Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: CMJ50u7ipzwstsEKINqY/GT7m7fwYX0az1uUg6nSM+s=
Subject key identifier: B0:D2:FF:18:43:CE:A6:93:4E:F8:F0:E6:9A:B3:B1:32:D9:C4:6F:23
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 019A7301BA47A8F6888F5635D9FDE3D9EBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 13:01:24 +0000
Manifest this update: Tue 11 Nov 2025 13:01:24 +0000
Manifest next update: Wed 12 Nov 2025 13:01:24 +0000
Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: 5/vPgJqpmOBDrV9TvrbO354chynhxsew0CXHgcuVRqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:ba:47:a8:f6:88:8f:56:35:d9:fd:e3:d9:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Nov 11 13:01:24 2025 GMT
Not After : Nov 12 13:01:24 2025 GMT
Subject: CN=b0d2ff1843cea6934ef8f0e69ab3b132d9c46f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:bc:73:0d:16:ee:13:ce:fc:86:d8:ac:cc:
00:af:bc:87:15:ca:44:e8:18:19:d4:1c:ae:29:ba:
29:90:26:aa:b4:2e:83:f9:79:e5:5c:67:24:63:8a:
65:76:cf:5a:3e:9e:9c:8d:8c:78:04:ed:57:ec:5b:
61:da:3e:de:02:82:1c:42:61:ff:8b:37:25:ab:d2:
41:42:2d:89:5f:85:35:94:8d:49:56:ff:cc:72:b1:
ee:f2:57:42:50:8e:48:0b:fe:04:26:5e:e2:44:c6:
84:dc:21:e9:59:54:99:f9:b2:e9:02:e8:89:46:82:
fc:b4:ee:f5:ff:a9:2e:59:40:34:c2:96:89:3f:9d:
81:eb:8f:57:27:cf:87:a0:26:15:4c:2f:fb:cb:1f:
95:cd:95:04:d4:b4:4b:9c:e6:21:a5:95:8c:3c:3c:
d6:4f:07:da:d2:78:8e:91:e9:24:c1:37:4c:b6:8a:
f6:0e:52:dd:b5:6b:36:28:23:d1:8f:17:52:09:df:
17:3d:e1:b6:6d:46:d5:71:25:53:15:c3:8f:d0:b7:
2f:8f:41:47:5e:91:ae:e3:ad:b9:df:4c:50:d2:9d:
81:fb:f3:77:db:51:22:48:16:27:f9:ec:1b:ca:cc:
c6:6a:b9:ad:eb:de:79:9f:4a:7e:34:2b:9b:2d:c2:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:FF:18:43:CE:A6:93:4E:F8:F0:E6:9A:B3:B1:32:D9:C4:6F:23
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a8:2d:da:88:73:71:e0:f5:dc:74:d0:1a:8e:95:ea:11:9d:
59:97:0f:f4:05:a0:92:5d:14:9a:0e:8a:55:71:48:f5:68:d6:
b3:c0:cd:7c:29:fd:bc:22:0f:17:e3:2a:ad:1f:62:28:b2:dc:
d2:74:03:ad:a8:8b:b0:db:47:6b:1b:c0:40:67:ad:f8:a0:df:
6e:7f:f3:2e:18:93:b5:d0:74:ee:aa:d9:06:5b:69:f6:c4:86:
6b:5e:45:fc:13:0b:14:90:22:c4:e8:56:d3:bd:be:8e:bf:74:
b9:5f:41:f7:e1:f7:52:32:b3:98:f8:62:2c:ca:bb:a4:8d:49:
61:4e:35:cc:df:e6:9c:a7:68:c6:95:aa:fd:3f:38:54:63:20:
1c:50:8a:8e:35:d9:7a:14:76:43:58:90:0a:10:6b:ac:8f:0b:
31:32:17:f7:c1:de:7a:a2:9c:12:ae:20:c2:fb:17:3a:c7:10:
c0:ee:9f:f4:a2:68:01:f8:8d:91:71:e8:fe:13:52:ff:7f:22:
59:0d:88:b1:e7:27:6b:13:6f:a4:14:31:a4:d6:3d:b0:3b:eb:
26:c5:15:3d:4e:4e:fd:27:df:37:85:f5:6c:e4:86:65:ce:ff:
3a:24:02:2d:f3:02:68:04:70:b1:af:89:cd:24:37:d9:9f:4b:
07:b9:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:15 2025 by rpki-client