Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: HhdIhrljeVeeW4f1B1BvBLGVvWTDDygkchu9FI8orIk=
Subject key identifier: F9:39:11:0D:D9:0F:14:F7:5D:65:2E:D7:A7:5C:4E:0F:5D:3B:50:D5
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 0199FAD8053E91153DE86C6C668A7441E257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:01:25 +0000
Manifest this update: Sun 19 Oct 2025 05:01:25 +0000
Manifest next update: Mon 20 Oct 2025 05:01:25 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: SE/xTyQzEtVKBIqx2QRJD51D7n+8v/0K6wQZ645d8C4=)
2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:05:3e:91:15:3d:e8:6c:6c:66:8a:74:41:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Oct 19 05:01:25 2025 GMT
Not After : Oct 20 05:01:25 2025 GMT
Subject: CN=f939110dd90f14f75d652ed7a75c4e0f5d3b50d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:f4:07:c4:2d:04:96:58:0a:db:cb:d2:e6:
1c:03:b2:da:9f:9b:96:50:7d:60:ed:70:75:a3:91:
64:73:0c:63:01:b4:93:d4:43:3c:d5:b3:13:67:71:
30:f5:69:0b:35:dc:66:c0:68:3f:ba:8f:bf:19:eb:
a8:56:0c:05:c6:e1:62:eb:97:49:6c:fe:8a:c8:ed:
38:87:87:af:7a:37:96:ed:4b:1a:3b:8d:13:38:cd:
e8:34:02:36:05:eb:24:4b:6b:3e:7b:24:c6:93:9c:
de:c9:0e:77:5e:06:9c:3c:b3:55:7b:65:45:81:5b:
5a:47:c7:e1:2c:a2:64:dc:c3:b3:fa:56:15:a3:8b:
94:06:ad:04:55:2c:50:56:13:13:22:ed:cb:47:96:
28:4d:9f:16:54:f3:e4:10:35:9f:71:90:a4:be:74:
a3:77:42:29:68:7a:bd:f3:c9:2a:0e:59:25:41:e9:
2d:1e:95:ac:c8:28:2d:3a:71:75:2d:90:c4:9d:63:
34:e4:83:74:33:58:ba:b7:9b:d4:b9:01:0a:7a:7d:
a5:08:3c:f8:70:96:de:48:05:93:e4:f3:53:b4:a9:
9a:00:d5:56:39:06:c5:08:fa:de:90:f0:82:1e:6e:
67:a5:2d:8a:ea:73:c4:6e:ce:67:41:04:9a:6a:f9:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:11:0D:D9:0F:14:F7:5D:65:2E:D7:A7:5C:4E:0F:5D:3B:50:D5
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4e:15:f3:8b:57:dc:ed:49:0e:78:cd:d5:db:3d:30:69:bd:
fe:28:e8:d1:40:1a:45:60:6a:39:96:2f:6d:05:ff:62:c0:8d:
33:bb:b4:df:05:01:55:77:5b:91:7f:75:41:af:3c:64:c3:d6:
bb:a5:4b:c9:5a:5e:99:42:8e:24:26:88:b8:7e:89:93:94:8f:
5d:d9:81:95:89:5a:3e:81:88:5c:f6:9d:96:a4:53:f8:bf:ff:
0d:a8:54:90:2c:b7:8e:82:06:b2:70:a6:c3:ac:46:30:8c:0f:
5c:62:95:7a:dc:8c:b6:3c:ee:ed:ce:a4:4f:37:42:ce:d9:47:
78:67:71:9a:5f:3d:e5:6a:1f:86:97:db:2a:43:67:07:8e:42:
39:69:41:4b:3f:77:b1:f9:c1:8d:2c:b1:72:58:cc:04:8c:81:
9f:27:9d:75:59:3b:eb:d3:25:d7:2c:3a:ab:34:7a:43:62:fc:
11:e1:d2:0d:ef:da:dc:bd:ff:bf:d8:c9:f4:99:08:38:1c:b2:
6e:48:28:0d:03:b4:1a:d8:9b:2e:ad:d8:db:ba:c5:55:ad:e8:
01:9d:f2:28:5b:59:78:d7:da:c6:82:a6:9b:09:69:e9:58:ee:
90:ef:bb:78:02:11:da:3f:f3:59:f8:9a:59:8b:4b:cb:a2:f6:
f6:a2:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:03 2025 by rpki-client