Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: QB1kdcDovCN98MJIVO0Lece5EXGTz/yTV1GyHs0zfXo=
Subject key identifier: A5:B0:09:3C:8A:7E:ED:61:16:09:11:4B:DE:27:C6:95:12:FC:E4:B7
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 019A00DA41F6981E0366DD050B964D903424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 09:01:34 +0000
Manifest this update: Mon 20 Oct 2025 09:01:34 +0000
Manifest next update: Tue 21 Oct 2025 09:01:34 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: sHrDghbcGqIlYxFqrOiDggjCFI+AA5aYUSpRY1lgZbo=)
2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:41:f6:98:1e:03:66:dd:05:0b:96:4d:90:34:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Oct 20 09:01:34 2025 GMT
Not After : Oct 21 09:01:34 2025 GMT
Subject: CN=a5b0093c8a7eed611609114bde27c69512fce4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:09:f7:f6:66:e5:d0:19:1d:b6:8f:75:ca:e2:
1e:5c:a7:60:57:8d:bf:4e:34:a8:18:ae:52:79:0c:
cb:c8:e7:f6:2c:9a:06:f1:c0:95:b8:09:22:46:de:
2e:e6:39:82:e8:ba:1f:74:40:a8:45:db:b3:55:ab:
de:e0:eb:0a:b2:8a:a9:06:d6:21:04:c0:28:4c:f5:
40:98:84:b1:db:3a:14:33:d2:5f:b2:0f:62:96:fb:
bc:43:43:49:47:d9:f1:44:c3:d7:0d:82:cd:3b:f3:
e3:9f:cc:c3:78:bb:60:14:e1:0b:d5:d2:3c:90:0c:
a0:6a:34:a7:75:2f:09:1c:f2:e0:4c:12:21:54:99:
7f:92:95:81:cc:26:69:48:fc:13:92:5e:26:68:fa:
42:ae:3b:52:62:1e:ee:d8:75:1e:8f:36:17:d7:88:
3b:6c:a5:e1:3e:01:70:07:36:b2:10:77:e7:0e:5d:
4c:f9:11:b8:bd:8e:cd:0f:3c:31:bc:f5:4b:f6:f5:
78:91:6c:eb:31:e7:ee:9c:64:62:67:e5:89:29:d8:
ef:1c:67:11:c1:b5:6c:43:26:aa:c7:2d:42:9e:25:
ff:00:1c:50:27:d5:cd:16:45:94:18:a7:66:b3:b0:
46:a7:d9:11:19:cf:33:b2:c8:e3:1c:77:39:54:6c:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B0:09:3C:8A:7E:ED:61:16:09:11:4B:DE:27:C6:95:12:FC:E4:B7
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:44:6d:48:96:b6:f9:e9:57:d8:7a:d6:67:d4:78:4a:10:83:
ac:21:67:bd:65:d1:16:22:22:2f:87:33:21:2f:3b:70:02:b6:
5b:30:f7:fc:fe:0a:a7:af:3f:1a:7f:c1:77:92:57:f1:08:2e:
9f:9e:d3:2a:8b:2b:b8:a7:cd:9c:48:8e:b9:f6:1e:5e:b1:42:
67:87:2d:9d:7f:5c:43:ed:f3:6b:c6:8c:97:cb:92:46:4d:2f:
9d:ce:fa:85:cd:0e:c8:a7:e5:4a:fa:82:b4:8c:23:4a:45:f8:
0a:d8:f6:49:ee:ae:51:25:b9:46:dc:19:78:2d:b7:da:ae:ac:
05:96:14:0b:ba:6b:6b:84:e3:ce:cd:69:4a:ad:16:d6:e1:cd:
78:ef:79:32:67:e8:a5:8e:4b:e6:a3:58:9d:1f:82:f6:d4:8c:
92:3d:39:53:3d:29:03:12:90:1a:fc:4c:25:79:43:51:62:34:
4b:f6:32:30:04:a6:c3:59:b0:c4:b3:d8:33:38:ed:7e:14:f6:
9c:bc:ab:0b:41:8c:75:6a:ca:74:00:18:c6:c2:cb:04:3d:31:
0a:cd:71:18:13:6a:82:4e:d0:b8:5b:d8:a6:63:bf:08:64:cc:
37:34:d5:31:da:45:41:59:65:d0:83:6e:14:3d:a4:b0:af:e1:
ab:31:78:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:26:32 2025 by rpki-client