Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: JgwUYTrtRftsj2ucDaR8r4g1Q0c9droP7+UkrjWG2D4=
Subject key identifier: 78:47:87:68:59:44:9B:EA:DE:AD:F5:AA:9E:BB:A8:4C:A9:8A:F2:FF
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 019A4A04EE3F252ABBFFA5462F600713F68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 1709
Signing time: Mon 03 Nov 2025 14:00:28 +0000
Manifest this update: Mon 03 Nov 2025 14:00:28 +0000
Manifest next update: Tue 04 Nov 2025 14:00:28 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: Ncfq4J9Cn1yewIBJIi5CuL1/VMU8XY+Ig4Y5V5Y6Xz0=)
2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:04:ee:3f:25:2a:bb:ff:a5:46:2f:60:07:13:f6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Nov 3 14:00:28 2025 GMT
Not After : Nov 4 14:00:28 2025 GMT
Subject: CN=7847876859449beadeadf5aa9ebba84ca98af2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:47:4b:7c:a6:47:98:9b:ec:2d:29:d9:32:
e0:5a:a5:e3:a6:4e:1f:3a:93:2b:26:e9:d2:44:80:
05:28:d9:cf:5b:84:ff:60:9a:4c:5a:06:d1:27:ec:
1c:e9:c1:69:7d:aa:3f:32:1b:9a:f9:72:eb:2c:f6:
4e:76:65:cf:1e:c8:b1:10:e2:a6:fd:22:f7:23:1a:
93:c0:00:05:8a:59:65:46:c8:af:02:18:3d:de:54:
c0:ab:9b:2d:86:fa:15:f5:2f:a1:74:ab:38:67:9b:
8e:7b:12:90:2d:3d:9b:8c:bd:e1:43:29:a4:b4:28:
41:78:6a:09:f1:ec:a2:e3:ce:31:93:d2:04:4c:63:
f6:82:be:73:29:d7:57:2d:06:43:cf:61:6c:c6:ad:
92:57:9a:50:07:53:a2:d5:31:c2:d1:10:3e:33:ef:
78:36:5b:3b:85:0c:a4:f4:e4:ac:c5:51:f3:2f:2d:
22:1f:9d:85:c3:3e:03:6a:8e:c1:0e:9b:79:d8:e4:
80:6b:67:de:c8:6f:51:9f:0a:cf:8c:3b:dc:6b:e1:
5e:31:79:35:31:eb:7f:5c:79:34:3b:e4:c7:92:f2:
28:d9:84:85:f4:5e:d8:c7:46:59:55:82:d2:3f:13:
d4:66:0b:de:af:cd:16:df:59:7f:af:e9:40:e2:32:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:47:87:68:59:44:9B:EA:DE:AD:F5:AA:9E:BB:A8:4C:A9:8A:F2:FF
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:3a:dd:bc:b0:0c:82:f8:45:f0:c9:6c:c8:cb:60:6e:0c:
71:5f:03:d7:a5:51:15:3c:e2:98:5c:a3:14:ed:db:8e:77:ba:
70:11:14:fa:e8:d4:28:c3:44:7a:b2:08:8e:a5:9e:a1:5a:6c:
4d:e2:11:9e:80:d2:11:4a:3c:59:e4:6a:b8:46:d3:d8:e1:4f:
a8:c0:29:11:f3:ae:c4:a8:30:8d:83:f4:e9:69:99:a3:ac:ad:
7e:1a:18:42:a7:c7:33:81:c9:8e:5c:06:31:a5:1d:3f:ed:8d:
ab:fc:a2:76:f5:b2:25:33:63:ce:53:dd:9b:a4:c2:c6:67:c0:
6d:2f:ce:e9:e3:5d:4b:8c:9d:f2:2d:19:e3:e8:d8:83:22:d4:
9b:d7:81:f2:da:89:c5:eb:a7:78:84:b0:b5:82:27:61:d3:4c:
56:07:0f:7a:fa:d9:b5:e7:df:37:50:6a:3e:42:7c:e3:74:38:
c6:5c:8d:75:d3:10:a6:62:5a:9b:86:63:f5:37:d6:ca:0f:ce:
0b:94:c1:3c:8b:0f:97:49:b9:3d:14:37:af:57:5c:ff:80:35:
47:4d:6a:2f:c3:2c:6a:a7:11:13:37:5a:1d:68:69:df:30:0b:
cd:a1:e1:69:56:ab:c9:e2:96:67:d5:90:dc:a7:de:bc:43:7d:
a4:ee:f8:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpKBO4/JSq7/6VGL2AHE/aPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYzg1YzM3YWQyNTI3NGM3MTJjMjQ0NzNlMDc4YWRjZTcz
MmMxZGQwHhcNMjUxMTAzMTQwMDI4WhcNMjUxMTA0MTQwMDI4WjAzMTEwLwYDVQQD
Eyg3ODQ3ODc2ODU5NDQ5YmVhZGVhZGY1YWE5ZWJiYTg0Y2E5OGFmMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYFHS3ymR5ib7C0p2TLgWqXjpk4f
OpMrJunSRIAFKNnPW4T/YJpMWgbRJ+wc6cFpfao/Mhua+XLrLPZOdmXPHsixEOKm
/SL3IxqTwAAFilllRsivAhg93lTAq5sthvoV9S+hdKs4Z5uOexKQLT2bjL3hQymk
tChBeGoJ8eyi484xk9IETGP2gr5zKddXLQZDz2Fsxq2SV5pQB1Oi1THC0RA+M+94
Nls7hQyk9OSsxVHzLy0iH52Fwz4Dao7BDpt52OSAa2feyG9RnwrPjDvca+FeMXk1
Met/XHk0O+THkvIo2YSF9F7Yx0ZZVYLSPxPUZgver80W31l/r+lA4jKICQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhHh2hZRJvq3q31qp67qEypivL/MB8GA1UdIwQY
MBaAFOPIXDetJSdMcSwkRz4HitznMsHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUt
ZGNlM2ZhM2ZiYWU5LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUtZGNlM2ZhM2ZiYWU5
LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkc63byw
DIL4RfDJbMjLYG4McV8D16VRFTzimFyjFO3bjne6cBEU+ujUKMNEerIIjqWeoVps
TeIRnoDSEUo8WeRquEbT2OFPqMApEfOuxKgwjYP06WmZo6ytfhoYQqfHM4HJjlwG
MaUdP+2Nq/yidvWyJTNjzlPdm6TCxmfAbS/O6eNdS4yd8i0Z4+jYgyLUm9eB8tqJ
xeuneISwtYInYdNMVgcPevrZteffN1BqPkJ843Q4xlyNddMQpmJam4Zj9TfWyg/O
C5TBPIsPl0m5PRQ3r1dc/4A1R01qL8MsaqcREzdaHWhp3zALzaHhaVaryeKWZ9WQ
3KfevEN9pO74Qw==
-----END CERTIFICATE-----
Generated at Mon Nov 3 17:52:35 2025 by rpki-client