Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File: 564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier: EVgxu/3MaH6hf46O0W6kN/6lIHJyhLWW7bMYTHMlU38=
Subject key identifier: 35:5D:0A:B7:D2:B5:31:D9:85:3F:17:AB:32:9D:20:2F:27:EE:E6:03
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer: /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial: 019A4E4FA5E5EF44835C4F8BB04FD34FDF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:33 +0000
Manifest this update: Tue 04 Nov 2025 10:00:33 +0000
Manifest next update: Wed 05 Nov 2025 10:00:33 +0000
Files and hashes: 1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: zadC2gIcqggmYino4HNAwGLkWcYPBuHowUn6oHruaPo=)
2: Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa (hash: FQv+IrKxJOgkLV5JEMBWkTPo0W/To8EL8sbfGOS1Pm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a5:e5:ef:44:83:5c:4f:8b:b0:4f:d3:4f:df:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Validity
Not Before: Nov 4 10:00:33 2025 GMT
Not After : Nov 5 10:00:33 2025 GMT
Subject: CN=355d0ab7d2b531d9853f17ab329d202f27eee603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:c5:51:be:8b:31:f3:60:7e:4b:65:67:8c:
05:36:88:a2:72:cd:92:e9:0e:97:58:29:6a:28:14:
c8:1d:18:d5:d1:fe:c3:91:80:5c:fe:b9:86:39:f8:
f7:75:f6:66:bc:97:40:84:6b:8a:16:75:5d:1e:e6:
db:f4:74:d8:c4:2f:c8:39:da:38:2c:78:8c:9a:ea:
17:d9:b1:94:ee:b7:6c:45:d9:d1:f9:a7:ce:cb:42:
10:a0:8f:c3:3c:37:f7:d6:55:c9:f4:4f:7f:39:b0:
98:fb:e1:ce:2a:06:45:e2:53:08:62:b6:7e:24:a1:
9e:6b:13:8d:d9:ef:8d:fa:7c:74:b9:84:34:c5:a6:
f6:2d:6f:a2:dd:49:c2:eb:0e:cf:2f:15:83:73:0b:
52:bb:bb:82:36:9b:45:b4:5e:dc:b0:3c:0b:ee:0e:
cf:06:85:2f:e1:49:11:f3:79:01:ae:97:a3:28:38:
9e:77:a6:67:35:19:8f:11:ba:f3:e2:1a:80:c6:b8:
7f:e4:89:46:87:3c:85:85:f3:0a:8f:53:39:1a:09:
97:3c:64:49:5a:3b:d1:39:5a:a1:ab:99:5d:8b:f5:
9a:f1:3f:fa:8c:ea:cd:a0:59:a0:3e:2b:99:45:e6:
63:c1:a2:ff:a9:8d:64:b9:ce:e7:35:e8:ae:c6:8c:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5D:0A:B7:D2:B5:31:D9:85:3F:17:AB:32:9D:20:2F:27:EE:E6:03
X509v3 Authority Key Identifier:
keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:13:7c:22:37:7a:a3:23:06:e3:5a:a5:36:a1:54:06:67:b4:
46:e6:93:7e:26:de:89:07:01:77:2d:d7:60:5f:d0:67:29:6b:
7a:ca:c0:1b:6e:32:07:07:22:e5:78:09:49:92:68:5b:51:50:
b1:55:4f:05:3c:ac:67:d5:9b:49:3b:fd:35:5d:6d:9f:64:92:
dc:f3:9f:5e:df:c8:61:5a:d1:33:60:9b:9f:5d:19:95:01:17:
d5:33:34:a4:33:f2:94:c3:28:45:eb:76:34:d4:72:01:6f:9d:
57:04:9c:06:54:fe:19:89:c9:90:43:75:43:ae:01:8e:48:a3:
f9:cf:06:82:a0:27:8d:94:6b:ec:93:58:2f:7f:8a:75:4c:ff:
4b:fe:6f:43:db:a9:24:6d:89:b3:fa:3e:47:53:58:a5:6a:80:
1f:79:9b:e8:94:95:84:c8:5f:94:c8:ab:24:9a:ce:c9:b0:25:
99:d3:c2:50:5d:84:6f:e9:5e:de:a9:ba:52:1b:ec:d7:35:db:
43:b8:35:35:2d:cb:99:b8:13:de:e7:a3:c3:3d:4e:48:b0:f0:
22:41:ab:1e:92:05:22:22:11:1b:6c:7e:10:59:66:64:51:fe:
49:45:aa:24:ea:31:b0:d8:13:f3:02:04:6c:ef:77:9f:ed:7f:
4f:e2:14:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:22 2025 by rpki-client