Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: 4qfkKggiq4gqChVqmI0QK84X54GQHc3CeL7k2mVupCk=
Subject key identifier: 1E:E6:0F:85:4A:93:BF:40:93:8F:80:04:80:D9:FA:32:1F:03:49:30
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019A73015389B0E63DC348BA203C792760A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 111D
Signing time: Tue 11 Nov 2025 13:00:57 +0000
Manifest this update: Tue 11 Nov 2025 13:00:57 +0000
Manifest next update: Wed 12 Nov 2025 13:00:57 +0000
Files and hashes: 1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=)
2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: ACRvKE/cOBBzSRix+iiSAynMAa+4fieAXF4NO5hj32Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:53:89:b0:e6:3d:c3:48:ba:20:3c:79:27:60:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Nov 11 13:00:57 2025 GMT
Not After : Nov 12 13:00:57 2025 GMT
Subject: CN=1ee60f854a93bf40938f800480d9fa321f034930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:05:c5:39:59:93:a3:6e:e1:08:6b:fb:28:
6f:f8:f7:a1:3e:c8:e6:66:4b:cc:70:69:80:ee:72:
0b:97:c2:cc:24:84:27:b8:56:a6:51:aa:83:5e:3c:
d9:b2:12:82:5d:ea:6d:14:eb:c1:94:7e:d9:0a:c5:
cd:78:92:98:cd:f1:1c:87:ac:5c:8d:ba:1c:dc:a6:
83:54:62:3a:a3:70:21:d5:8a:6f:88:72:b5:95:92:
cd:d3:af:42:29:7e:bd:b7:f2:21:e7:47:b6:07:f2:
3b:d0:20:83:cc:36:1e:3e:d0:1b:4d:e4:4f:f1:8c:
ae:54:2b:6b:99:22:d8:5a:ac:5c:16:41:7d:02:63:
a7:fb:72:ae:1f:ad:94:a6:de:b3:36:2c:f0:33:3e:
0e:20:50:d7:eb:b3:45:b3:49:29:5b:e5:03:29:49:
4e:87:f3:72:43:84:f8:21:07:d1:21:fe:76:41:cb:
d4:f0:cf:5c:1d:ad:3a:fd:54:b5:db:37:0c:3f:ed:
e0:48:ae:29:d7:ad:14:8e:27:dc:7e:27:93:f6:09:
9a:e6:72:1a:51:81:92:5c:15:3d:c9:d1:56:d3:e8:
f3:48:f5:2f:33:8c:bc:0b:a8:e6:2b:82:46:08:92:
aa:48:40:69:cb:8b:6d:2f:0e:b4:83:90:5a:54:ce:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E6:0F:85:4A:93:BF:40:93:8F:80:04:80:D9:FA:32:1F:03:49:30
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:47:a6:46:ae:59:b5:31:d2:3f:41:43:e8:ff:fd:20:49:be:
97:3d:2c:6b:82:9f:54:1b:aa:84:38:24:2b:da:11:64:a9:73:
41:ae:ca:97:ef:7c:d9:15:0d:77:cf:83:94:2e:d6:31:e7:42:
96:e4:c1:f3:ea:da:6a:8d:24:1e:34:c9:4c:77:8a:31:af:4c:
ca:cc:21:0e:ed:32:a5:56:0e:30:52:94:26:6f:76:43:be:77:
66:20:d5:5d:55:8e:81:d4:c5:fb:5a:28:c5:fa:a8:63:bc:f2:
e8:9b:fe:5f:90:33:c6:f5:90:f0:bd:d2:b4:cc:9a:4f:af:f4:
29:f9:9b:7b:0b:10:33:76:ee:37:f1:56:b9:8e:c0:6d:5f:1c:
e6:29:e8:56:2a:0e:7e:71:6a:53:7a:cd:e5:d3:46:8a:a6:d3:
8a:d6:1d:ce:81:d3:14:b2:55:33:ce:8f:dd:ee:5e:e3:9e:ae:
b2:c3:df:b5:ef:42:0f:dc:66:a3:ff:37:e6:10:33:3b:20:24:
ab:ee:9e:7b:c0:c2:b2:d4:5b:3b:68:10:65:86:45:4c:6a:93:
1d:78:e1:8c:87:24:a6:2b:57:8d:fb:df:91:16:02:49:35:04:
4e:f6:af:a6:3e:98:4e:b2:2a:c6:e2:9d:06:e7:86:02:d6:b2:
a6:8c:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:03 2025 by rpki-client