Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: BlcoWjE8MnzE2h73btB5PCqBjM4k1Eji7MOqCMjvtuw=
Subject key identifier: BD:4C:0F:7F:FC:C5:10:AA:A2:6A:ED:B4:F9:3D:4F:FB:B1:00:57:6C
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 019A4D741789B8A815A6E4AE6AF2C02A86E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:45 +0000
Manifest this update: Tue 04 Nov 2025 06:00:45 +0000
Manifest next update: Wed 05 Nov 2025 06:00:45 +0000
Files and hashes: 1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: yYfUya8cDeyDjOWKdvf9QpcTxXZc3nPj/7VZ0ua25Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:17:89:b8:a8:15:a6:e4:ae:6a:f2:c0:2a:86:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Nov 4 06:00:45 2025 GMT
Not After : Nov 5 06:00:45 2025 GMT
Subject: CN=bd4c0f7ffcc510aaa26aedb4f93d4ffbb100576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:95:98:a3:1b:6d:d5:6a:d2:49:8f:e8:58:
2b:89:fa:22:8e:1d:a7:c6:ce:88:c4:1e:39:9b:df:
65:98:f6:74:10:2d:64:a3:2c:cd:a3:cb:3c:1f:c1:
11:d4:35:43:cd:a1:37:06:cc:f5:b8:81:66:26:91:
e4:4f:db:15:ed:45:9d:89:2d:18:7f:56:fb:dc:b5:
e1:60:1e:3b:4a:19:6e:24:5a:9b:7e:d4:7b:91:68:
14:3b:68:cd:16:94:78:cb:99:70:a0:5a:b3:19:bf:
5d:c9:07:38:95:bf:05:93:fb:ca:2a:19:17:fc:a9:
d4:18:24:9b:7c:46:25:0a:fc:ef:66:c0:7b:b7:0a:
5d:f7:72:b3:f8:0a:cb:71:e2:89:3d:a2:47:53:d7:
a6:53:62:ff:3c:91:a9:78:56:e2:4b:a7:99:01:c5:
c3:bb:e3:84:22:71:0b:cf:cb:a4:0a:44:3d:81:f8:
03:53:8e:77:56:70:36:d5:f9:57:a2:dd:1e:43:6e:
b7:02:b7:0c:ed:4a:00:b3:d7:07:2e:fd:71:a0:93:
d4:6c:2b:70:43:31:49:30:d4:4e:13:39:ee:60:a9:
36:09:53:e4:56:a3:cb:49:37:60:f4:5c:fa:a8:34:
11:fb:6d:b0:4a:5d:b6:f8:0e:4a:79:0d:47:d8:99:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4C:0F:7F:FC:C5:10:AA:A2:6A:ED:B4:F9:3D:4F:FB:B1:00:57:6C
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:66:01:83:ae:b0:b8:fa:4c:81:f5:25:92:68:f6:0f:08:82:
6d:1b:96:51:83:8d:d8:1e:6c:8e:10:83:77:bb:5f:c6:92:35:
10:91:fa:9d:ce:0b:31:56:b4:6b:fe:a3:d0:8a:87:1f:4a:33:
d4:1a:68:a6:73:c6:2e:b4:f4:79:3b:d5:af:be:fc:0a:92:e9:
51:4a:c5:8f:84:c2:1e:29:69:b4:79:81:73:52:40:2f:13:10:
a1:60:aa:58:33:76:be:11:2a:07:92:5f:9e:0e:0a:94:71:dc:
04:f5:87:5f:55:a9:82:12:27:81:ef:02:ac:f1:e6:fe:d5:61:
77:02:74:e2:bb:5d:5d:e5:60:a7:ab:3c:48:bf:32:ac:c4:d9:
9b:8d:57:08:f7:a3:f2:14:1f:f3:af:da:6d:83:a8:ab:c9:81:
b4:58:2a:45:96:6a:bf:6e:ba:89:ee:72:fe:85:41:80:ff:57:
25:9f:95:44:49:de:b6:1f:29:c3:c6:63:70:ca:df:91:1c:64:
d1:f4:5b:ba:cc:9c:68:c7:e7:72:04:0e:c4:12:bc:f2:43:fc:
cd:8b:4d:ea:f2:80:dd:8e:ba:6b:bd:fb:c4:5d:6f:9f:8b:a3:
85:e0:aa:47:e2:66:f5:39:4e:e6:74:88:f8:a3:f3:3e:d2:b3:
d4:a7:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:06 2025 by rpki-client