Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: uwcY4Rb5f1poaEaCfS8B8jOWiEhp2X3XXs0TjExomjI=
Subject key identifier: 80:AA:90:5A:2C:AD:77:BB:4D:E2:74:06:7B:AE:49:64:92:6C:C3:73
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 019A55D216B51E942667FACE28128D3B7740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 21:00:22 +0000
Manifest this update: Wed 05 Nov 2025 21:00:22 +0000
Manifest next update: Thu 06 Nov 2025 21:00:22 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: UEImkEagzo7t7O2/kPOEWNMtXY+Ap36k+JbyNcYiFvw=)
2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:16:b5:1e:94:26:67:fa:ce:28:12:8d:3b:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Nov 5 21:00:22 2025 GMT
Not After : Nov 6 21:00:22 2025 GMT
Subject: CN=80aa905a2cad77bb4de274067bae4964926cc373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:36:ca:84:20:8e:c9:37:c5:4b:b6:c2:79:
b0:86:4f:db:4a:ec:7b:a8:46:49:c2:00:8b:c5:4c:
0d:7d:0c:97:2a:e0:d5:a7:97:de:c1:bf:2d:3d:29:
c6:dd:1e:bb:61:ff:04:f2:ae:26:66:ef:0c:ad:0f:
44:78:7a:42:2d:09:36:da:03:e3:ba:42:29:cb:4d:
c2:69:e0:f8:30:88:1d:e1:0e:12:29:ed:58:56:43:
b5:dd:0e:b1:7c:c0:50:e4:f5:51:70:bd:75:29:1d:
66:64:df:33:ec:0f:c4:06:a9:b9:b3:e3:11:4c:89:
32:b6:e2:d9:9c:1c:d2:13:af:58:60:ca:48:a6:71:
9d:b9:9c:01:9d:36:3c:fe:f8:03:af:7c:f8:db:3c:
08:94:fc:56:64:c9:b2:00:8f:07:08:0c:31:f4:91:
38:37:11:c9:19:11:24:41:a1:28:24:ac:20:db:8a:
67:06:a5:1f:c0:de:9f:1d:e1:cb:c3:0f:c8:b7:12:
ed:ee:6b:a6:33:43:23:bb:e2:b0:9a:5e:22:bb:c0:
f3:b2:bf:48:50:a9:7f:f7:c8:4d:89:47:89:62:3d:
a3:4c:0b:42:4f:7c:11:a4:5f:9c:eb:c8:53:7f:7f:
15:b6:8b:5b:23:cd:a3:d4:73:67:b3:34:8b:ea:dd:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:90:5A:2C:AD:77:BB:4D:E2:74:06:7B:AE:49:64:92:6C:C3:73
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:83:1a:57:b0:cf:11:9d:37:6c:f1:df:a0:5d:b7:41:28:97:
3e:20:f9:24:1f:2a:e9:65:11:ea:c3:d8:87:24:a5:4e:61:b4:
be:27:de:db:52:ba:cc:86:21:55:a3:7f:b1:45:4a:6a:f8:40:
0a:97:6c:f9:8a:51:c1:b7:a3:b7:64:12:69:19:fd:be:c1:06:
05:a5:4e:a7:2e:b3:be:b3:37:b3:fc:11:b6:29:46:55:0d:76:
16:bb:f6:84:d2:5a:2a:60:2a:7e:52:f6:5e:d2:09:8a:a3:e2:
84:15:03:55:22:bb:af:35:a2:20:30:ad:4d:ca:1c:63:ff:78:
e9:ce:2d:9b:a0:2b:60:a2:91:24:d7:92:6e:d5:2b:91:0a:0e:
9d:79:38:78:55:2a:90:b3:df:1a:ff:60:7c:78:e1:4d:3b:21:
3c:16:5f:f1:94:49:74:f2:e2:f1:2f:0b:eb:2b:7c:ce:81:ce:
46:dd:31:b1:45:f1:df:21:95:22:dc:04:25:dc:e4:17:86:97:
4a:02:1f:62:e6:dd:66:a1:98:30:a0:c1:af:e3:31:46:d8:06:
3e:bb:ad:57:e8:f6:53:50:bb:d9:60:11:f4:92:61:aa:d3:15:
77:5f:b1:f2:4e:72:87:51:ec:8c:a0:ea:07:48:0d:f7:68:31:
32:91:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:50:03 2025 by rpki-client