Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier: DqiAXAXuhd+O2j1Jzktp2M5p2H0sgmQhl2s2A0fZFD0=
Subject key identifier: AB:6D:86:71:AD:5B:79:99:B1:A0:EB:B9:C5:DF:9C:7A:AE:D1:51:D3
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial: 019A51BE6F07C2680CA59038FBA169B8476E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 02:00:26 +0000
Manifest this update: Wed 05 Nov 2025 02:00:26 +0000
Manifest next update: Thu 06 Nov 2025 02:00:26 +0000
Files and hashes: 1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: 9HKUA0fp3SOafOUbCRVlQVF5562m3HRuDlARtBnWhc0=)
2: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (hash: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=)
3: _X7C7V6gpKHfD2GzsHWwwqpaOyU.roa (hash: YNwkjNTaSE+wVt7Z8QQHUfLIQalMph9DlkM4NPeZKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:6f:07:c2:68:0c:a5:90:38:fb:a1:69:b8:47:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
Validity
Not Before: Nov 5 02:00:26 2025 GMT
Not After : Nov 6 02:00:26 2025 GMT
Subject: CN=ab6d8671ad5b7999b1a0ebb9c5df9c7aaed151d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:04:8a:33:ad:7d:5a:54:09:7a:43:f4:d1:
69:5a:f2:74:09:c9:e3:cc:23:6d:db:57:a2:96:ce:
17:75:f8:cb:7b:8f:23:56:7f:89:e5:61:3f:d7:0c:
83:7b:00:9b:0a:73:d4:10:4c:92:e0:a3:7a:9b:6f:
c0:e3:1a:9e:f0:3f:f7:1e:6f:bf:6e:74:4a:b0:6c:
7a:53:f8:44:e7:1e:7d:71:4d:71:63:09:75:19:2c:
07:7a:8e:62:0f:65:47:e4:88:9f:34:a8:24:a8:f8:
4e:e0:54:ed:f7:96:69:d3:a9:ec:88:90:e9:17:4c:
71:ac:fe:69:41:6a:59:dd:61:f0:4c:44:ec:ec:ce:
6b:f7:dc:22:a9:cd:da:ad:29:d5:9f:4e:e2:8d:40:
1d:0a:79:d4:32:91:67:e1:55:f8:d6:e9:29:e8:89:
33:2d:cc:60:d0:42:03:f0:c1:60:f9:96:b8:6d:db:
27:ba:7d:03:82:55:ec:ec:1c:b3:0d:2e:12:7c:04:
bc:28:f7:2a:a2:14:44:be:f7:4f:13:b2:ed:da:4a:
ac:cb:e2:40:dd:af:ed:ce:b5:b4:d7:dd:dd:df:27:
0c:e1:c7:f6:6e:07:be:1f:0f:65:69:20:d8:a2:70:
d6:31:d1:06:8e:82:20:8b:8b:6c:eb:6d:f5:fe:bd:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:86:71:AD:5B:79:99:B1:A0:EB:B9:C5:DF:9C:7A:AE:D1:51:D3
X509v3 Authority Key Identifier:
keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:99:4c:f1:09:b6:8d:57:d2:64:d5:91:e5:ef:57:69:c4:d2:
88:85:da:99:18:cf:9b:a6:db:b6:eb:3c:1f:9e:b4:01:8a:4f:
e6:7c:ac:f8:6c:7b:b3:a6:16:84:ed:9c:0d:66:d8:74:67:3a:
ee:b2:1a:52:4a:63:ff:04:fb:36:12:ba:21:94:34:2e:72:5b:
ad:f1:f5:e9:a2:b7:3a:74:83:15:21:ce:69:21:27:38:7d:cc:
42:38:59:20:4b:b2:e5:3c:dd:99:46:11:f8:8c:bf:1f:6a:db:
50:2f:89:cc:3f:ab:4e:6a:fe:5f:6e:a7:e4:2a:8c:93:ea:dd:
ea:ee:59:8c:00:3f:06:c9:0e:96:1c:e2:b2:6b:fd:ab:ac:39:
77:34:fc:4e:d6:d8:38:12:52:bd:17:f5:3e:47:b4:f1:dd:fd:
1f:7d:94:87:e0:d3:f0:d8:53:19:b4:53:90:f3:9d:eb:e8:c2:
30:f1:d0:16:be:68:10:8c:3c:fc:a3:e0:a2:c9:b0:8c:49:10:
d0:a4:e6:2d:02:d9:e2:a7:e0:20:91:74:52:31:30:1e:14:74:
4d:c6:56:fb:97:11:dc:fa:cc:f0:63:2b:c4:75:ab:f0:f2:eb:
1e:19:d7:f1:07:13:56:b2:c4:dc:cc:16:8e:79:82:40:db:4a:
c9:51:6d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:42:15 2025 by rpki-client