Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: 4PgMbjKt2h3ZjxzqvPT5m7sqsXcTHLBqdoIJcpSH2EU=
Subject key identifier: 48:C4:61:8C:82:70:EA:DC:B7:99:98:8D:35:3E:E0:84:6D:D0:07:57
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 019A4E18C2B4C877B18340051ACCF95B03EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:36 +0000
Manifest this update: Tue 04 Nov 2025 09:00:36 +0000
Manifest next update: Wed 05 Nov 2025 09:00:36 +0000
Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: JCqbISXu2DGTrSV8OBBi+n2CNbj/0Z6wnBXlu4839tU=)
2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c2:b4:c8:77:b1:83:40:05:1a:cc:f9:5b:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Nov 4 09:00:36 2025 GMT
Not After : Nov 5 09:00:36 2025 GMT
Subject: CN=48c4618c8270eadcb799988d353ee0846dd00757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b8:5a:9d:0c:d9:ee:75:17:ee:5b:20:59:2b:
e3:5e:84:0f:13:c8:6d:55:e0:a3:42:d0:dd:54:7c:
2e:d3:0f:7c:f1:4d:b5:df:60:d8:6b:0b:63:7f:49:
12:53:f0:f5:a6:04:99:a6:1b:cf:c8:9a:a5:c6:6c:
5a:64:4a:7f:be:60:af:18:d7:1f:8e:b9:eb:56:6b:
8d:25:0a:5b:ff:a7:a0:a2:8e:03:6b:6a:f9:35:2f:
05:82:0c:8c:74:52:c3:18:02:f9:cd:22:2a:44:08:
0d:81:2b:06:11:0b:5c:1c:d7:d3:55:2a:98:6b:e9:
46:1a:ca:fb:06:e1:18:b8:a5:80:4e:55:99:1f:f4:
0f:f9:58:42:7d:7f:97:dc:4a:fc:2e:01:ba:48:f9:
f3:65:b8:86:c9:f5:54:b9:d1:ed:7b:4d:07:ed:1f:
d2:e9:33:e3:c8:cf:23:f4:de:8e:2d:5a:cd:12:66:
8f:13:2d:15:a7:14:aa:be:a9:a9:bd:4c:e6:5a:bd:
c0:59:dd:d1:03:07:ec:b6:0d:0b:a1:9b:2e:4f:7b:
14:39:fd:13:43:86:aa:6e:e8:a4:67:12:36:71:ea:
24:80:94:06:e3:0f:e5:b4:88:73:d1:a9:ca:20:73:
4e:40:e6:47:ac:2a:33:a5:e4:39:75:ad:6c:2e:f2:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:61:8C:82:70:EA:DC:B7:99:98:8D:35:3E:E0:84:6D:D0:07:57
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d3:36:1d:0a:82:1e:9e:6e:c5:d6:35:56:05:47:da:08:ff:
90:f6:e6:1c:c4:45:62:9c:02:11:15:4f:8a:27:84:b1:b7:e3:
8f:9a:94:33:4c:e0:32:49:bf:51:d2:ed:3a:5a:01:c4:4d:95:
5c:ba:b5:48:ec:25:82:80:40:c5:46:bb:e8:36:28:fe:15:89:
3e:87:1f:7a:89:d4:3e:e1:9f:db:73:b8:df:3a:cc:f1:48:54:
0c:c5:96:56:0e:4f:aa:d3:b6:d6:37:67:1e:5f:33:4a:98:96:
08:23:ec:ea:ce:72:39:20:1b:da:2a:05:9f:10:f0:8b:c3:61:
2a:f8:79:61:da:11:89:c5:41:87:b8:7b:81:bb:bc:53:5e:44:
b0:d4:32:9c:95:d9:fa:8c:89:86:c6:e2:3e:32:e5:c4:48:a1:
1e:06:08:b7:16:05:5e:de:7c:5f:d1:14:96:55:25:0e:e8:2b:
d7:30:0a:2c:30:3a:f4:d5:a4:1c:0d:80:8a:3f:dc:49:7a:0f:
61:12:a7:20:7a:5e:1f:6d:5e:36:fc:9b:51:3a:a6:80:e6:aa:
b2:d6:bb:2b:b1:dc:86:25:03:6c:a2:30:f5:01:a9:25:7c:dd:
dc:96:6d:91:80:47:7d:23:f5:72:ec:5e:d2:09:4a:51:35:6a:
3b:23:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:07 2025 by rpki-client