Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier: 9GunpsPMWGxhAUOBzLZBr5gDTTRSLL/Fha5e8HTm2os=
Subject key identifier: 73:C1:59:D8:66:DD:7A:6F:3F:2B:54:0A:FB:1C:B8:7C:99:AD:43:82
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 019A4E188B3A646FC8BDCF3227B58F983234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: +aHBTGCB7NWDEaQD7+daCAYAsnkIli4Y5ob4nGu+LSY=)
2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=)
3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=)
4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=)
5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=)
6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8b:3a:64:6f:c8:bd:cf:32:27:b5:8f:98:32:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=73c159d866dd7a6f3f2b540afb1cb87c99ad4382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:48:6d:84:a4:2c:92:84:42:b3:54:b1:9d:
84:40:48:95:0a:67:6d:41:77:40:0e:60:33:8e:41:
55:97:a2:74:0e:39:78:e8:81:9e:ee:76:1e:03:2f:
05:c7:2f:5f:40:7b:23:47:d8:21:e2:c2:c7:5c:2c:
c7:c7:8f:97:89:08:eb:dc:55:0a:c0:25:15:e1:fd:
d6:d9:a6:dc:1e:b4:d5:4d:9c:8a:e2:1c:5c:a9:0a:
30:07:b9:70:ff:7f:de:c7:d4:f3:5e:ca:f5:b0:2e:
ba:6f:85:7a:16:c8:e9:70:e4:58:91:03:6d:39:de:
5d:ad:65:1b:5e:97:56:a5:b4:3a:36:16:e7:36:90:
da:e0:c6:3f:2b:72:94:be:7e:79:cf:5b:99:c4:47:
6b:17:d3:2f:b9:48:83:25:3d:b9:86:14:cc:f6:6c:
f3:37:29:b0:b2:b3:26:55:a0:ea:ee:24:a5:d4:4f:
1a:85:08:6e:99:13:ea:8a:38:ef:d3:4e:fa:72:18:
58:ac:56:1c:f1:4f:06:29:c2:ae:9a:3c:75:04:78:
12:f4:a1:8d:ed:6f:b3:99:20:af:52:97:7e:d7:29:
d8:6f:98:1a:b1:5d:50:b1:a3:fb:46:2c:41:62:dc:
03:f1:41:de:16:23:73:9d:6a:63:7d:c1:08:8d:47:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C1:59:D8:66:DD:7A:6F:3F:2B:54:0A:FB:1C:B8:7C:99:AD:43:82
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:78:d6:61:5d:6e:14:7e:f2:0d:b6:01:33:64:1f:82:72:5a:
0c:af:12:58:12:87:43:36:d0:49:2e:fc:2e:95:1c:51:15:be:
3f:84:17:3d:c0:47:46:96:12:02:2a:c7:b2:90:7f:57:dd:16:
2e:d6:4b:fd:e2:c3:cf:a1:35:d9:42:47:44:9f:fe:32:bf:c5:
9b:c9:c1:7f:ad:a3:34:18:cf:83:d2:c8:c5:65:6c:34:15:3d:
f5:2b:ce:88:53:e8:4c:e1:64:21:d8:c5:08:fa:d8:92:cf:16:
45:e1:99:c5:04:fd:44:f4:9e:18:11:f7:be:15:30:a8:76:7c:
c6:f8:58:b2:2e:1d:aa:05:1a:68:4f:88:50:4d:46:4e:b9:71:
ca:b6:05:81:4e:3d:40:01:fa:91:38:4e:67:8f:6b:05:a1:2a:
95:67:cf:46:28:e4:5b:35:21:ed:0f:fa:e8:1a:71:8d:4e:fb:
14:c0:aa:47:99:99:1b:7f:f1:ef:e9:c3:ea:74:60:4d:b4:65:
dc:20:39:35:c2:49:71:7e:94:32:a0:5b:a4:cf:74:bf:1f:b8:
e1:d1:13:24:ea:7c:4c:12:9b:3c:78:33:1b:f0:66:6d:28:74:
b0:27:68:9f:53:6e:9b:3b:64:ed:9d:fa:3b:63:13:ce:99:27:
5b:8b:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:42 2025 by rpki-client