Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: PNRGCNdwpj5+JQAMs1PvZfav5A4GKPUrEnm0P+pPq/o=
Subject key identifier: 9C:F2:46:78:BA:3F:37:AB:E2:38:76:0E:C5:6B:EF:1C:14:93:C8:3F
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019A4EF57ECAA45E6494691EB67BBF29495B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:42 +0000
Manifest this update: Tue 04 Nov 2025 13:01:42 +0000
Manifest next update: Wed 05 Nov 2025 13:01:42 +0000
Files and hashes: 1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: nn1LsIlnri9wwE2/VfxMa7Q2Qgz3ueTf2U16HyRw4+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7e:ca:a4:5e:64:94:69:1e:b6:7b:bf:29:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Nov 4 13:01:42 2025 GMT
Not After : Nov 5 13:01:42 2025 GMT
Subject: CN=9cf24678ba3f37abe238760ec56bef1c1493c83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:ed:62:eb:86:8e:fa:50:d8:3f:cf:b2:a6:
8a:31:06:33:93:4a:ac:33:0e:08:67:7e:e1:e2:4f:
1e:8e:02:d1:91:eb:db:72:72:62:ef:56:a1:01:5b:
de:06:1a:f4:17:f8:29:e7:e0:3c:7f:fd:bb:57:d5:
0e:ff:ea:ba:f0:95:62:69:f6:21:11:8d:31:ea:6d:
09:ef:ab:17:02:73:2e:3f:87:05:3e:73:01:b3:aa:
c6:32:a4:26:3f:27:53:1c:d3:57:bf:92:3f:49:a1:
71:e8:20:4d:c4:07:d9:22:49:8e:be:d5:fe:49:d5:
a7:e8:23:4f:02:ff:5d:5b:01:cf:9b:6f:8a:90:ca:
6a:34:3d:69:be:93:59:61:b5:60:1f:e2:c8:95:e2:
92:79:4e:1c:00:85:76:e0:4a:12:ae:e5:5b:77:ec:
61:f8:91:38:3a:15:c8:76:c2:2f:fc:95:c7:50:d9:
e9:ae:af:94:87:ed:7e:36:ab:f0:92:3d:d7:8d:67:
7b:be:0b:a4:73:11:12:7d:92:45:b1:e4:86:cf:6e:
0c:49:fc:0d:7a:c4:c0:d9:db:97:9f:96:d4:21:be:
fc:c0:87:f3:92:64:51:a0:ba:b2:17:bc:d9:a5:5c:
2d:8c:42:08:5a:80:43:cb:f5:61:28:77:bf:7d:57:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F2:46:78:BA:3F:37:AB:E2:38:76:0E:C5:6B:EF:1C:14:93:C8:3F
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a4:c6:2f:f5:d5:f6:d5:86:e0:d9:91:87:62:87:85:61:c4:
14:2b:d2:91:7d:88:c0:f1:f1:f2:27:69:b1:28:9c:a6:b9:a6:
55:21:00:84:61:47:84:55:8c:fa:26:cc:ad:9a:ff:13:21:c1:
03:29:89:6e:fc:d7:32:21:cc:3b:46:cf:f1:75:61:14:00:30:
33:37:74:b8:1c:d4:0d:42:af:7f:78:e8:55:d3:db:55:e5:66:
fb:bc:5b:ec:29:a1:24:16:09:a1:46:a8:8f:14:bd:38:cd:5b:
89:2d:9e:59:1e:cb:75:39:a9:77:9d:7c:e3:30:ec:f2:55:68:
41:25:58:0a:8a:67:64:21:28:7a:00:27:be:d2:f9:9e:b8:d5:
84:46:9b:13:5c:b3:2e:da:7e:15:55:44:44:f1:7d:fe:40:52:
7b:72:33:e2:6d:2b:08:4f:63:09:f0:67:3a:0a:07:b5:bb:2c:
4b:4d:48:cd:24:32:5f:49:9a:86:92:26:aa:fd:74:c8:47:be:
da:91:12:52:6c:85:e9:ae:a4:98:16:c5:ad:8c:55:c7:78:f3:
4b:6d:77:9b:e5:a9:9d:9f:30:b4:e9:9c:5c:38:eb:48:e3:24:
a8:2d:18:dd:bd:d8:b3:3e:bf:af:3f:f2:c7:79:29:b5:2a:fa:
57:4a:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:08 2025 by rpki-client