Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: 4SaELjlMzpkx7SZZ8SunTNbtA4d0qf/RWBjfCw6O9H8=
Subject key identifier: BB:26:4D:F6:12:BA:97:30:80:16:5B:2D:E8:05:F3:31:0B:12:93:D7
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019A1CF5AEFB9EA7D15626E1AE45ECA7BA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 0103
Signing time: Sat 25 Oct 2025 20:00:54 +0000
Manifest this update: Sat 25 Oct 2025 20:00:54 +0000
Manifest next update: Sun 26 Oct 2025 20:00:54 +0000
Files and hashes: 1: EshCzxO86qcL07tz5uc1JfugV7o.roa (hash: LPE3JzJOmXyXyccfoQvv4I0FBt2vRf2Wt20kp5/Xotw=)
2: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: Mh5aWphL+u1izowefdCpb+886pq87gsyigpLlINzOQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:ae:fb:9e:a7:d1:56:26:e1:ae:45:ec:a7:ba:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Oct 25 20:00:54 2025 GMT
Not After : Oct 26 20:00:54 2025 GMT
Subject: CN=bb264df612ba973080165b2de805f3310b1293d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:6b:82:56:5d:a5:58:94:c7:ad:42:2c:4e:
ed:82:8a:1b:97:72:e5:fd:74:40:87:ec:1d:fe:91:
ec:6e:71:dc:92:5c:b1:8c:ab:aa:0c:a2:82:7a:a6:
e7:04:0b:7e:16:ee:51:fb:69:7d:23:d5:16:da:a2:
da:1e:3f:17:cc:0f:75:9c:6d:46:ea:5d:be:4d:54:
b7:ef:15:3b:93:2e:e7:53:8d:6e:f5:5e:60:b0:5b:
73:ef:18:6b:40:49:28:96:84:21:56:8a:31:d5:43:
91:b5:be:83:ea:92:9a:f6:ed:87:8b:13:4a:aa:a9:
59:87:f7:6e:70:dd:f1:d6:67:6a:d2:0a:aa:ee:25:
2e:b3:f4:c6:14:d3:9b:02:9d:f1:19:c5:b2:59:9b:
ae:d9:f8:5f:9a:52:85:af:03:9c:06:bb:2b:cd:40:
cf:41:18:86:2a:a0:06:4f:00:9b:e9:e2:92:3d:e3:
de:e0:86:64:2c:74:9a:e2:32:02:ac:49:8e:b6:12:
3e:85:20:18:5d:c8:d1:a9:e4:50:2d:cf:9d:5b:17:
74:31:da:aa:d3:df:fe:c5:e6:f5:d3:fb:03:3f:a9:
99:b9:9a:f8:3b:45:67:ed:a6:61:76:12:a1:57:bb:
b8:bf:bb:18:74:c9:b6:c6:b5:a9:73:42:31:ca:e2:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:26:4D:F6:12:BA:97:30:80:16:5B:2D:E8:05:F3:31:0B:12:93:D7
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7a:37:ca:ba:bb:5b:f2:02:d6:11:47:bc:d6:3b:81:28:56:
b1:1f:cf:e8:9d:cf:c3:7b:b4:cf:b0:92:ac:f3:66:ec:90:36:
46:fd:d6:4c:a7:20:17:3f:d4:ba:c9:b4:96:66:14:f3:a9:29:
9f:bf:b0:a1:fc:b6:e8:84:54:19:3d:30:0b:d4:50:ae:6f:7e:
f4:86:c2:02:bc:18:3b:d0:14:f2:b9:b9:59:3b:f7:c1:93:c8:
ad:a9:dc:ee:f0:54:4e:9e:3b:dd:d8:ef:05:95:46:57:3b:7f:
72:8e:38:af:d1:cc:56:24:e7:fb:29:8b:d4:fb:ad:ca:1d:e0:
78:17:f8:f5:5f:a6:a1:6b:9b:46:f4:7b:17:79:3a:98:4b:b0:
98:40:ca:ab:b2:00:43:0c:f9:fc:f1:fa:e4:13:e1:44:53:19:
d3:84:3f:26:67:36:24:4d:c8:fe:c2:d9:ab:5a:c1:dd:be:28:
e7:c6:55:72:b6:4f:9c:bd:a5:4b:79:68:a3:a2:3a:77:95:63:
71:1f:50:b1:99:8e:8d:f3:23:ee:c8:d4:f1:61:9a:0a:36:68:
33:18:17:82:f0:3c:6a:30:dc:50:b4:0d:6b:2f:0e:dc:36:16:
a6:48:e5:bd:e1:23:fc:a7:7f:22:12:8f:f2:10:46:2d:b9:b6:
80:04:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:34:21 2025 by rpki-client