Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File: 57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier: fTkVRlKWRMsdwjRCs22HJaUCFu7wPMyUHKvhqz8kRc8=
Subject key identifier: 4D:D8:06:45:94:A2:4B:72:DA:E4:CC:B4:77:BB:F6:16:C3:8C:B2:E4
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial: 019A4C986B4023C9B6AD2E7E5C0AAB49055F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 02:00:48 +0000
Manifest this update: Tue 04 Nov 2025 02:00:48 +0000
Manifest next update: Wed 05 Nov 2025 02:00:48 +0000
Files and hashes: 1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: Qv4cxTkBuq9jE23Tp6DFMxxJ6XDAR/R6gQlCZq+x+ug=)
2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=)
3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:6b:40:23:c9:b6:ad:2e:7e:5c:0a:ab:49:05:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Validity
Not Before: Nov 4 02:00:48 2025 GMT
Not After : Nov 5 02:00:48 2025 GMT
Subject: CN=4dd8064594a24b72dae4ccb477bbf616c38cb2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:bf:3a:b9:83:3f:00:19:a3:be:d7:aa:0d:
c5:13:bf:7e:f6:be:c5:99:c1:27:99:5d:28:89:76:
fd:4a:ff:4c:76:ad:9b:79:76:ad:89:92:dd:80:06:
a1:ac:06:13:1b:24:b6:34:f1:8e:36:12:df:bf:f1:
57:64:3d:92:2d:b7:53:75:ce:e8:a5:61:6e:cf:a4:
7f:d9:de:e4:b3:c9:60:40:32:bc:1b:aa:c1:d8:1e:
1c:02:d0:59:98:81:be:b6:78:26:c7:32:30:25:21:
4a:73:9f:e6:12:12:a4:e8:4d:f7:e3:7a:d4:4f:f5:
3e:2e:18:65:c6:be:82:68:c3:e9:3f:c2:1a:5b:77:
8c:c2:96:ce:06:8c:72:9e:f0:a1:75:93:2d:da:4e:
c9:76:41:b5:33:d7:74:3d:da:f5:8b:45:64:4f:e8:
19:55:c4:6f:f1:bc:d0:9d:7b:c4:0d:e9:33:43:55:
b2:8e:ca:2f:5b:44:76:2e:a9:e7:28:53:f0:26:b5:
d5:ec:1e:2c:c7:da:c9:bd:f3:b1:29:d8:b5:25:c1:
3a:fa:f3:82:a0:2e:9f:66:33:c9:ad:05:bc:58:12:
18:2c:90:eb:3d:d9:49:bd:7b:04:d7:5c:02:18:af:
49:46:05:33:d9:58:01:c2:c7:54:f4:c8:a0:44:28:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D8:06:45:94:A2:4B:72:DA:E4:CC:B4:77:BB:F6:16:C3:8C:B2:E4
X509v3 Authority Key Identifier:
keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:21:63:a1:ee:79:6d:71:d3:f3:ff:8d:26:39:b4:f6:a4:fb:
e2:8b:86:d7:fb:7b:0a:f9:75:67:5a:e5:cf:31:01:9a:2f:33:
cc:43:d8:45:78:fa:26:13:f4:ce:e2:1c:31:0e:47:38:10:8f:
62:00:74:28:4e:f2:b7:ba:31:44:2a:96:a6:66:33:9b:94:88:
fe:5c:ff:27:2a:90:c5:82:1a:91:9f:4b:48:0e:e6:c5:4d:c8:
b4:b0:73:84:84:0f:22:2d:5d:8c:b1:e1:22:4d:ce:db:66:3e:
fe:99:12:99:11:b4:da:02:ad:85:d6:b7:2c:11:16:99:cf:22:
0a:57:75:83:ae:63:ab:4e:32:70:49:35:18:71:48:23:b7:cd:
aa:a2:66:b2:c5:56:e7:0b:85:17:09:1b:35:fc:73:a1:09:0a:
40:39:2b:86:a2:e5:af:81:ca:7b:d2:b4:d8:d7:04:1d:24:12:
eb:b5:09:aa:a5:8f:a4:4a:ce:06:42:d6:9c:dd:d4:25:30:d6:
bd:1b:d9:45:c0:0d:62:25:6f:06:4e:a7:51:b0:75:ee:41:02:
b9:41:fc:71:3b:e5:04:f6:e6:fb:09:2b:7b:32:1d:8b:35:90:
54:94:dc:c6:66:49:bd:a1:49:09:e9:cb:b0:98:b3:30:a7:1c:
28:1f:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:56 2025 by rpki-client