Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: mMdy5XHum6fGBZbYjodSffsKnue8RdQT8Re1s6I1Vmw=
Subject key identifier: 2E:6E:47:33:3B:A7:86:B8:6D:BF:C2:9F:41:6E:21:9E:4D:47:74:36
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 019A725CEA7BBD75773C2907E49EF06BF78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0B48
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: 2JA-ZwNyhJfjy4iRgBz6O7qcilU.roa (hash: CuX1HDub6jnp4XmLQgh/JslHvidglBPgi73piILRqao=)
2: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: aoVvZ3naXpIyC/P0EPtJrgW3V6J04BUDI49FJ0Zk3ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ea:7b:bd:75:77:3c:29:07:e4:9e:f0:6b:f7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=2e6e47333ba786b86dbfc29f416e219e4d477436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:3b:a7:8e:8b:75:ea:f3:40:d3:ed:2c:56:
69:e9:3d:c3:e6:26:da:20:df:e6:05:e3:de:23:5e:
ba:a8:85:3d:7c:93:e8:ca:96:da:79:01:d3:60:f8:
3d:c9:0e:e4:3b:94:b1:02:f5:8c:89:f0:06:84:8b:
08:37:87:e2:57:40:5a:a9:39:dc:cb:2d:58:f7:01:
ad:f3:f1:0b:f3:b8:f0:d8:39:e4:d2:ae:55:29:d1:
1a:dc:4a:37:40:18:44:44:4e:8a:17:f1:40:0b:fe:
52:92:49:9c:ec:e1:8b:69:53:7e:af:d3:57:46:9d:
c9:95:22:e8:48:85:c1:e3:d9:ac:94:7c:82:bc:9b:
2b:e4:27:32:56:c5:0c:c7:40:5e:0e:84:3c:0e:e9:
92:6e:56:1f:11:7a:d2:b0:e8:41:d4:d2:8f:8e:13:
9a:12:09:50:e8:db:72:e5:bb:ed:6f:c2:ed:db:e6:
7b:9c:2b:21:34:b6:64:c7:22:dc:dd:c5:39:82:c1:
ae:83:88:40:29:19:86:1e:29:9b:3b:6b:6a:ec:48:
b5:9e:c8:0f:1c:0e:2a:ed:04:1a:2f:b7:14:93:57:
45:1d:b5:91:85:74:3e:f7:01:1a:46:ff:b1:72:e5:
09:36:7f:bc:dd:35:b5:ed:e1:79:fa:41:79:41:08:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:47:33:3B:A7:86:B8:6D:BF:C2:9F:41:6E:21:9E:4D:47:74:36
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:10:b7:88:93:2a:a0:4e:a9:62:aa:e5:8b:06:89:df:f1:3f:
7e:29:db:b0:a2:16:7c:f5:5b:7e:2b:31:db:d7:50:ec:b7:f3:
5c:e2:5e:f6:4d:1f:a0:a7:18:35:1d:aa:03:7a:dc:dd:ec:33:
32:85:bc:72:30:4f:c1:e3:89:43:ff:18:ef:3e:52:65:7e:ec:
d7:60:52:3a:4d:20:d6:22:af:40:e2:d4:0a:b6:10:aa:bb:a3:
85:8d:b0:50:03:6a:8d:b5:64:3c:c1:e5:de:50:62:a4:5f:37:
64:95:f1:ea:55:5b:bf:6a:81:3e:2a:06:d7:ed:ab:9c:33:95:
65:8c:f7:71:0b:42:dd:f1:65:77:5c:fc:d2:bd:8b:bc:0b:37:
94:55:9c:b8:86:c2:5a:fd:64:47:e3:86:b9:62:54:26:ac:3d:
31:b4:07:5d:73:a0:ee:e8:15:3a:05:88:7e:90:6f:42:4b:22:
33:16:87:fd:4f:af:1e:ba:1a:46:ca:b5:08:5e:6c:03:ff:b1:
93:50:f3:f8:d1:a4:bb:92:b1:fc:20:f7:65:25:da:8d:1b:e7:
23:01:72:1d:9c:d2:16:67:38:d0:a0:e6:65:1f:ab:6a:22:d0:
ca:9d:54:f3:07:ee:6c:fa:69:7b:f4:4f:72:21:52:53:90:b5:
fc:de:00:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:49 2025 by rpki-client