Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
File: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json)
Hash identifier: sFPrVXHARZ44+YkHZuMDhYF5Pi0ny/6+EEThMkdmt6o=
Subject key identifier: BD:C1:60:A8:DD:05:08:D1:82:3F:1C:7F:75:07:EA:40:16:47:EA:F9
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Certificate issuer: /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial: 019A4EF4B13C85F378983FA321DD57FA5E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
Manifest number: 125E
Signing time: Tue 04 Nov 2025 13:00:50 +0000
Manifest this update: Tue 04 Nov 2025 13:00:50 +0000
Manifest next update: Wed 05 Nov 2025 13:00:50 +0000
Files and hashes: 1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: dDpbAS1aYTpVoyprWuX4dBulPJ8QbZU6RRd0X063KxM=)
2: EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa (hash: x2Dmi+4smxCxvQZjFz/Vf1NND+S31iKqxyrBOvRmF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b1:3c:85:f3:78:98:3f:a3:21:dd:57:fa:5e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Validity
Not Before: Nov 4 13:00:50 2025 GMT
Not After : Nov 5 13:00:50 2025 GMT
Subject: CN=bdc160a8dd0508d1823f1c7f7507ea401647eaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:cc:f7:46:9c:f8:a0:58:a5:ac:58:a1:bd:
b7:1e:64:dc:ee:2a:3f:c7:10:f0:a3:41:46:5a:cc:
26:37:07:4d:c4:50:b3:54:17:5a:a5:32:98:5a:be:
ae:fd:88:24:41:b4:3f:25:88:63:6a:03:5a:7a:ba:
5a:26:e6:be:10:95:57:d1:55:da:c0:c7:c0:62:7c:
cf:93:80:1c:04:13:d8:12:4b:13:8b:35:34:c6:53:
09:72:21:99:47:ab:c0:9b:fa:80:c0:9f:b3:d1:09:
15:5f:32:9a:67:2c:22:04:e5:0f:6c:81:27:00:fc:
91:47:b2:64:2e:bb:48:1a:3b:ad:0b:ae:e5:e2:fc:
5a:1c:cf:fc:e7:eb:2d:5a:0d:fc:02:24:fe:5f:3b:
79:31:3f:64:28:03:1a:24:64:4c:b4:7c:b1:b6:0c:
19:70:8a:6d:a7:58:f1:7f:43:23:82:c7:16:9f:81:
cb:85:9f:12:54:c9:1b:30:85:4c:48:0b:38:7b:6f:
ec:be:8b:9a:b2:b8:fb:5c:a6:11:3b:17:e4:da:7b:
9f:b4:5f:f9:f1:b5:e5:43:09:06:7b:50:3b:1c:d2:
e5:90:54:e1:82:5f:6d:fa:62:b7:57:de:af:d7:4f:
31:31:8b:f2:4e:19:1f:5f:7f:f6:67:27:68:d6:2c:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:60:A8:DD:05:08:D1:82:3F:1C:7F:75:07:EA:40:16:47:EA:F9
X509v3 Authority Key Identifier:
keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:10:ea:cd:60:93:ad:2b:a6:35:d5:f9:94:24:50:e0:44:34:
c9:88:52:8b:fe:5c:dd:bb:b9:bb:75:d1:62:cd:d2:b4:6a:bf:
69:69:74:eb:de:e2:62:66:66:71:0a:45:80:1b:29:e4:67:8d:
9c:24:fa:53:f3:65:f8:d4:0f:c7:2d:a9:c5:bf:f5:54:87:b3:
1f:d4:09:6f:f6:13:3a:72:ab:b0:d6:a5:93:a4:d1:6c:4f:48:
32:f5:c3:38:95:6e:a5:9a:25:7f:3f:07:1e:3a:a1:76:c2:cf:
0f:81:e1:7e:dc:ee:75:b2:19:72:f9:b6:99:e0:f0:07:bf:7f:
99:bf:d2:fa:dd:09:72:e8:9c:8f:48:fb:05:23:fc:af:9c:c5:
c4:85:84:07:88:6b:47:51:6a:1f:00:89:17:76:a5:4a:ed:1b:
6d:c3:42:62:be:2e:32:e6:cd:89:c8:9b:fa:86:db:82:ce:02:
0e:c7:44:76:0a:10:cf:70:39:85:34:7e:a5:70:d1:75:44:ef:
67:c9:e3:64:f6:1e:31:e8:59:0b:41:50:da:9d:40:33:29:ec:
9b:75:c8:cc:b8:2a:af:b5:58:4a:f0:14:8f:21:d3:1b:0e:2e:
a0:d8:63:cd:ee:34:a1:99:98:99:7f:39:bd:13:f8:5e:34:7e:
8e:39:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:40 2025 by rpki-client