Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: o0mnMdntXA8sAYFvPI1BIg50vYMwXtgptzbm7V9U1Ts=
Subject key identifier: 94:D2:54:7A:95:B7:1E:88:CB:93:FC:93:45:FB:75:C3:55:4E:1D:E1
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 019A7225B2B2008914168646A299B232ECCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 16E0
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: tU3edbgkLIrWHhp7ZGT43SzrgR34fqGQI/3zrXqTZlw=)
2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b2:b2:00:89:14:16:86:46:a2:99:b2:32:ec:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=94d2547a95b71e88cb93fc9345fb75c3554e1de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:df:b4:03:c3:bf:f0:32:d9:b2:77:14:4c:
bc:44:99:0b:b7:fe:90:f8:65:9d:93:b0:fb:88:6c:
fe:66:cc:1e:12:45:12:d4:01:90:21:cf:9c:27:2d:
0d:2a:d6:ce:64:dc:d8:ee:44:f8:b6:53:e5:3d:06:
5a:6d:f2:97:8f:36:4d:9d:15:c1:38:08:57:e0:a0:
c1:54:63:b5:e6:1e:6e:4c:66:40:0e:14:6d:29:b7:
41:87:25:7e:f6:04:2d:f4:0a:17:02:29:bc:21:3a:
a9:06:2f:c1:d9:e2:ba:d4:89:49:6c:77:86:1f:89:
4a:cb:7c:c6:a1:fc:76:09:8c:d3:80:4e:93:51:60:
c8:1c:4d:4f:6c:42:86:d1:26:26:7b:18:32:2e:47:
a5:b4:c1:0c:65:e8:42:36:ac:f7:b9:69:bc:f6:3c:
8c:69:18:62:4b:89:1f:67:de:0b:06:bf:f4:46:6a:
ea:da:fd:d4:f2:a4:18:a9:d5:81:02:d0:dc:e4:46:
60:3f:15:39:6d:46:04:cf:c4:10:35:42:05:04:48:
d8:2f:2a:b7:d2:9e:49:d8:5e:90:a9:c5:d2:29:8d:
18:2f:6d:2a:8a:8b:2e:d2:7e:02:9c:d5:50:b2:ed:
7f:f5:f9:fb:c1:37:57:ef:df:7e:1e:2c:a7:cd:cd:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:54:7A:95:B7:1E:88:CB:93:FC:93:45:FB:75:C3:55:4E:1D:E1
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:16:58:da:53:d6:95:8a:09:9a:01:09:4b:c2:6f:bd:51:c4:
4a:d0:c9:97:49:1d:5f:ec:1a:e7:c7:6f:eb:61:f3:ff:a2:b0:
ec:27:2c:8c:6e:9c:a5:3a:b4:83:16:57:2b:12:06:56:61:cf:
15:18:e3:12:6e:05:99:95:13:6f:3b:3c:9d:3a:e3:f2:81:71:
b7:57:cd:37:f0:4c:de:f9:1d:b2:e6:af:75:1e:cd:ac:18:44:
67:d7:ea:46:d5:ad:97:9b:bd:90:5e:34:54:4f:3d:a4:74:6a:
f1:62:e0:c7:55:93:f4:3d:63:3b:b6:6c:f9:69:f5:c1:83:45:
d3:78:36:11:dd:33:1e:8a:88:4e:78:22:d6:98:a2:1c:01:de:
3b:4c:8f:b3:31:09:c5:9c:31:11:3b:c7:d6:68:2c:85:80:51:
79:c7:c1:a5:e5:31:16:83:7c:90:35:44:35:80:b9:bb:14:d3:
76:17:85:ed:86:45:73:39:20:01:62:99:b0:57:df:62:3d:ff:
96:b6:fd:ed:13:f9:de:41:c7:c3:00:d7:76:4c:ce:5d:57:15:
33:28:9a:d1:66:47:54:4b:4c:a5:90:1a:a4:f3:4b:49:b1:db:
73:84:87:ab:df:76:e4:31:43:e9:be:eb:d8:62:ec:35:9c:c0:
e1:0b:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:53 2025 by rpki-client