Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: pF89Oxs0lnbUrhvalqwgs3+XINwpEsOuqMu4Nq22EAk=
Subject key identifier: B2:04:FE:05:0D:54:A2:67:02:8F:C1:D1:BF:F6:E0:C7:A7:35:37:40
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019A515121C43FC1C8B6D69744858B8086EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:01:02 +0000
Manifest this update: Wed 05 Nov 2025 00:01:02 +0000
Manifest next update: Thu 06 Nov 2025 00:01:02 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: j1C4zSXLcv37/kKxlwQ5gqJ6mFmWTs1NilYTKagjxuQ=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:21:c4:3f:c1:c8:b6:d6:97:44:85:8b:80:86:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Nov 5 00:01:02 2025 GMT
Not After : Nov 6 00:01:02 2025 GMT
Subject: CN=b204fe050d54a267028fc1d1bff6e0c7a7353740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:fd:f2:c2:b9:c8:37:3a:a8:62:39:6d:a0:
c7:87:1f:18:4e:b9:f9:df:e0:09:25:9c:25:51:19:
f0:5d:f5:7d:85:26:4c:b7:fe:af:6b:0c:5f:b9:d1:
be:3d:fe:53:48:30:79:a0:77:90:d5:99:7f:27:be:
4b:96:79:de:6f:39:78:b2:22:dc:cf:89:0d:09:2f:
eb:11:07:aa:4d:97:f3:90:2e:af:0f:45:38:5e:19:
90:75:16:8f:2f:b7:e3:ce:30:ac:ee:fb:7f:06:76:
74:63:0b:99:c8:17:e2:05:c7:eb:37:52:cf:c3:9f:
24:0a:fc:7c:02:f1:47:fe:17:04:70:a0:de:bf:b9:
48:d8:2a:d9:6e:c8:c8:f6:e0:13:19:87:48:ef:64:
cd:5c:6e:9a:7b:f3:5f:b1:db:32:da:4d:b4:27:1f:
b7:67:60:ae:ec:68:f0:b8:34:0f:e1:e4:68:09:7a:
ab:a7:78:65:c8:41:f7:3c:46:c6:b8:af:75:33:9c:
04:17:9c:9d:d0:3d:00:ec:13:ea:02:8a:a1:50:69:
a5:e0:a3:7a:f6:f1:93:35:12:e9:a3:81:b4:74:d0:
c5:48:85:d5:76:83:ab:5e:99:ac:d1:88:92:af:42:
92:3a:5c:f1:40:93:87:60:ee:b2:a5:b7:b2:d4:d0:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:04:FE:05:0D:54:A2:67:02:8F:C1:D1:BF:F6:E0:C7:A7:35:37:40
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2b:58:27:dc:8b:84:b3:da:12:a5:84:3d:0c:e2:60:d4:c3:
68:a7:ae:47:e9:cb:8f:6f:48:5b:5a:1e:95:28:fa:dc:5b:24:
69:af:b3:52:ea:b5:17:16:d0:07:6d:68:33:35:3f:b1:a3:74:
7d:fc:29:76:6e:9c:62:56:6c:44:21:5b:34:19:a7:e1:be:9c:
51:19:e4:1e:94:e1:b0:24:06:75:73:3f:fc:10:8d:f0:af:a4:
20:f3:68:18:1d:5e:c3:0d:57:be:55:24:e6:5b:2c:08:c5:5d:
31:e1:26:af:fc:dc:d0:55:6b:a8:fd:16:03:c7:27:82:cf:d5:
f9:22:ee:00:15:fe:ce:ee:7e:a0:51:ba:20:f6:96:05:0c:c7:
25:d1:c6:2f:7f:a8:1b:1f:a4:9e:3b:b0:d1:9f:19:00:b1:f0:
82:a4:52:c2:f2:5e:35:9b:dc:ad:46:b3:8d:dc:9c:93:77:60:
15:02:38:b3:af:f2:cd:67:55:6d:0a:4d:c9:56:fe:c1:83:3b:
96:6c:06:d5:13:da:91:be:c6:56:39:16:1b:fb:e6:bb:a4:ee:
1f:8d:1a:8f:b4:bc:7e:9f:d4:76:df:96:38:a6:56:23:2d:b0:
60:4b:5e:77:14:f4:04:5e:0b:d0:8e:ae:70:00:eb:63:cc:4d:
ca:b8:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:37 2025 by rpki-client