc:07:f3:ef:43:8d:7a:d0:72:f6:7d:57:a1:
55:93:b2:82:56:a4:6a:19:3d:cf:74:1c:ce:ae:e6:e4:ce:c5:
8c:8c:ee:9b:bc:c6:e2:38:0a:c9:44:83:48:f3:fa:71:53:a7:
db:84:46:b6:9e:c3:6d:8b:9d:77:49:44:e3:d7:40:d7:e5:8b:
77:ca:a5:f9:09:b9:67:e1:f4:ba:9a:fb:54:8c:15:29:81:03:
dc:b3:30:96:4f:a0:89:a2:bf:8d:68:f9:74:2d:02:73:74:ed:
2b:c1:7b:70:ce:c0:e5:f3:73:46:9a:a0:5d:73:c8:69:6a:04:
56:2f:59:e2:12:d4:a1:db:e9:3a:38:f0:4b:49:23:4a:57:d2:
7a:d5:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:11:33 2025 by rpki-client