Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier: BeQWCV9DCxBP9Dq1RqE+KUjOFozn30znwcQ1Yb/6m/s=
Subject key identifier: 58:34:88:6F:94:49:AB:53:C6:84:57:C7:2D:25:DD:47:47:47:3E:2F
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 019A4D3CC06154A18D486FBA6C81DC1CFC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:18 +0000
Manifest this update: Tue 04 Nov 2025 05:00:18 +0000
Manifest next update: Wed 05 Nov 2025 05:00:18 +0000
Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: OPDFB4I63SWclIi+X0iPInlN1d8YaQ+q0DDHWUCKRtw=)
2: r8Cx9iv2Us-sXIBLH4ymKtjO_pw.roa (hash: zSG7oRCig4axArTg72yLWZy9j2Lnt0Tay8wTKKxpjxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c0:61:54:a1:8d:48:6f:ba:6c:81:dc:1c:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Nov 4 05:00:18 2025 GMT
Not After : Nov 5 05:00:18 2025 GMT
Subject: CN=5834886f9449ab53c68457c72d25dd4747473e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:a1:bc:67:4b:e0:ae:23:ac:e2:15:a5:68:
3d:fa:f1:d9:41:00:95:8f:90:b7:93:f6:74:4f:d8:
bf:2f:5d:79:cc:1c:16:65:a5:70:19:cc:47:21:b5:
35:73:76:1e:07:09:26:49:b2:2e:85:f4:c9:f7:22:
a8:61:0a:b5:a4:6b:26:cb:ad:d4:3d:35:50:20:e9:
50:c7:04:32:8a:ea:2d:a1:1e:11:07:c6:ca:d5:14:
64:af:c5:16:68:a7:01:5f:b7:0d:67:6f:9f:49:5a:
f0:fd:98:fe:7a:fd:4e:5a:ba:6c:c3:b3:75:08:d1:
41:be:a4:9a:3a:43:32:29:0c:de:d7:e0:9c:dc:9d:
7e:d2:a9:9a:5b:84:39:0d:85:6c:9d:a4:3f:42:89:
45:1a:c7:a9:87:5c:5a:97:00:73:de:4f:88:7c:59:
fb:2c:e7:37:75:5e:2e:ae:40:aa:26:8d:cf:9a:e2:
b0:66:63:e9:48:b1:bf:e1:86:dd:8d:d5:42:b6:5d:
11:b4:a0:56:6a:5d:15:88:35:d6:a8:e0:6a:7a:37:
a5:d3:31:1a:07:bf:a6:96:95:a8:46:21:b5:c8:a1:
22:02:50:45:10:14:5a:b3:b2:ce:0e:6c:be:50:3d:
d0:f1:50:94:1d:e8:ed:a5:1a:7c:f9:36:78:55:d1:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:88:6F:94:49:AB:53:C6:84:57:C7:2D:25:DD:47:47:47:3E:2F
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7d:16:b1:ba:cf:27:26:8b:ad:f4:54:08:de:20:b4:d5:38:
00:ae:a6:e2:f8:e5:ae:ec:fc:30:3d:c9:fe:a5:7c:67:93:ff:
7a:43:c9:d1:6c:ef:a8:29:b7:4c:b4:72:d5:74:2f:6e:e9:77:
27:14:b7:c4:16:e2:a7:63:53:1f:e3:d6:9c:c1:98:c6:fe:42:
47:3d:7e:40:6f:83:83:95:0e:2d:15:b9:77:32:7a:ab:82:22:
ea:1e:8f:bd:28:d3:ae:75:fd:48:5f:6c:69:69:02:0d:03:70:
f6:61:76:bd:c0:51:ae:d3:30:ab:34:32:21:a5:23:f3:9d:92:
8b:9a:e9:4c:d4:ad:af:ad:6e:9e:78:a9:01:ff:b8:ec:1d:ca:
91:61:c4:1c:aa:bd:4e:6b:d1:c3:0b:6e:47:da:ab:f1:e0:6c:
c8:a5:26:55:91:a8:b4:b2:83:9a:b0:c6:5d:5a:f3:f8:47:f8:
6d:f8:c6:ae:2d:d7:b6:53:3f:66:65:1f:a4:22:17:5f:ef:d4:
ee:76:cb:11:d4:ca:45:27:b2:e0:3b:0d:b4:d2:01:38:d9:30:
8c:f6:f2:74:f9:d4:60:99:c5:86:d5:b7:17:dc:75:2f:46:cd:
e2:bc:47:2a:a4:02:5a:67:48:68:c2:9e:53:9b:31:32:bb:54:
a7:07:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:06 2025 by rpki-client