Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: omttLhxjP3/+EE4FvBFrUzBoszut09s61utmmkAgdf4=
Subject key identifier: 4B:41:B9:19:9F:75:6D:5F:D6:FD:4D:11:19:22:A2:86:11:67:54:DD
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 019A4C2A6CD07322C6C236FCD044FB191C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0A39
Signing time: Tue 04 Nov 2025 00:00:39 +0000
Manifest this update: Tue 04 Nov 2025 00:00:39 +0000
Manifest next update: Wed 05 Nov 2025 00:00:39 +0000
Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: sQfUSAdQ+RJqReIH2iGWJxHCIJ70yodil/Y74XPlVQg=)
3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:6c:d0:73:22:c6:c2:36:fc:d0:44:fb:19:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Nov 4 00:00:39 2025 GMT
Not After : Nov 5 00:00:39 2025 GMT
Subject: CN=4b41b9199f756d5fd6fd4d111922a286116754dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:38:6f:40:43:0c:f3:b2:18:9d:d3:b3:9e:
cd:46:5c:79:25:64:61:a7:f7:6d:8c:2f:48:e9:7e:
46:90:f6:4e:d5:75:8d:37:5c:08:50:cb:45:aa:cc:
bc:05:a6:b3:ca:c1:34:b1:d0:92:c6:20:87:6e:28:
40:ba:24:10:44:56:ae:7a:83:8d:85:e8:0a:57:81:
99:c2:d9:36:0b:22:6c:37:db:22:b7:23:fa:93:4f:
28:3a:61:40:8e:1d:fd:a5:bb:4a:71:7f:3d:6b:17:
f8:f4:33:d2:2f:9e:c4:ef:b1:63:69:c6:2f:39:38:
e1:2a:f1:e1:49:30:99:08:54:f1:6f:c4:2d:0b:8b:
f0:61:97:b0:d0:e0:93:c3:bf:6d:fc:a0:1f:29:70:
df:ef:ca:7a:9b:6d:4c:88:a1:35:ab:91:22:02:00:
7a:9c:cc:07:55:78:f2:50:6c:15:c1:86:5d:6b:50:
68:31:54:23:8e:6a:1a:d5:f3:c7:74:a6:c5:b7:c1:
ee:6f:1f:2c:88:6e:75:33:02:d7:ec:95:dc:36:2e:
ff:c5:2f:28:70:77:9e:33:43:ca:6b:8f:9b:78:f5:
24:f5:bc:5e:19:5b:77:14:de:34:81:f7:2c:f7:c1:
d3:9b:43:de:dd:31:e2:0e:e8:84:4a:d3:fd:0e:9e:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:B9:19:9F:75:6D:5F:D6:FD:4D:11:19:22:A2:86:11:67:54:DD
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:10:32:1a:70:27:bc:ed:44:80:8d:50:bb:e8:cd:2d:3b:4b:
8d:ab:3d:b3:9e:a3:a5:18:90:b3:ae:8d:8a:a1:91:b4:4b:a6:
af:50:aa:8a:32:7c:02:c0:bb:02:5b:55:00:b6:b6:ce:c7:0a:
e6:a6:67:2c:3d:3a:06:10:35:e4:be:7c:c8:e2:6a:84:c6:ac:
8f:c4:1b:bd:08:bf:45:4c:b6:8c:58:5a:a5:f8:f2:2f:87:96:
8c:77:71:e7:c3:fa:10:86:18:18:fa:9e:a4:78:ed:99:52:df:
80:d5:6f:24:4c:68:2c:53:83:c8:fb:54:e5:23:e9:66:f8:18:
2b:4e:f6:da:9e:da:17:da:9a:46:fa:2a:8d:12:6e:b5:d7:63:
a1:a7:cd:bb:e4:86:33:aa:b7:10:52:b3:d1:c8:47:6c:c5:50:
ba:cd:b3:70:67:b1:36:1b:bc:a1:a6:70:91:fb:c2:ef:50:3d:
7f:2e:c9:ff:9e:af:4f:58:f4:ae:bb:d4:a9:6f:2f:f1:a7:81:
67:0d:97:97:28:f4:39:60:aa:d1:5b:3f:15:46:28:c7:d7:fa:
7e:f8:d2:eb:db:77:82:45:70:9e:25:f9:5b:86:28:81:03:60:
6c:fa:7d:65:a2:4a:52:8b:19:83:1f:c9:c1:3e:a7:7b:41:e0:
94:67:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:15 2025 by rpki-client