Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
File: RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json)
Hash identifier: A4VUh7ZqFJAsNq2cJVT04rRf+XMZCfa6qmfuDZun8kY=
Subject key identifier: F3:9D:37:3A:94:EE:FF:53:E4:C7:A5:AD:4F:56:C2:00:44:DC:00:66
Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
Certificate issuer: /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Certificate serial: 019A7149DA848F5D7E9BB814F4271E958438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: asE21E9NyzV65tL0v8ohs+vCImifFRbg9KSAdTVxJ1c=)
2: pFLpzrM-iV1fQ_hTxX2xOEHMjt0.roa (hash: aLstNITfJuEBD1I0LdnhTrgtI2g65BeTn/qvRZrCSW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:da:84:8f:5d:7e:9b:b8:14:f4:27:1e:95:84:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=f39d373a94eeff53e4c7a5ad4f56c20044dc0066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:1c:bc:79:09:f0:c0:41:4a:88:f7:fd:2c:
bd:ee:17:e7:56:6c:84:0f:f2:30:84:3e:cb:4f:a5:
d9:11:af:68:ca:20:84:1b:8c:68:08:cc:4e:ca:bd:
1d:25:da:72:cc:2b:a0:18:e8:6b:f7:9f:08:19:f7:
26:b2:02:3b:b7:8e:33:9a:36:66:c3:37:99:eb:f0:
28:b3:a0:10:78:88:52:d2:81:db:33:01:64:2d:f2:
1e:13:22:9a:c0:6f:4d:52:df:4e:f6:83:51:5b:d5:
a3:97:ab:53:de:b3:07:85:9c:2e:90:d2:c1:56:87:
e5:78:96:8e:4b:4a:0b:78:1b:15:d7:04:63:4e:e7:
61:a0:b1:d0:aa:c9:c0:18:31:f5:6d:e3:06:0c:61:
94:7f:9f:3c:8e:cb:7c:3d:b4:4b:a3:55:19:c4:22:
82:cb:0b:84:1e:9e:4e:1d:07:4b:21:39:b6:56:2c:
12:62:4a:ba:11:33:8b:48:1a:09:04:d6:55:3a:b3:
01:fd:ae:7a:b4:42:29:a7:ce:3d:7a:10:04:b1:7e:
d7:18:75:ed:e2:3c:a8:03:56:1a:da:7f:db:9d:36:
77:c4:5c:89:6b:5b:34:5b:75:3e:14:5d:2e:85:8e:
cc:09:eb:0a:ce:a5:46:33:98:41:16:65:5f:9d:78:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:37:3A:94:EE:FF:53:E4:C7:A5:AD:4F:56:C2:00:44:DC:00:66
X509v3 Authority Key Identifier:
keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:01:09:f5:09:5d:ac:98:f9:37:8f:93:1e:27:28:63:96:fc:
2a:2f:e9:64:49:eb:69:14:68:4a:32:28:2c:1c:40:64:7f:4a:
75:48:ad:f2:d9:ee:54:bc:b0:4e:9f:7a:00:ac:db:93:10:f1:
4f:4a:3f:a5:66:14:9e:f4:dd:53:98:9c:93:41:83:6d:00:63:
77:af:27:62:c4:54:6b:f5:cd:cf:97:47:f2:8d:b7:c4:c7:f8:
b0:ce:c2:6f:d6:3b:87:ce:ef:df:c0:ae:78:57:57:6a:5f:ec:
6c:bb:ac:73:c7:85:36:a8:8d:6e:a1:d5:dd:4a:41:33:6f:83:
aa:47:4e:14:ca:9e:b9:a1:0d:bb:5a:e8:d5:bd:f0:51:3e:da:
29:72:52:c3:c1:dd:80:1b:81:00:e3:24:61:e7:75:85:3d:df:
9a:60:53:71:0a:b3:92:ae:22:f2:3d:49:78:c5:91:ba:3e:21:
94:8f:0e:44:ee:bb:e8:bb:13:f3:1b:fa:98:03:f2:f9:ad:0a:
2c:2f:d7:eb:ab:2c:06:79:8d:df:fe:42:ed:c8:66:05:20:f1:
10:a5:52:22:6f:4f:4e:9f:49:84:8b:0b:b3:4b:e9:6a:78:5a:
5c:3c:74:3e:69:a6:da:4e:09:35:3b:98:60:4a:7d:76:0b:24:
0e:97:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:44 2025 by rpki-client