Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: P4aaSKFpxLrFnlMUaPVArzdVboUP9J2zZlUoGSV2zhA=
Subject key identifier: 47:8F:93:14:1D:1A:4E:D0:46:D3:E1:02:21:73:0A:B8:F0:0A:BE:B8
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 0199FBEB36540B864285B06C4E97DA85E6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 11FA
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: GkFMaMprR7PfupIkeoWNt1QcQIJF4oDHxHTvFOPRpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:36:54:0b:86:42:85:b0:6c:4e:97:da:85:e6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=478f93141d1a4ed046d3e10221730ab8f00abeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:98:8e:6d:5d:d3:be:b1:68:08:f1:25:14:
e4:c0:7a:a4:64:d2:4d:dc:84:55:6e:9d:92:ca:86:
19:59:9d:2b:96:01:f1:0b:a4:67:b6:8b:c0:29:a0:
c8:2d:7a:98:04:68:1a:c6:0d:6d:80:f4:b5:c2:20:
ba:ce:e4:d8:4f:27:73:bc:01:32:68:b5:57:3e:dc:
ed:4b:ee:91:c0:ec:d7:8d:26:a0:06:0e:29:79:e6:
41:d2:7d:68:51:f3:1e:a3:7f:25:88:6f:09:b1:08:
71:39:7d:c2:09:67:0a:53:19:2d:42:76:3f:29:73:
1a:58:e4:1c:bc:07:e9:f3:31:6a:ee:75:ab:a5:e7:
fb:48:45:66:c5:a8:53:6d:2c:93:04:62:41:f2:ea:
e7:f7:69:41:c1:b7:e7:00:0d:13:b0:03:2d:35:a7:
a5:0f:50:6d:e6:d6:6d:c2:82:c6:fb:2e:8a:78:a7:
af:b2:6f:fc:cc:b2:dd:ea:92:f6:2f:30:85:4c:48:
0b:cf:d1:de:0d:a8:6a:98:9a:d9:c4:65:7f:ac:2b:
a6:02:37:3b:2e:06:99:f8:6f:bc:2e:9b:e5:83:14:
d4:16:f5:ea:cc:b4:80:4c:d9:e8:d1:f8:0f:22:7a:
be:af:d7:d7:a7:4a:63:9c:14:f9:34:46:ce:10:d7:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:93:14:1D:1A:4E:D0:46:D3:E1:02:21:73:0A:B8:F0:0A:BE:B8
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:54:1b:3d:ae:52:b6:b9:ca:6f:f8:02:52:1f:58:1e:1a:3c:
99:b8:83:53:ac:15:20:30:e3:b7:e5:d1:cf:a5:45:f8:9b:4d:
b1:d6:23:42:5d:1b:46:30:52:81:e0:47:ca:48:93:e1:6e:57:
ef:25:55:be:7c:cd:dd:c7:f1:36:b7:cb:07:77:b5:61:bb:e6:
8e:1f:9c:ac:1a:81:98:68:9c:df:70:8a:5c:9a:5e:d4:36:ba:
a2:9c:9b:4e:21:f0:88:2f:96:01:bc:af:ae:3d:60:13:28:a1:
f1:6a:21:9f:6e:13:ed:5a:01:d7:46:7a:80:92:21:ea:ce:19:
f4:2f:97:d6:61:dc:dc:55:7d:7f:5a:bb:94:44:e9:79:e4:c7:
e5:1d:82:38:07:c8:b7:6d:e1:9e:04:3b:af:18:e9:92:eb:28:
f8:ac:4f:f6:3c:e9:43:87:d7:9f:4a:2c:ae:d7:10:a4:8a:64:
f7:7d:7b:cc:20:b0:b6:2b:93:64:93:88:cd:c0:3e:ef:a5:9b:
10:a8:9b:53:58:51:86:86:52:b3:ce:eb:33:29:d1:65:b6:71:
5a:51:01:6e:c6:a6:0c:f0:0b:c0:3f:ff:5d:a0:cd:fb:71:73:
59:0c:ef:0f:19:5d:81:45:22:d8:f0:e0:91:20:42:f6:bb:93:
ad:52:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:32 2025 by rpki-client