Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier: 7qOcZQIhhju34HX7oZOl8StNrnornJiFk5DZop9cblk=
Subject key identifier: A1:C7:09:C9:16:CE:E8:A4:09:C5:CA:3D:80:FE:6E:2F:C8:BC:BC:E2
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial: 019A50E295A69433583EF1A0B0E378FC4262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:00:18 +0000
Manifest this update: Tue 04 Nov 2025 22:00:18 +0000
Manifest next update: Wed 05 Nov 2025 22:00:18 +0000
Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: R2JooRN+oglmsnln+YjpJbQXJIji5x5KbSJjdlG9rXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:95:a6:94:33:58:3e:f1:a0:b0:e3:78:fc:42:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
Validity
Not Before: Nov 4 22:00:18 2025 GMT
Not After : Nov 5 22:00:18 2025 GMT
Subject: CN=a1c709c916cee8a409c5ca3d80fe6e2fc8bcbce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:74:cf:0b:49:47:79:78:cb:1b:2a:1c:38:
b7:2d:98:3c:dd:93:49:82:04:6c:61:5c:13:f7:17:
b7:b0:3b:be:bd:e4:71:15:4a:c5:84:83:1f:1e:44:
7c:1a:0c:e7:72:b2:99:ea:bc:77:e7:5b:cf:b5:68:
58:30:9e:12:32:8e:07:53:e1:fd:7b:48:e5:c8:4c:
e5:8b:aa:1c:8f:14:41:3c:ad:77:64:45:0e:8e:ff:
91:40:31:25:7d:74:be:3f:1f:1a:e3:e8:2f:4e:a9:
a4:a8:15:3d:15:c1:cf:ba:f4:76:5e:66:2c:0a:83:
62:68:54:29:59:93:8f:ff:43:08:e6:24:18:e8:b6:
ef:49:96:2b:1f:47:74:df:ee:f1:3c:22:20:0f:72:
c5:b9:f2:48:4e:67:73:58:5d:d5:39:24:4c:46:3e:
e2:98:b5:dc:b0:32:aa:ad:6a:e3:b5:ad:8d:da:11:
b5:3c:38:93:c6:92:68:f4:24:93:90:2f:85:7a:10:
30:cb:a2:96:69:5f:46:96:77:11:e9:be:f2:51:42:
fc:76:43:d4:f3:e5:0b:33:56:c1:75:a3:a2:ec:35:
8f:c3:cd:f3:cc:a9:68:05:84:e6:d5:4a:02:35:c9:
38:e0:ab:13:15:60:d9:5c:64:da:4a:66:e3:eb:c6:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:09:C9:16:CE:E8:A4:09:C5:CA:3D:80:FE:6E:2F:C8:BC:BC:E2
X509v3 Authority Key Identifier:
keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:84:19:46:3c:b4:82:5a:71:1d:b6:ba:9d:c7:2e:8c:95:6b:
d7:93:12:1d:8e:09:9c:6e:ac:de:95:af:e6:50:1c:fe:79:01:
a1:e4:6b:a7:4e:4b:25:7c:bf:27:b8:9a:b0:bb:b1:d7:22:68:
f4:cc:81:3e:81:4a:81:1f:ea:6c:90:1c:52:50:9c:c1:06:c5:
fc:42:c7:6d:1b:2e:d2:99:e7:be:dc:98:86:9c:f6:f2:e3:8a:
31:ff:b1:07:23:6d:02:4a:f4:59:3c:69:fb:fc:28:51:41:87:
53:62:b4:0c:5c:31:c3:03:63:63:bb:44:35:9a:17:b2:55:99:
97:dd:b7:d6:30:6c:c7:62:95:4e:ca:e8:df:8e:82:eb:49:08:
d1:75:e7:1f:ad:3e:cc:d7:e5:9d:2e:7b:c7:b2:c5:d4:7e:ee:
26:2c:e5:86:47:68:db:15:6f:28:d8:4a:c3:f3:71:f9:fd:4b:
9c:39:f0:15:5a:c5:e3:40:37:e0:11:a5:56:2e:37:b1:c5:4f:
3a:ab:d8:1e:0e:d1:b0:08:fc:58:5c:65:b3:4f:86:3c:3f:e8:
70:2b:ca:04:a7:c7:4a:e4:8b:7e:62:d8:cb:75:8b:e0:a3:8b:
2e:8f:c5:3d:ca:3c:a5:40:be:b1:16:c2:47:60:66:54:61:28:
d6:69:ee:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:17 2025 by rpki-client