Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: KUIqI4JqTJM4eXJ1qmqfQVG/NIHTQlJjaQ9CeKmhhOo=
Subject key identifier: 70:3B:6D:50:AA:CF:40:BD:B6:F5:6D:4D:42:52:D8:03:56:C4:AF:9B
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 019A180617BDB37C47D804EB41C1F9E214CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 16F4
Signing time: Fri 24 Oct 2025 21:00:43 +0000
Manifest this update: Fri 24 Oct 2025 21:00:43 +0000
Manifest next update: Sat 25 Oct 2025 21:00:43 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: uoA8BnDfWJUgEPdO6IIboOYGQYzj173d32Wf9CekfSQ=)
2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:06:17:bd:b3:7c:47:d8:04:eb:41:c1:f9:e2:14:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Oct 24 21:00:43 2025 GMT
Not After : Oct 25 21:00:43 2025 GMT
Subject: CN=703b6d50aacf40bdb6f56d4d4252d80356c4af9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:9d:18:b1:b1:7c:03:71:bc:9a:a7:31:8e:
18:30:b7:88:0e:72:9d:6c:1f:de:b0:e1:ef:20:5c:
67:4f:8e:69:19:f0:c5:09:bb:52:0c:b0:6e:04:2f:
3c:8c:50:64:a8:e4:ed:41:90:da:8c:d4:7b:0e:5c:
bc:f7:18:d6:fd:7a:87:91:a1:6a:44:0f:47:73:c0:
09:69:04:9b:ef:b4:9f:8e:c9:82:e7:9e:45:82:c7:
40:26:d0:40:01:99:c0:73:d3:a6:58:e3:9b:f9:4c:
ca:e6:0e:ec:26:01:fd:5b:36:8f:c6:78:3c:eb:d9:
13:a8:da:76:27:df:ba:79:ca:5f:2c:74:f5:f1:50:
3a:b2:1a:fa:a7:1c:78:cc:dd:82:1e:85:03:df:f9:
bd:f1:51:60:5b:79:6c:2e:f4:64:91:d7:42:5a:82:
ea:af:69:aa:c2:78:c2:99:f9:0d:f5:4e:fe:9a:9e:
53:b8:06:cc:1f:fb:39:aa:5b:3b:72:a5:cf:12:38:
8c:14:a3:78:9b:e0:5b:c4:e7:7a:0b:80:6e:7c:d5:
25:45:fa:f0:a3:ec:c1:89:59:05:e2:1f:fc:69:7a:
14:15:df:88:78:4d:1f:d0:37:ce:52:a5:32:56:63:
b1:0d:a5:ca:6f:dd:8f:5b:8f:cc:18:5d:a4:64:28:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:6D:50:AA:CF:40:BD:B6:F5:6D:4D:42:52:D8:03:56:C4:AF:9B
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a5:6d:c0:e5:4b:00:85:8e:7c:9e:5a:b8:a8:6c:32:a1:2a:
a2:9d:bf:59:e4:0c:51:e1:e6:bf:d8:08:62:e2:91:64:17:5c:
5d:42:e8:3e:c3:de:a1:d0:9a:e2:5b:6c:cb:3f:98:19:31:43:
be:95:38:5e:43:0a:5e:89:8c:24:d3:1b:ef:8f:f9:94:f7:03:
3b:80:95:14:da:60:21:ce:96:fe:31:9f:cf:02:b1:13:59:5c:
1a:76:45:8f:84:d7:d9:18:2b:41:1c:11:f0:ad:74:d5:e9:df:
7c:cb:ad:e3:90:f6:8d:5b:c2:95:d3:73:5c:4e:9f:44:67:89:
24:9d:17:9b:4f:ca:a6:47:08:d5:5c:36:03:d7:9a:6e:d9:20:
0c:85:b6:59:64:38:47:8b:5c:60:ac:4f:4d:3f:30:16:a7:41:
96:07:da:a6:b8:63:bd:24:30:e4:51:04:01:09:0a:f4:e4:3f:
d3:cf:2d:88:6b:b5:e4:74:f3:82:69:75:27:32:8e:6f:43:57:
d2:10:1a:bf:e4:c4:a7:9f:7d:61:43:17:3e:6f:17:51:cc:44:
e4:45:d9:87:49:55:c3:18:b8:2e:3b:dd:ba:6b:6a:fb:df:99:
2c:ac:44:40:6d:4b:d1:7f:3e:b6:44:0c:60:04:e2:1f:4d:4f:
fe:7d:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:17:47 2025 by rpki-client