Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier: EQ0waBCxUQ+8GWrTjm9MSvtaFTXfX6YpynuCb2zArKg=
Subject key identifier: 22:DE:18:58:FA:C2:0F:3A:0B:B2:00:0A:22:6E:08:2A:6A:1B:CE:08
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 0199FC218985C41EA35760B3D666D3746E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: T++UBcXkv+WcXm6lSS4HiQ/22rzIIoPRXywE80+A0WM=)
2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:89:85:c4:1e:a3:57:60:b3:d6:66:d3:74:6e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=22de1858fac20f3a0bb2000a226e082a6a1bce08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:de:1a:11:6b:82:ea:d5:88:8b:ba:31:bd:
38:9e:a7:db:2b:f0:1d:9d:e2:d5:e3:30:27:4a:69:
91:1a:41:ce:0c:f7:f4:39:4d:f3:af:fe:77:36:55:
48:84:02:a6:91:13:02:17:6b:53:f2:6d:65:f4:ca:
3c:28:74:8f:77:9d:94:58:b0:9b:4e:80:e8:5f:bf:
d2:ba:23:b1:e5:2e:7c:f2:7c:76:ea:86:87:85:81:
27:ef:f6:72:27:c3:2c:d3:54:3b:40:a1:ab:d3:fb:
1d:59:45:2d:44:d7:29:cb:fe:8d:aa:ba:27:63:a8:
28:ce:f2:ee:dd:52:d6:c6:57:e3:5e:36:38:ca:39:
19:b6:b9:70:a1:69:a0:02:52:da:19:af:4e:4b:f7:
88:04:ef:48:6a:5c:bf:fe:95:1d:03:0d:c4:0b:8a:
80:07:b8:5a:a7:a3:5a:45:29:cf:da:9f:44:4c:73:
60:e0:48:56:f5:31:c3:1f:e7:dd:60:0b:3b:2f:b2:
5a:61:e2:b2:92:2c:d4:62:da:24:f2:b1:96:2b:78:
d5:a0:77:74:fa:d1:43:de:d1:b6:dc:64:99:ce:54:
49:e9:72:17:64:0b:be:e8:bd:52:4a:35:5c:ce:fe:
69:bc:68:8f:07:12:0c:08:91:61:76:70:96:80:6c:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:18:58:FA:C2:0F:3A:0B:B2:00:0A:22:6E:08:2A:6A:1B:CE:08
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bf:f8:9e:ec:f2:1f:8f:19:c3:96:83:3d:60:a3:d2:62:cc:
b9:6c:73:e3:08:81:9d:6c:68:5b:6b:38:24:1f:96:31:cc:c0:
60:c6:14:c0:c2:b0:ff:6f:b5:d8:64:6c:24:44:da:97:17:13:
53:70:14:1c:a3:36:ed:18:93:ba:59:57:a5:bc:3c:b6:31:b7:
df:a0:fa:39:16:86:65:29:fa:a8:dd:27:19:eb:f5:bd:21:4f:
7c:c0:34:24:a4:72:a3:3a:76:83:86:b0:1f:7a:1c:dd:14:b6:
23:79:ed:f5:c6:13:22:09:d6:d5:26:c0:7c:a9:14:ae:10:a0:
76:a7:90:14:52:e1:c2:35:92:eb:90:4a:8b:c1:f0:6d:b8:7c:
05:21:d5:06:54:9a:f3:16:6b:c8:78:b1:75:f2:61:00:b3:54:
09:ae:b6:34:61:a6:e6:46:8e:e7:fb:a5:dc:ef:0f:25:1e:a9:
ba:b5:34:a0:f1:5c:6c:d1:29:92:e6:65:47:0f:6f:32:bd:01:
e0:36:cd:80:00:a1:22:ed:45:4d:c8:8c:22:f7:3e:28:c3:b6:
41:1e:20:c0:89:3b:73:46:ee:f4:7f:cc:4c:48:72:3f:9f:46:
58:19:29:1b:82:bf:f2:52:be:cc:29:13:42:3e:5d:77:d5:19:
94:b1:6d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:34 2025 by rpki-client