Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: 7EFwDHmeXi2vFExBxcbgUvVdWd9wqzpZR6PbPY2JIqU=
Subject key identifier: 08:9D:46:D5:05:45:F9:9D:11:19:15:35:82:EC:50:24:44:5D:17:4C
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 019A71B7CDFB5D1FF3DE18F935AF65DF7FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: hk+ib3L17hKRnVD8HWuPkNewCoDEhWGgHzdqN2IHIbc=)
2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cd:fb:5d:1f:f3:de:18:f9:35:af:65:df:7f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=089d46d50545f99d1119153582ec5024445d174c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:88:64:52:a6:27:a7:d5:1f:87:1c:db:8d:
4d:26:86:98:d0:19:c8:02:b6:a6:e5:cb:14:df:0e:
80:9a:ff:de:10:5c:10:ee:f2:62:ae:48:70:e5:ee:
79:98:81:f8:31:33:cb:11:3c:b7:c0:5d:c9:7b:82:
fa:ed:95:dd:57:65:27:e4:6a:89:b3:8f:07:11:2c:
4b:b4:f3:2a:3a:0e:72:b2:69:61:e7:28:42:07:6e:
84:9a:df:11:bc:60:b6:d2:85:4e:99:cd:26:86:e1:
ec:4d:70:7d:cd:18:7f:93:45:01:e5:b2:c1:63:cb:
2e:81:bf:a7:c9:e5:20:70:26:ff:f0:a9:b9:89:7d:
4d:08:ae:18:91:8a:44:b5:c0:9b:74:0f:5e:a5:f7:
71:8a:23:c3:15:f9:e2:fe:31:3b:6b:c3:47:70:21:
42:96:aa:9c:72:f8:08:af:21:3e:1c:4d:d5:42:9d:
46:c5:cc:67:4e:c4:4f:81:4e:4a:1f:49:99:b5:34:
15:0f:54:d7:59:50:80:a9:0b:d9:2a:cf:35:31:8c:
9d:8d:06:5c:ca:42:89:25:b5:fd:94:c5:6d:44:a9:
bc:4e:f9:da:3e:32:b6:4e:d3:95:c5:d9:93:25:5a:
84:2e:db:b3:4c:e6:73:e8:3e:ef:7c:67:29:0a:c3:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:46:D5:05:45:F9:9D:11:19:15:35:82:EC:50:24:44:5D:17:4C
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:70:4e:70:c3:36:53:99:e7:87:9d:bb:2c:8f:bc:5b:85:ff:
24:64:d3:04:66:52:6a:b5:79:50:3b:25:f4:3a:09:c4:42:71:
0d:e4:8b:22:c4:be:7e:4e:33:95:c9:60:10:77:cd:ac:cf:78:
3f:e2:f5:a3:50:20:d5:0b:e3:05:00:aa:ed:d1:c6:cd:e4:e8:
0f:9d:56:c1:e6:f9:c9:87:1b:38:3c:6f:3f:ac:89:aa:6c:fc:
15:28:c2:35:d8:19:b7:33:0d:88:24:7c:a4:8a:10:24:cc:85:
b2:ec:3d:6c:a3:f7:2e:72:63:ca:b4:6d:d2:89:75:c3:23:85:
c4:db:65:a9:33:1b:1d:de:a7:97:e0:72:40:a8:1f:25:8d:cf:
24:0b:49:56:b1:95:6f:44:28:eb:41:70:54:22:8d:0a:35:92:
ad:3c:a2:37:a0:fc:7a:03:32:48:ca:f7:71:92:6c:d3:ac:d1:
ef:6c:7f:7a:33:15:ca:1c:2d:39:10:85:be:0a:79:87:c2:cd:
bf:03:6d:8f:5a:09:87:01:24:26:d4:9f:90:63:a3:03:b9:36:
19:20:c6:39:ca:d1:14:96:7c:91:15:4d:f6:c9:8f:00:f7:7b:
6c:2d:13:0b:78:32:95:fd:4a:e0:73:ce:05:58:c2:6b:a2:c3:
7d:21:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:19 2025 by rpki-client