Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: IKIYNQk/X/D65K0uqnxriMfeeNE4C8dA4C8Ktwk9CAY=
Subject key identifier: 7E:A0:AA:65:77:2F:21:F6:63:DC:4C:75:92:B9:47:86:B0:15:7D:4F
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 019A4EF59E52485006C05304EA86B940B3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:50 +0000
Manifest this update: Tue 04 Nov 2025 13:01:50 +0000
Manifest next update: Wed 05 Nov 2025 13:01:50 +0000
Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: z2Dspn5MtRcB5SG7quHdkHxFwCH5hLIHK5kRCMBwTZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9e:52:48:50:06:c0:53:04:ea:86:b9:40:b3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Nov 4 13:01:50 2025 GMT
Not After : Nov 5 13:01:50 2025 GMT
Subject: CN=7ea0aa65772f21f663dc4c7592b94786b0157d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:fa:a8:1e:25:b5:ae:0c:e2:80:47:8d:3d:
a5:f8:05:40:36:e6:6d:c4:ee:3c:1c:20:12:f3:c9:
e3:49:57:d2:9a:e0:7f:82:1d:e6:c9:53:cd:da:09:
79:89:c5:88:c6:08:fb:81:52:0c:05:11:54:29:24:
66:10:43:99:00:3c:8e:98:d2:eb:0b:76:c6:89:e3:
9d:30:b1:04:15:63:bc:cc:a7:4c:47:36:56:b7:70:
85:21:a3:85:26:84:6a:ee:32:66:ae:d8:4a:89:f7:
15:0c:97:d8:a0:2c:c1:4f:aa:47:08:4b:0b:53:74:
a5:63:ff:b7:17:e3:db:df:67:33:51:ef:2d:47:3d:
bc:2d:d0:7f:2f:56:c6:47:8c:ab:e7:87:f3:8c:62:
85:33:db:ad:e4:4d:9a:90:d6:fa:bd:26:a9:3c:4c:
3a:2c:73:f8:6e:0c:1f:7a:75:c8:c0:3b:45:b4:ee:
f6:06:bb:87:20:a9:d4:48:82:45:42:56:50:19:99:
e9:d6:ce:5e:45:6c:32:a3:ff:46:99:a3:23:07:a2:
4f:9a:b2:e1:79:59:0d:d3:e5:b7:08:d1:be:31:f0:
ea:d0:36:e0:3d:21:45:b5:5b:9c:3f:74:17:48:99:
68:72:2b:e7:14:9e:08:68:e9:24:c1:47:24:c0:77:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A0:AA:65:77:2F:21:F6:63:DC:4C:75:92:B9:47:86:B0:15:7D:4F
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8c:af:bd:d4:e4:7b:23:99:7f:d3:b2:9f:c4:08:4c:13:47:
c2:ad:e4:a0:4b:3d:b8:3b:a1:7c:c9:ad:25:1e:66:be:83:0f:
95:55:12:20:69:f0:66:26:5f:24:fb:d8:0d:b6:c8:9c:aa:13:
20:3c:9c:3a:9c:46:c1:c9:ee:3a:89:ee:2e:4f:cb:b4:16:54:
3d:d4:1a:95:5e:2e:2a:97:bc:29:5c:33:3e:fb:3a:59:58:bb:
93:9b:49:2b:10:56:85:d6:0d:11:0c:04:f8:ad:7d:aa:a7:a3:
80:a7:bf:a0:2c:92:31:32:81:5f:7d:22:52:01:c0:77:70:ff:
e1:9d:6f:57:cd:c5:eb:5a:a9:c0:e6:32:9b:16:cb:0a:4e:d6:
7c:8c:31:45:b0:f9:64:c4:03:c2:91:7a:00:82:67:78:65:f8:
3e:6b:d3:7a:26:1c:a1:50:cf:c0:41:2d:ae:51:79:45:b6:13:
3e:90:33:7f:04:be:88:a1:80:e1:43:94:7d:6e:56:4b:ac:cd:
24:4e:99:16:34:24:be:ed:09:a6:d5:9c:75:23:3e:1e:d0:5a:
bf:25:42:07:03:df:52:b6:31:7a:04:f0:eb:2d:05:9f:5f:c2:
04:1d:df:31:00:b5:9a:e9:9b:96:40:77:55:03:8b:8a:e9:f2:
19:d9:aa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:07 2025 by rpki-client