Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: mgF2rLJ3T834VR+lhdK+BSImA3fZWvNoTcAGXhemkp4=
Subject key identifier: 14:AE:8E:61:E2:75:7D:09:4C:18:56:43:6F:FB:8A:54:AC:7C:C1:78
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 0199239FD1B1BE59B91208285D5CA044D34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:01:40 +0000
Manifest this update: Sun 07 Sep 2025 10:01:40 +0000
Manifest next update: Mon 08 Sep 2025 10:01:40 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: UqbEbmFE1YaJ2qoM1w82Q7Kkrgt7/m4vlahlmqTwx54=)
2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d1:b1:be:59:b9:12:08:28:5d:5c:a0:44:d3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Sep 7 10:01:40 2025 GMT
Not After : Sep 8 10:01:40 2025 GMT
Subject: CN=14ae8e61e2757d094c1856436ffb8a54ac7cc178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:09:ff:df:9e:2a:e9:a7:be:f7:3b:3b:94:
06:bb:c7:45:86:f5:e7:23:1e:ae:7f:eb:a7:16:16:
c3:a3:a9:a9:38:9c:16:fb:68:52:27:c4:b4:b4:58:
2c:b1:8b:81:ee:c9:03:ff:96:5b:1b:db:0b:2b:aa:
58:6a:a7:54:be:31:5d:3e:5a:31:2d:fa:56:f1:3e:
22:35:6c:14:a0:c6:69:b4:8e:64:6e:9c:1e:b2:92:
4e:02:07:e3:7f:f9:65:d9:6d:4a:8b:59:46:c5:8f:
f7:e0:c7:db:b5:22:a7:7a:c0:86:b9:2c:b0:f3:0a:
a7:8f:7b:68:8b:31:5b:c6:55:d6:8b:52:e7:77:a1:
23:07:1a:12:a0:aa:0c:35:0c:bb:c1:6d:3d:59:53:
d7:33:5c:8f:1f:ad:c9:49:74:29:39:65:22:2d:1d:
9a:af:74:65:93:03:e9:d4:27:cc:fe:44:84:2c:f8:
f4:80:9e:b6:02:e9:55:81:5c:cf:16:cc:25:ee:39:
ad:f8:3e:60:de:1d:17:71:0f:9d:ec:a8:09:40:30:
0d:21:9f:95:00:74:8f:61:ec:4e:09:f9:f3:db:bb:
23:24:12:4a:24:aa:38:e4:d9:e9:7d:23:8e:b3:b3:
97:2e:a1:e5:eb:c4:78:90:29:7b:09:5b:ca:86:e4:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:8E:61:E2:75:7D:09:4C:18:56:43:6F:FB:8A:54:AC:7C:C1:78
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:97:ee:3d:32:13:18:3f:a0:f4:33:35:cf:ab:62:e2:c2:16:
1a:a8:30:cb:50:70:7b:02:be:51:3b:e6:20:1a:40:61:d9:3e:
3a:4e:9e:54:01:4a:80:fe:83:ed:07:08:99:1e:79:55:8f:da:
a1:2e:05:7a:35:c1:a2:1b:af:71:64:bb:e7:e6:c1:9f:cc:7f:
03:fd:a4:08:98:28:6a:92:91:9c:bb:73:d6:f7:da:49:a0:a2:
c0:94:ce:7a:74:45:97:64:05:2d:f2:72:9c:f2:30:0e:c8:08:
0e:55:bd:db:dd:ce:f8:bd:40:9f:5b:c9:4b:dc:cd:e7:0d:9d:
82:74:74:dd:d7:ba:08:e9:c4:ff:f6:5d:15:e6:ae:82:64:6b:
a6:18:8b:8a:30:90:14:fd:84:31:b8:67:dd:75:80:52:47:3a:
43:a8:1e:f2:24:06:83:bd:9e:15:4b:b1:06:04:0a:16:58:c2:
02:d9:b4:f2:e1:71:81:7e:97:92:9b:ad:c9:34:d8:5a:58:e9:
f8:ff:b5:74:63:dd:35:15:d4:48:3d:d8:66:a6:a0:e1:9b:c7:
80:ed:26:eb:fa:e8:ea:ee:af:5e:5d:78:28:c8:b7:cf:92:c9:
27:54:c5:84:bc:68:88:4d:52:7d:d3:85:40:a3:d4:d2:e9:03:
56:c4:89:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:53 2025 by rpki-client