Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: hvji5q2XNhHnsJYGjjk63A36V6pAXcSPWlwl46fH5Vw=
Subject key identifier: D9:75:CD:B5:0C:E9:80:6B:5F:F8:01:0A:D8:5A:D8:09:8D:C5:B2:3B
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 019A4EF5751B3CBE4FBB36A3B0E861C2ABF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: DmGt3agiKY0tR/FVYW6KYv5MaFIUAHe/GePUL/Aa8B0=)
2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:75:1b:3c:be:4f:bb:36:a3:b0:e8:61:c2:ab:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=d975cdb50ce9806b5ff8010ad85ad8098dc5b23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:eb:92:71:39:99:0c:70:4d:ea:79:8a:84:
84:12:0d:5c:d3:76:2d:75:6d:fe:c5:fb:9b:2c:20:
d2:1f:fc:6d:ab:83:04:c0:3c:d6:e8:18:13:7b:bc:
34:d0:62:eb:c1:df:71:ce:46:cb:c2:f1:bb:05:4e:
de:23:24:72:c3:61:8f:d0:5f:0e:fc:b9:e1:a0:e7:
26:e7:cc:e6:3e:ba:ef:8b:0e:c7:10:87:0c:46:9c:
97:30:4b:55:4e:cc:70:5c:f7:3e:a8:0d:f3:b3:14:
da:56:3d:9d:48:b8:e7:ae:a3:cc:10:cd:e9:d3:0e:
cc:9e:69:a2:f2:7c:de:d2:93:57:31:10:9c:9d:35:
7d:c3:e0:99:46:f6:41:99:e8:1b:63:6a:50:be:15:
d6:a3:f4:17:5c:9f:0f:2a:81:c9:88:e0:90:e5:ea:
10:ac:f8:93:09:d5:60:43:ad:03:4b:17:26:61:b8:
7a:80:ad:00:04:56:a6:df:6d:c1:54:c2:5a:07:37:
d3:1a:55:85:ef:de:d6:19:23:d7:d6:41:74:c3:82:
81:29:07:66:55:3d:47:42:5e:45:7d:50:8b:ff:b6:
59:8f:b2:e7:7d:9d:9c:7c:e9:5f:93:1c:95:5f:fd:
fd:c5:58:5a:ad:75:65:2f:15:2f:ea:a4:50:6a:0c:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:75:CD:B5:0C:E9:80:6B:5F:F8:01:0A:D8:5A:D8:09:8D:C5:B2:3B
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b8:1b:5c:17:29:a9:6e:6b:3e:ff:7f:3e:44:82:02:db:3a:
28:88:43:9b:28:fc:f5:d5:65:9d:7e:da:08:76:52:72:e6:ad:
ba:67:92:32:b4:1f:da:50:f6:fd:8c:b1:21:ac:b1:3b:c8:84:
fc:c9:21:dd:d4:3a:ef:a5:50:5d:9a:ea:3b:47:0c:51:a0:c6:
92:ec:a9:b0:79:ae:e9:22:6b:81:ae:cb:d8:c1:82:f2:a3:b6:
22:53:4c:03:09:0e:6f:1e:10:97:93:13:19:de:58:d1:87:8e:
a9:c8:ca:3b:83:cd:9d:32:9c:f0:87:d2:4a:c7:a2:81:f1:d3:
6e:98:57:31:4a:0a:91:06:c0:ab:d1:32:67:bf:1f:41:d9:95:
4a:18:56:1d:01:92:e0:29:e1:af:ed:91:d1:5e:43:bf:ac:2e:
f0:c3:e3:89:3a:2b:6d:88:0a:9a:11:63:3e:9a:0d:35:bf:cd:
c3:5f:80:79:37:9b:0d:46:94:4e:f2:d1:44:a9:4d:1e:84:d9:
84:2c:bb:77:20:ae:dd:51:5b:d3:e2:81:dd:cd:11:09:6c:fb:
a7:b4:7c:86:c9:2e:83:34:7e:38:52:f4:cf:4f:03:bc:bf:37:
64:5a:33:2d:6b:b1:79:e5:e7:1c:ca:eb:b3:15:8e:ac:e9:4a:
cc:ad:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:48 2025 by rpki-client