Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
File: RruCFbImbaPA9spVzHuoAOmt4qI.mft (raw, json)
Hash identifier: ziPIcEcPC0205ElkRqMqlfMAu1waeh5gVLphzmytEDY=
Subject key identifier: A3:49:7A:F8:F3:AF:69:E8:21:74:C1:B8:A6:0B:BF:58:74:DB:96:0E
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Certificate issuer: /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial: 019A247823041CC7015D796842DCB58D77A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
Manifest number: 1700
Signing time: Mon 27 Oct 2025 07:00:44 +0000
Manifest this update: Mon 27 Oct 2025 07:00:44 +0000
Manifest next update: Tue 28 Oct 2025 07:00:44 +0000
Files and hashes: 1: 9L0Co8CEy186G13kaYMinlb5Afg.roa (hash: 6p7nu1hIgCVQFvaFdpUf1fbcZ1K03G9ItG/q4By8N9A=)
2: E0Vqea0aWvL8BvXZCixWW4x1Xf8.roa (hash: YbPt+4+0edt07crfTPCARczh/UjImehgu5s1r3RYYLE=)
3: RruCFbImbaPA9spVzHuoAOmt4qI.crl (hash: wEC3SuGr+T/DosZ40BHxHq6z8FpXr7HSADwANOhLoCo=)
4: o4qJydU8QHB9yf5elCeoJvNBmoA.roa (hash: 2K8rsjnSWXQjx0NDAMp9U5sFUQZR7E/jK97Yg8CSOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:23:04:1c:c7:01:5d:79:68:42:dc:b5:8d:77:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Validity
Not Before: Oct 27 07:00:44 2025 GMT
Not After : Oct 28 07:00:44 2025 GMT
Subject: CN=a3497af8f3af69e82174c1b8a60bbf5874db960e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:2d:1e:64:ad:0a:04:de:44:09:b0:99:a3:
b4:8c:6d:d7:35:da:a8:e2:c3:75:cd:a4:5d:4c:ab:
2e:fd:85:3f:49:6d:13:1b:f9:79:2f:9a:d4:f3:a7:
4b:92:a1:af:2a:b9:e6:cb:8b:e8:20:fe:e4:f0:ae:
05:29:c2:d7:19:ec:e1:a5:48:04:a5:19:05:8c:d4:
bb:19:0f:e2:9f:f9:9a:57:e2:e8:c1:82:ff:3e:a9:
8a:8f:fb:92:fb:64:f1:ad:1f:bd:d9:d7:5b:4c:c8:
c3:6a:c1:69:6d:e2:2e:e8:a6:ed:30:dd:89:cb:70:
6b:c8:e6:87:71:15:b3:e0:5f:77:9a:3c:59:97:fc:
83:62:9c:4d:84:6d:ba:46:b1:9b:0d:60:fa:9e:c8:
2c:e2:40:fc:c0:b8:cb:f1:46:45:0f:87:a1:04:7a:
57:f9:21:7a:27:ff:b7:71:dc:94:a3:22:4a:e0:84:
cc:89:11:2d:ec:84:fb:dc:e7:5e:ab:59:9c:95:e8:
15:80:d2:dd:95:e3:ca:83:43:76:38:8a:07:b6:87:
ac:17:68:6f:b9:05:5c:02:80:bb:4c:a2:ad:35:ba:
cc:7c:ee:d0:15:d3:4a:5c:47:2b:be:59:f9:6c:8e:
38:cc:82:20:98:33:6c:89:19:f8:ec:10:9f:ba:df:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:7A:F8:F3:AF:69:E8:21:74:C1:B8:A6:0B:BF:58:74:DB:96:0E
X509v3 Authority Key Identifier:
keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:40:e5:be:26:9e:61:fa:98:ca:22:5e:68:e5:96:89:a7:8e:
eb:ab:08:47:b8:f3:8e:74:39:24:e9:d8:3f:e0:1d:d6:1c:bd:
2d:20:f4:55:7b:ba:e5:4c:bd:1f:cc:97:ad:40:c0:ec:d7:8b:
af:da:c4:8d:f8:98:bf:0c:8a:ac:18:bf:fa:67:8f:72:a6:cc:
7e:de:6a:eb:93:3a:0a:95:6d:9c:d2:b0:1a:dd:2c:da:8f:5f:
09:6e:51:51:58:f0:8d:ed:33:63:23:d0:3e:53:be:78:95:cd:
3f:8a:b0:73:af:fb:db:0d:da:49:b0:44:a1:da:32:9b:78:96:
48:5a:4f:00:52:de:ef:50:25:89:5c:ae:06:37:a9:fc:f0:4e:
44:39:79:89:55:5e:5e:b3:9b:1f:2a:f2:46:b3:48:99:aa:33:
bc:fc:da:dc:6c:41:65:b3:5b:9b:a6:07:95:b9:9d:23:67:fc:
e9:d1:3b:a4:37:0c:8f:96:62:cd:ae:d9:2d:f6:33:d0:d8:c3:
a6:3a:cc:4f:50:90:81:5c:fc:68:86:e8:42:93:1b:9c:7a:96:
a2:3b:ce:c9:4e:b3:82:14:99:dc:1e:3b:2b:1d:7a:54:18:c2:
2e:e4:cf:0d:d1:a4:90:b4:0a:a5:c6:12:aa:b4:f3:5b:e8:04:
ab:1a:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:08:12 2025 by rpki-client