Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: K5+0vMqcz9Rwl4aHgFegWQOK1PsP6dwh3iOK2OHvp1k=
Subject key identifier: 6A:68:DC:7D:3D:28:17:4B:BA:0B:F2:AE:14:81:61:90:76:12:7D:B6
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 019A4E861E6067A6A71EED3206D26D3495C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:03 +0000
Manifest this update: Tue 04 Nov 2025 11:00:03 +0000
Manifest next update: Wed 05 Nov 2025 11:00:03 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: ykF8+Co79Zogx2p5PwUcBqCfCCuw7oyXzekio5xx3YE=)
2: g_HTJXlqiVwcXNQwQ-5NsdWLDwY.roa (hash: T8aREzkEhzdTgcqG/dOQatsiFG6CYLxa2kl0FfKGWAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:1e:60:67:a6:a7:1e:ed:32:06:d2:6d:34:95:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Nov 4 11:00:03 2025 GMT
Not After : Nov 5 11:00:03 2025 GMT
Subject: CN=6a68dc7d3d28174bba0bf2ae1481619076127db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:6a:ed:ef:18:5d:9d:73:f1:dc:9f:02:5f:
ea:bd:bf:03:92:bd:39:37:81:68:47:97:32:7e:fa:
d9:1e:d9:7a:74:96:2a:f6:fe:56:c5:39:5e:d8:46:
f9:85:a2:02:cb:77:a7:3f:02:36:26:f8:c6:81:6e:
83:bd:1b:c7:fa:36:28:4f:64:a0:d5:ce:d0:38:c7:
33:d0:22:87:89:90:9e:1c:fd:09:f6:16:b9:63:25:
8a:f1:e6:92:05:51:27:37:90:ba:3f:95:94:a0:3f:
90:39:8c:d1:86:90:55:76:47:97:dc:4f:29:03:f8:
0a:af:37:49:0b:c3:c7:ee:b1:45:5d:e2:07:fe:53:
28:ff:9a:47:cf:d6:84:74:95:9f:ad:3a:7c:cf:d7:
d0:40:2a:00:5a:30:d4:fe:fa:d8:bd:66:97:b5:b1:
0a:99:25:28:ea:81:60:2d:89:a3:fd:69:72:77:3d:
93:c3:6f:b4:7c:a0:e6:80:4e:dd:11:b0:a5:cd:2f:
25:8a:e4:10:5e:5f:43:b9:45:1c:ef:45:09:37:8d:
e3:dc:fb:14:a4:e9:fe:4f:c9:29:94:d1:ce:a7:d6:
bd:81:69:9e:5e:e6:15:9b:f6:5d:55:26:8f:bd:4c:
d6:bc:2c:1f:3e:ea:49:a1:74:e6:ec:7f:8b:36:84:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:68:DC:7D:3D:28:17:4B:BA:0B:F2:AE:14:81:61:90:76:12:7D:B6
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:eb:84:f7:be:7e:1a:ee:e9:75:2a:5b:87:49:3e:43:2f:e4:
78:11:ca:5f:23:2a:af:36:50:70:6a:14:b9:28:68:88:81:b6:
bc:e7:d9:65:36:77:43:e8:1e:67:bf:b3:ef:cc:79:03:24:db:
70:5a:5d:a5:58:13:6e:1d:ae:8d:7d:e9:e1:ca:52:c0:b1:7f:
91:57:13:6c:41:ab:ed:b0:ab:a9:a4:c6:a3:0b:09:22:8a:e7:
1e:6d:93:6a:15:02:5b:7d:e9:69:fe:34:5d:21:96:d3:d3:5d:
f2:d9:95:9f:47:d3:5e:41:b6:e5:a3:23:5c:b1:91:74:69:9f:
b6:6e:fa:8d:f5:f5:62:c6:14:a1:eb:d6:b0:67:b8:89:09:b0:
7c:08:61:02:97:4f:c3:33:ea:ba:00:ef:03:8d:77:81:63:ab:
e4:b2:9f:bf:39:e4:7c:f5:68:bf:1c:f0:0f:2d:ee:30:6d:5b:
d7:d6:f1:0a:fd:69:c2:d7:b7:11:6e:4e:56:24:26:e3:b2:07:
fe:f0:d5:60:18:89:79:61:30:13:1b:09:ce:0d:03:25:b9:88:
9b:af:9b:16:72:c1:cf:aa:bd:96:1c:ee:fe:36:59:7d:3b:6a:
2c:d2:6b:d4:b7:30:5c:67:e1:c0:5e:e1:38:4f:c1:c3:c9:63:
40:c1:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:22 2025 by rpki-client