Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: E9wrFhBl4P8+t5dZk2yC633qO/dPR22DYVundRMde8U=
Subject key identifier: 14:34:18:42:2A:ED:D5:61:81:82:06:CB:3E:70:99:BD:83:B2:18:FD
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019A507529E1033B22053C4A8AC4FFF54AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 20:00:46 +0000
Manifest this update: Tue 04 Nov 2025 20:00:46 +0000
Manifest next update: Wed 05 Nov 2025 20:00:46 +0000
Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: TKwkr/X2GdXa8jcKpCV/tM6RI8lgFzDNkB9pQLgAGhE=)
4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:29:e1:03:3b:22:05:3c:4a:8a:c4:ff:f5:4a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Nov 4 20:00:46 2025 GMT
Not After : Nov 5 20:00:46 2025 GMT
Subject: CN=143418422aedd561818206cb3e7099bd83b218fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:93:7b:5a:f1:e2:7c:0a:48:06:87:d3:8c:
bd:ad:eb:0d:63:e6:c4:5e:3c:84:14:3b:73:bb:de:
66:f1:63:f5:c2:a4:e0:e8:75:b1:91:c6:ab:4e:e1:
01:cc:38:65:95:1b:08:27:9f:da:5d:63:b6:70:8c:
29:c2:76:b9:79:b3:00:06:84:0a:63:6d:94:d8:98:
53:d5:50:b5:c8:07:61:8d:6d:3a:a9:48:ed:a5:51:
81:a2:e6:d3:45:bb:0d:65:e0:e9:24:b5:ac:50:1e:
05:1e:45:34:a3:6a:88:b9:7e:4e:63:9e:33:38:af:
70:d8:a8:03:de:65:0a:b2:d7:97:26:a6:55:fd:b8:
94:38:48:75:24:91:60:2d:da:67:ea:21:7e:21:0b:
1a:62:6b:a8:ac:ff:14:26:7d:a4:2f:50:a8:a4:42:
a6:44:92:a6:46:eb:0e:72:96:b4:66:ea:ab:d5:ef:
98:b7:e0:61:d5:57:a1:d9:bf:81:f5:0a:52:69:b3:
19:58:f0:dc:2d:41:f9:c7:79:21:d4:65:f2:79:7c:
d9:6d:5e:11:45:10:64:2b:6f:05:cc:0c:59:b6:cd:
0e:cb:72:c3:c8:85:ca:1c:a7:01:cb:ab:0a:93:89:
83:ce:ae:dd:8e:71:97:6f:69:51:ea:86:6b:d2:3a:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:34:18:42:2A:ED:D5:61:81:82:06:CB:3E:70:99:BD:83:B2:18:FD
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:19:f7:8a:1a:8f:e2:7c:c7:fd:76:19:b3:25:e5:b2:d3:ce:
95:df:4a:da:0c:c3:c7:93:28:99:7e:c3:45:08:84:0e:ab:20:
39:ee:d7:52:de:03:8c:5c:16:74:e0:1d:63:a1:4f:f2:d3:17:
0c:91:21:2d:df:42:1c:77:91:f1:07:db:cd:b0:14:d3:7e:ad:
4c:49:4b:24:66:b5:f4:23:b1:43:6d:db:8d:87:94:9c:66:b3:
c1:3a:78:8c:b4:1a:4f:32:7a:63:b1:86:ca:32:bd:e2:00:bc:
de:d0:78:36:08:f0:f3:b8:af:0e:2b:e9:91:86:96:a2:39:d9:
3f:30:bd:5c:0f:38:cb:74:75:21:91:2e:ee:34:fa:8c:b1:c5:
0b:02:10:15:51:c9:f0:5a:0e:94:f8:1b:88:f4:f5:d8:27:84:
b5:64:51:4a:a6:b1:45:dc:a3:68:81:74:da:93:67:d9:86:80:
33:2b:3a:c8:83:4f:13:a1:5b:ae:0a:8d:31:4b:f6:3f:48:38:
71:9d:e5:46:2c:a4:78:34:69:6e:d8:b0:83:a2:a9:f4:c0:53:
60:4f:13:3c:93:e2:84:e2:23:a6:a0:d9:6c:5c:03:c1:78:8a:
3d:57:11:34:c1:00:b2:5f:d5:90:93:c4:e6:27:d2:e7:1b:86:
7e:c8:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:19 2025 by rpki-client