Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: CFFW1497EY1oXocqfF/c26uMyYrz4Jl+S0ZoJJsli+A=
Subject key identifier: 1A:DD:9F:40:5F:4C:E0:E7:54:84:D5:13:F7:28:77:3B:D3:FE:78:93
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 019A72267904718FBF6FA8320D542B0713F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: fkXSiMVlk4kCiaUfGtIlC/g1ZOAtG84sasVnBhfbP1o=)
2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:79:04:71:8f:bf:6f:a8:32:0d:54:2b:07:13:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=1add9f405f4ce0e75484d513f728773bd3fe7893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:b9:88:af:64:5d:0d:03:ea:eb:c3:94:7d:
39:ae:62:f3:68:b3:41:96:4d:14:50:61:4e:5d:65:
72:18:77:2b:c1:92:e2:da:ad:4e:97:b2:08:dd:ff:
22:b2:35:23:f7:75:94:77:32:b5:bb:30:79:66:a9:
9b:83:19:31:3d:db:9e:8d:f7:5d:44:27:80:ac:0c:
44:23:a0:70:54:61:9d:41:c3:ac:d9:71:9a:5c:cc:
b8:2d:02:4a:2a:88:db:00:4f:23:ee:11:ca:b9:b1:
65:ce:e9:4c:bc:9b:46:1b:77:0a:d2:08:50:68:70:
34:77:c3:60:55:1e:f0:e6:e4:d9:b4:b8:ad:72:aa:
b5:c7:ca:0b:79:d2:3f:45:b7:47:15:d0:ce:fe:8a:
a2:26:42:dd:23:5d:0c:38:1f:55:42:34:c5:d6:7d:
be:a4:e0:58:e2:b3:07:ca:ae:d5:c1:a3:36:55:ec:
a7:c5:96:f7:4b:a9:52:f9:e6:2b:08:fe:aa:76:50:
bb:fe:e3:60:e9:67:26:c4:a4:76:a2:3d:ee:29:45:
9d:b7:78:a8:cb:82:53:27:3e:26:4b:bb:9c:21:09:
9d:30:fc:7e:a1:48:18:79:e3:43:9a:25:25:e3:3b:
fa:08:cd:26:1d:88:1a:ad:34:9f:4a:ba:5d:dc:47:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DD:9F:40:5F:4C:E0:E7:54:84:D5:13:F7:28:77:3B:D3:FE:78:93
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4e:a8:71:3b:e3:57:44:d1:70:d6:09:7b:36:65:e0:37:6c:
87:6d:bc:66:26:89:dc:9b:96:b2:41:05:86:0a:80:f8:81:46:
b6:42:63:bf:b7:5d:ea:84:97:58:06:1f:f4:24:b8:9d:85:d6:
fc:73:d1:97:81:4c:23:3c:ef:51:0f:18:41:15:7b:ab:82:fb:
37:79:41:de:85:55:a4:8a:01:c3:fb:46:b3:dc:8a:d5:a4:1b:
b6:4d:e9:aa:59:fa:33:de:69:e6:14:61:df:27:d3:87:5b:25:
f6:48:f0:c8:b9:7c:e0:8d:f9:dd:33:4b:cb:44:e1:76:43:50:
86:9f:79:60:10:01:eb:9a:f6:98:c6:63:e9:76:0e:11:10:97:
a0:6c:86:13:f8:4c:29:09:e4:43:db:04:e1:8b:0b:e8:da:2e:
0c:e0:51:3f:cd:82:0e:5a:4b:9e:d2:96:2d:11:28:b1:23:2e:
fc:dd:80:02:e2:72:9b:38:2c:e7:d1:13:c5:3f:f7:b6:a0:64:
4e:0b:0c:1c:91:9b:6b:ad:ee:a9:32:24:cb:71:2b:db:90:67:
06:aa:f1:05:0e:4f:60:25:04:4c:4e:af:ee:af:90:ac:a6:19:
3f:26:ef:e7:82:dd:b7:fd:24:7c:3f:b5:0c:93:2e:2b:2a:ac:
c7:e5:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:23 2025 by rpki-client