Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
File: R_hjAUxgM_HYkkKz5elWFIn5wmo.mft (raw, json)
Hash identifier: ha3q7QzXumXxHRvokRfUl2zjlpfVYHKPAHGAY92MvCc=
Subject key identifier: 00:77:27:E3:34:71:17:85:D6:1B:3B:4B:74:C5:F7:31:85:52:2C:D9
Authority key identifier: 47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Certificate issuer: /CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Certificate serial: 019A725C6620295678FA7B196C46507076D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
Manifest number: 0102
Signing time: Tue 11 Nov 2025 10:00:49 +0000
Manifest this update: Tue 11 Nov 2025 10:00:49 +0000
Manifest next update: Wed 12 Nov 2025 10:00:49 +0000
Files and hashes: 1: B9bjJc5Oae9PEKPXIiXsKsSs9WQ.roa (hash: KKshRszJ3ZpgC0vij+vjmzbzFw7agfxG++MlKjyF07Y=)
2: R_hjAUxgM_HYkkKz5elWFIn5wmo.crl (hash: 8b8k7GxIkbauUDD/Z3a7Pub8PKrJR3HWvIT9sR0oST8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:66:20:29:56:78:fa:7b:19:6c:46:50:70:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Validity
Not Before: Nov 11 10:00:49 2025 GMT
Not After : Nov 12 10:00:49 2025 GMT
Subject: CN=007727e334711785d61b3b4b74c5f73185522cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:db:66:e0:34:6b:8e:a3:bd:24:81:20:f6:
db:86:9a:e2:ef:1e:9c:26:de:df:fb:ec:5d:24:8b:
b5:38:f1:b5:c0:4d:50:2f:de:ac:40:2e:d4:19:af:
22:26:fc:3a:81:f1:38:ac:7f:9b:33:c2:bd:ba:db:
5e:d1:97:2e:f6:6d:77:f2:f2:25:67:e7:7a:45:71:
48:e5:c3:52:6f:da:39:a4:88:7c:a1:cc:4e:9e:3b:
2b:2a:3a:7b:98:27:42:0d:fd:ae:cb:b8:2c:e4:eb:
be:35:db:6d:0e:8b:16:fa:f5:3c:9f:5d:30:61:bf:
65:38:4e:23:c5:4e:27:bd:af:0a:48:40:30:2f:24:
4d:cd:1f:f8:9d:d2:7a:ef:55:56:15:64:1b:4b:cc:
fe:e9:0a:b7:d1:91:e5:40:ef:b7:39:e3:99:0a:f8:
fa:3b:c0:dc:e2:08:85:cf:5f:6b:11:a1:e5:fc:9e:
7a:28:af:d2:82:12:63:bb:57:d4:94:ab:62:fc:36:
b8:03:40:f4:95:e0:0c:35:a7:9c:dc:05:02:1a:bf:
48:b3:8b:09:19:fb:4d:93:a0:38:83:9c:5e:fc:7b:
9d:39:44:f4:2a:b1:55:89:3b:61:42:50:08:87:53:
7d:0a:dc:74:67:61:93:3b:dd:9e:ed:9b:15:52:c3:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:27:E3:34:71:17:85:D6:1B:3B:4B:74:C5:F7:31:85:52:2C:D9
X509v3 Authority Key Identifier:
keyid:47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:8e:b5:2a:89:3b:b3:a1:81:a1:65:77:ec:2c:cc:c8:0e:fe:
3c:54:4c:e4:6e:a0:db:54:cd:65:4f:54:d0:c6:d9:79:27:3a:
50:09:f3:85:b3:18:38:dc:a2:d8:d0:20:b7:fd:e4:07:08:28:
4d:58:51:a6:f3:cd:c9:95:f1:ac:f8:de:a9:a8:41:d3:1d:b9:
a4:d5:2d:b0:93:37:68:e1:2e:df:d8:1e:05:4c:02:4d:6c:10:
de:b5:2f:9e:12:ff:ca:ec:03:f3:d0:f5:6e:db:fe:99:ec:e4:
d6:41:ff:8b:b0:ec:5f:aa:33:68:0e:d5:53:c4:32:f4:52:7e:
77:78:c0:93:8b:f5:f6:70:e6:75:a1:43:df:08:f6:64:37:1c:
8d:ea:18:c8:af:3e:ce:f0:d8:cb:40:43:c1:a0:92:e9:6b:43:
75:8c:8e:65:c3:d6:70:6d:76:c9:b2:c3:ee:64:2e:ff:5d:d4:
4a:ec:ef:29:75:86:12:f6:17:22:38:03:17:46:cd:3a:fb:c1:
bb:40:cd:2a:9d:8e:32:7d:0a:5a:c5:89:6e:f8:b7:ce:59:cc:
a8:02:34:06:4a:1a:99:94:94:82:91:26:0a:49:2b:2b:b5:25:
9e:03:9a:6f:42:cd:59:58:01:62:9e:42:18:b4:e3:ea:4b:dd:
ee:2f:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:13:50 2025 by rpki-client