Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier: PnVTUp8zfyG9LjJVrVEIV9QChSYabRqGlIN5GPZzPlk=
Subject key identifier: B4:05:8E:C4:D8:0A:3B:9C:45:91:26:A6:25:D4:AD:61:5B:A2:2C:15
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial: 019A4E4FADFC1C4109B01012E8F4C212B0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 10:00:36 +0000
Manifest this update: Tue 04 Nov 2025 10:00:36 +0000
Manifest next update: Wed 05 Nov 2025 10:00:36 +0000
Files and hashes: 1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: yYTX8msY6Qhc/Vw3U1U5oeAUw6EwR4U4gN/Hr1kpa1E=)
2: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (hash: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ad:fc:1c:41:09:b0:10:12:e8:f4:c2:12:b0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Validity
Not Before: Nov 4 10:00:36 2025 GMT
Not After : Nov 5 10:00:36 2025 GMT
Subject: CN=b4058ec4d80a3b9c459126a625d4ad615ba22c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:94:cb:9e:3a:1a:0e:c5:e5:e3:93:98:17:ea:
97:f7:fe:12:27:73:0a:cf:86:1a:aa:a6:bd:7b:a9:
b4:52:6d:51:95:cb:bb:bb:b9:d2:91:2b:09:84:33:
19:11:a9:b8:24:41:cc:3c:62:88:34:65:1c:cf:83:
7f:e7:29:21:aa:e0:15:44:52:6e:2e:7a:3a:22:06:
cc:5d:3d:71:ff:bb:d1:57:a2:76:e4:29:33:3b:62:
0c:d2:ee:86:78:bc:36:b4:32:92:8b:01:fb:67:00:
1f:4b:79:dc:48:b5:57:b6:eb:0c:2e:03:71:f7:a4:
d6:14:cc:ea:a4:ce:ff:29:5e:0c:e6:5e:21:d3:82:
b8:28:88:b0:b1:1b:2a:5f:8d:ae:a2:8d:4b:c5:c4:
6a:e4:70:53:e2:b0:cc:f5:6a:71:6a:c0:51:d0:aa:
e5:ce:08:2d:c2:c2:a8:9a:ac:8f:99:76:27:10:09:
62:18:c5:84:08:21:49:1a:0c:e9:43:29:e2:0a:41:
b2:87:41:fa:59:83:67:b2:6f:72:75:b8:34:c6:90:
e0:1a:ec:5c:1e:ff:ed:7e:b0:ce:37:52:16:74:f1:
e8:b5:5e:be:21:a7:26:32:c4:5c:3b:8f:f0:39:8c:
3e:d8:18:5f:ee:d9:03:d7:1d:6f:cd:e0:46:92:9a:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:8E:C4:D8:0A:3B:9C:45:91:26:A6:25:D4:AD:61:5B:A2:2C:15
X509v3 Authority Key Identifier:
keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4b:16:1c:f1:d8:31:ce:8f:11:46:2d:3f:ef:43:c0:c0:7a:
3f:43:7d:88:c0:bf:37:0a:3e:cf:26:86:9e:30:0a:f5:f5:34:
2e:83:e7:7f:40:1c:e5:09:49:ce:4f:a1:87:4b:f8:13:00:d7:
00:fd:59:df:ae:62:35:66:0c:e7:ad:48:ca:14:a5:83:7a:4c:
e7:c7:66:36:5d:e5:42:f9:4f:44:20:c6:73:62:99:fd:f4:40:
ad:d5:d9:dd:c8:23:00:7a:28:66:ce:f6:c7:63:e4:88:9e:af:
65:5a:b4:7d:98:c4:d8:6d:b1:d3:e9:51:65:e6:47:5d:62:ef:
70:4f:0c:31:7a:ab:70:59:7c:a9:46:66:ee:5d:64:31:7d:68:
08:d3:18:67:a4:9f:bd:6c:8e:8f:a4:14:bc:c5:ee:dc:3d:e8:
59:c9:d3:a9:9a:b4:c5:9e:63:2d:8f:60:45:77:b4:46:c4:10:
d5:74:d6:61:87:b9:fe:02:38:bf:e4:d6:ac:a6:36:d5:65:7e:
c7:2c:f3:13:b8:ee:9f:b5:93:3d:6e:c1:ac:fa:8a:07:72:61:
31:9d:70:19:c7:54:d2:36:a9:25:c0:1b:c2:3c:b7:95:10:91:
58:9e:7f:0d:be:a0:1a:89:4f:28:46:86:92:33:1c:f7:0f:94:
e8:13:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:57 2025 by rpki-client