Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: vCHpnuxCYRB2o2LH81DYswnOq1ghuIosIDjIhLVPx4M=
Subject key identifier: D7:49:D5:1F:DC:46:C3:8A:F4:CF:3A:D5:7B:20:D5:1F:B1:47:DC:E0
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019A5375EA01D3FAA90FF0773050C623A4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 74
Signing time: Wed 05 Nov 2025 10:00:27 +0000
Manifest this update: Wed 05 Nov 2025 10:00:27 +0000
Manifest next update: Thu 06 Nov 2025 10:00:27 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: CWu7MfixqVRKPeiBagZesNbzkV8Mptoqcqxmh22FXSY=)
2: 66i9VQv85h4cdWrREDgIRU9Jei8.roa (hash: 934EnLFeuIOeKbVZK8z3+Pf5MO8fsJyxyX8CTCcWy6I=)
3: 7oB3ar7GwFtb0clbtSqh_ldJanw.roa (hash: d421V6jyf/lL0flOYjT5So8TNIpbSRnpdeNItUDXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:ea:01:d3:fa:a9:0f:f0:77:30:50:c6:23:a4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Nov 5 10:00:27 2025 GMT
Not After : Nov 6 10:00:27 2025 GMT
Subject: CN=d749d51fdc46c38af4cf3ad57b20d51fb147dce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:be:f9:9f:fc:e6:e8:ae:8d:79:13:bc:85:
a8:55:ae:4d:6e:ec:45:5e:02:07:01:6d:b0:10:0a:
2b:50:b4:f6:45:e7:81:2c:9f:51:fb:ec:33:13:11:
ff:9e:47:ed:17:50:62:ec:b9:1b:b3:45:b6:21:5e:
b0:a1:9d:d5:ca:72:4f:03:a1:93:a4:50:3b:76:5b:
7d:d9:7c:5f:70:f2:c6:fd:2c:db:bc:dd:9a:cd:ec:
c7:ac:c8:d3:d0:51:62:b9:ed:4c:26:52:3e:8e:6a:
03:7d:9e:8b:24:8c:a6:30:b7:06:26:6f:e6:3d:00:
bf:4c:ef:3d:08:ff:ae:84:39:f3:6f:18:42:d0:40:
9b:3a:a9:79:0d:cd:42:97:3d:8e:88:e0:5e:48:0c:
10:3b:ad:01:58:e6:11:7a:9c:62:28:cd:2e:86:80:
35:44:e7:9d:af:e9:d5:96:84:98:37:8e:7f:b1:e0:
ba:77:fd:ad:1b:8b:82:f8:d0:46:c0:85:aa:50:da:
ea:96:c1:fa:6a:d3:f7:8f:dc:71:38:e2:72:d2:32:
87:93:0a:81:ae:fd:b5:69:c9:63:e5:81:bc:d1:90:
fa:88:1f:1d:6b:ae:4e:3c:11:fd:60:ee:66:7a:75:
78:eb:f3:fc:f9:90:fe:30:23:78:87:62:38:6b:4e:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:49:D5:1F:DC:46:C3:8A:F4:CF:3A:D5:7B:20:D5:1F:B1:47:DC:E0
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:00:31:b1:1d:93:65:d8:0f:4a:05:0f:64:3e:14:03:94:e5:
cf:f1:80:28:f9:ff:fa:53:a4:63:9e:a3:4e:90:70:43:d4:e4:
ea:d0:3f:ad:89:f4:d0:e3:b2:78:28:d0:9e:54:9d:cb:04:c0:
6d:05:b8:f3:68:88:a8:bf:e9:d9:00:1a:6a:7f:74:a0:fc:f6:
f6:89:14:7d:c0:d7:8b:d1:0d:aa:f7:d6:32:7a:79:0a:5d:f9:
39:d8:95:e7:68:83:cd:87:47:29:d0:bd:91:80:af:16:45:7c:
3a:e6:7f:ea:56:68:d2:03:ae:e8:45:ef:64:24:75:ae:ab:e7:
d6:d1:b9:28:51:28:fa:ee:35:75:df:9b:96:53:c8:3a:4c:31:
af:bc:bf:ad:bd:ca:9b:1a:85:d2:e7:9f:e1:e0:c6:e6:ac:39:
d9:30:e5:fb:64:f2:3c:26:41:6d:ba:41:ae:6d:e1:f6:90:9e:
ae:dd:b9:cb:4f:7f:50:3d:f1:0b:91:28:33:b5:9b:a5:5f:bc:
38:a8:be:e9:60:b6:f6:84:3a:dc:96:a8:4e:7f:44:ba:17:4b:
b6:c1:67:fd:a0:bd:0e:10:a9:7d:e4:b4:fe:bb:a8:c6:28:ca:
79:d1:5d:41:d5:ce:57:b4:94:ba:de:41:1a:87:da:93:b1:1d:
42:32:5f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:08:09 2025 by rpki-client