Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: ru9kxaXdFME3HLk05QDgD4sw4d/D0k/tUSQi2iqRb+s=
Subject key identifier: 4E:07:06:A6:85:D9:76:7B:2F:58:C6:C3:C8:47:E7:BA:59:3D:1A:D4
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 019A4EF5EE68EEDEC2F4098E50082E8418BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:02:11 +0000
Manifest this update: Tue 04 Nov 2025 13:02:11 +0000
Manifest next update: Wed 05 Nov 2025 13:02:11 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: t/BdEmoDkss6MeOzvEPCekiJirs4L2L+1rvgeYQiafM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ee:68:ee:de:c2:f4:09:8e:50:08:2e:84:18:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Nov 4 13:02:11 2025 GMT
Not After : Nov 5 13:02:11 2025 GMT
Subject: CN=4e0706a685d9767b2f58c6c3c847e7ba593d1ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:d4:95:35:22:88:0d:69:1c:69:dd:46:45:
8f:40:86:98:0e:94:b6:88:f1:cd:d1:b0:8f:8e:51:
c2:c1:09:33:2d:46:ec:a8:1c:50:84:64:ee:e1:e1:
f1:11:19:18:30:54:22:c1:2c:fd:2b:25:01:e8:56:
34:4e:93:5e:64:2f:ef:18:0f:22:ef:e9:fc:10:5a:
9d:13:75:7e:0d:b2:b4:0a:e0:17:15:c4:b4:df:e6:
f1:30:39:16:ce:5f:27:1c:a8:61:f5:ba:9b:e1:fb:
8d:38:f7:49:11:1b:27:08:25:0c:71:20:7c:01:ea:
ba:1b:9c:33:92:da:00:01:56:af:8f:c2:f2:02:d9:
30:6f:d1:2f:b8:dc:b4:ca:7a:60:50:26:fd:6f:1d:
cb:72:05:a0:c2:8f:e4:ac:f7:02:79:96:28:cb:03:
36:d0:43:43:cc:65:1b:a2:23:d6:48:f4:75:e4:4a:
ba:08:5d:47:a0:3f:b4:f8:50:fa:3f:0c:00:6a:ab:
96:2f:17:45:a0:5a:e2:7b:cb:86:53:b3:b8:35:4a:
a4:29:ef:2a:e2:79:4a:5e:78:b6:95:37:d9:31:a7:
b9:48:d1:71:f8:72:91:57:21:d0:e1:17:10:37:01:
8f:fd:86:9f:91:18:ef:80:5f:99:1c:26:99:19:41:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:06:A6:85:D9:76:7B:2F:58:C6:C3:C8:47:E7:BA:59:3D:1A:D4
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8c:c7:f2:91:75:99:19:46:2f:20:bb:b5:dc:79:10:92:3e:
29:26:ff:c0:e6:66:82:2f:3c:26:86:d5:92:c3:5a:2d:d9:2d:
af:18:be:00:6e:89:34:02:cc:02:15:0c:bb:00:51:fd:ec:b4:
d5:ab:91:42:b6:4d:c8:96:c9:c2:e6:3f:e7:a5:49:70:57:ac:
ee:c2:97:4c:24:8d:21:c8:86:48:b9:2f:2b:21:bd:d3:07:43:
37:27:f8:3e:e3:8b:fd:02:38:74:76:ab:14:17:2f:50:55:81:
60:a1:c2:8a:65:93:20:4b:b6:36:74:76:08:b1:74:f4:67:be:
96:80:fb:a1:d6:11:9a:c0:8f:60:d3:58:37:48:2c:0b:ee:2d:
b7:e3:f9:db:e4:d8:56:9b:52:78:c1:29:71:c9:c4:b4:03:72:
b5:8f:68:27:a7:96:56:92:8b:e8:72:ab:06:78:47:55:00:45:
8c:70:5c:cb:f9:ea:ee:fc:6a:6c:ee:c5:22:0c:84:21:d3:f4:
97:cc:39:05:d7:49:c2:00:75:66:09:1a:a0:9a:d3:5c:75:c7:
e6:08:4c:cc:5b:e9:90:be:ba:8b:23:e6:5b:79:36:6d:38:d1:
94:29:00:28:b9:28:5e:b5:ec:81:84:0b:f0:fd:3e:9c:e1:50:
56:fa:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:10 2025 by rpki-client