Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier: 6SiSC7UY0ajDXOvnB33lDka0/An1xC2NJZmtqxzTl1k=
Subject key identifier: E2:7C:D3:8E:0A:A8:E9:67:4D:38:F5:20:F4:10:E5:3F:F9:CF:C9:EA
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 019A518756157A474EE170CCC41D5E6CDF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number: 1632
Signing time: Wed 05 Nov 2025 01:00:15 +0000
Manifest this update: Wed 05 Nov 2025 01:00:15 +0000
Manifest next update: Thu 06 Nov 2025 01:00:15 +0000
Files and hashes: 1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: xmxTlF+GBPeX+cy3lPJijQB+M/7Y68nFbuXx8yhdPVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:56:15:7a:47:4e:e1:70:cc:c4:1d:5e:6c:df:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Nov 5 01:00:15 2025 GMT
Not After : Nov 6 01:00:15 2025 GMT
Subject: CN=e27cd38e0aa8e9674d38f520f410e53ff9cfc9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:49:b1:2d:61:0f:51:b8:47:cb:68:1d:ac:
7a:cd:67:47:7d:c0:7b:2d:cd:ce:a7:f4:ed:de:1f:
c9:69:e3:1e:1a:c2:95:85:df:a8:a4:9f:f8:00:17:
a4:ca:a0:7a:b7:0e:6c:e2:71:2d:65:7b:0f:5d:8c:
b7:6b:6f:a0:d3:86:a1:ec:7a:f7:da:bb:b4:1e:59:
7c:6d:9c:63:5c:11:ed:88:e3:e1:be:e1:81:46:17:
61:a5:6a:2f:f1:35:b4:7c:39:b0:11:94:af:73:0b:
dc:23:27:59:1f:fd:c4:92:47:70:7f:39:cb:8c:76:
4a:04:07:50:1d:e8:c5:d1:68:59:bb:9a:2f:72:0a:
e9:3d:4d:5f:0a:a9:ed:cf:ca:25:82:9d:72:16:5c:
d1:bb:49:6e:f1:c3:6c:5a:42:d4:c5:02:f8:3b:03:
1d:b0:2a:7f:82:af:87:95:6b:92:a0:87:3b:41:e0:
99:85:24:e2:fb:37:27:25:31:0a:1c:a3:c1:bf:a6:
c3:66:a7:11:97:2e:20:05:f8:d2:96:12:74:15:40:
cf:f6:c3:2a:25:93:39:eb:43:b7:5e:54:e6:12:fd:
ed:8c:0c:d2:b0:4c:09:3f:b0:c2:69:f0:65:fb:db:
33:b5:3b:b8:58:3b:73:50:42:e7:02:c8:a3:2d:ba:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7C:D3:8E:0A:A8:E9:67:4D:38:F5:20:F4:10:E5:3F:F9:CF:C9:EA
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:5d:92:80:b5:99:ba:2f:fb:56:5b:e8:0b:c6:95:41:32:
d2:35:59:0c:a6:b9:53:1f:17:3a:7c:61:df:2a:9c:66:8d:85:
a1:7a:61:34:69:3a:f3:25:02:04:54:85:d2:a6:46:bd:3d:01:
74:5d:6f:bf:ba:2b:5c:2f:30:f2:a4:25:36:36:73:fb:ab:e4:
54:6c:1e:2e:75:7e:61:a0:93:19:bc:cf:25:03:37:26:11:85:
86:92:fa:6e:0a:16:7e:80:fd:1e:fe:06:b4:bd:dc:d9:ef:78:
5b:f0:5b:19:8c:4c:4b:9e:e6:6a:17:9f:81:91:bd:aa:a2:a6:
e4:55:d1:d2:28:80:ba:95:c0:f7:7b:be:99:de:7d:72:5c:f1:
e3:c5:53:5c:4b:d0:60:97:7f:8f:f8:6a:b5:76:25:7b:c7:c7:
93:1b:d1:d8:63:7b:79:e2:3c:2f:9e:f6:9b:4c:40:b6:85:3e:
6f:8a:eb:4d:2b:56:27:ea:0d:94:e4:8f:ab:bc:b3:34:b4:45:
7b:f5:17:03:13:1f:e2:ef:83:7f:6f:87:c4:4b:ba:1f:9a:95:
72:ad:b7:42:68:f7:e3:75:f0:43:1a:92:81:b1:9a:c8:0f:5d:
92:d7:e5:56:6a:7d:5a:4a:90:84:4f:ee:e8:78:cc:28:8c:b3:
96:da:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:51 2025 by rpki-client