Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: 42vZfvwp71O1QOhqH88fpBS37Hz7JWAamUEvUI/vXVE=
Subject key identifier: 90:D3:8E:9D:22:88:A3:F3:DB:82:47:A3:C7:1C:4D:78:DD:DD:29:49
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 019A4C98193AE971F12AD36032D35055FF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 1650
Signing time: Tue 04 Nov 2025 02:00:27 +0000
Manifest this update: Tue 04 Nov 2025 02:00:27 +0000
Manifest next update: Wed 05 Nov 2025 02:00:27 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: KrKzzYNzZHFCyQXLAo8Omd4I979faeApIRDVYtiK3nc=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:19:3a:e9:71:f1:2a:d3:60:32:d3:50:55:ff:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Nov 4 02:00:27 2025 GMT
Not After : Nov 5 02:00:27 2025 GMT
Subject: CN=90d38e9d2288a3f3db8247a3c71c4d78dddd2949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:47:ff:38:a0:5a:eb:99:7b:86:db:2e:96:dd:
90:ca:3c:01:6f:af:31:41:8a:36:83:1b:0a:66:4f:
50:70:fd:48:7d:f2:8a:51:ac:25:f4:08:37:04:7f:
65:a4:79:4e:df:11:49:96:48:2e:83:15:fb:5f:b7:
ec:e6:43:bb:96:95:b2:f3:7e:dd:4f:60:2d:54:68:
18:f7:65:5e:8e:a4:15:cc:52:ae:5a:6d:0d:04:dc:
0f:a2:50:a0:5e:5b:7d:4f:22:3c:a7:1d:62:5e:3b:
4f:2e:1a:47:38:59:fb:95:a6:4d:11:fa:e4:9d:32:
e1:e1:9f:60:41:a1:48:0c:7a:fe:0b:78:a9:8d:03:
c4:fe:71:b8:34:19:ff:90:d2:6b:02:7e:db:3a:99:
84:18:3c:15:f7:0a:94:37:37:0f:0d:82:84:ef:8e:
76:53:a6:10:ae:29:3a:be:51:13:90:f5:62:aa:ed:
ea:44:55:1c:9f:db:ee:e7:6f:0f:f1:75:69:bd:6c:
66:cf:16:ac:bf:fc:19:c0:a5:b9:86:66:a0:9c:8f:
42:b6:a0:77:4e:e1:c0:bb:11:13:ab:e9:04:5d:8c:
20:06:7e:0a:d0:7e:5c:3d:6b:1f:d6:d3:57:4c:9a:
3e:9f:23:a7:92:76:7a:20:19:41:9c:fa:ab:ef:a9:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:8E:9D:22:88:A3:F3:DB:82:47:A3:C7:1C:4D:78:DD:DD:29:49
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f8:de:9a:14:66:7b:f1:5f:90:dc:0d:21:0e:e2:a2:5b:57:
5d:fe:8d:ad:28:66:f5:0e:30:eb:a4:05:eb:97:0b:ca:02:a4:
3e:4e:bb:36:bb:6d:a8:d3:58:26:82:01:53:6c:69:18:1d:93:
4b:68:4c:d2:21:59:14:bd:aa:3a:d4:73:61:3f:b3:67:e1:af:
65:f4:2d:9d:81:9e:5d:bd:32:c6:fa:87:6b:8d:ff:8b:87:3e:
f6:7d:86:44:fb:24:09:f8:63:13:55:ff:32:82:98:cc:d9:83:
13:ac:ba:1b:4f:14:87:e6:f2:01:7f:9e:f7:23:43:69:52:39:
a0:66:29:a6:b2:20:c8:02:bc:f9:b3:78:73:2c:67:34:4a:d3:
94:8d:fd:28:eb:27:fb:75:1e:b2:aa:3f:e2:3f:1f:91:71:c5:
ef:70:1d:87:35:bf:ad:d2:d3:a9:f1:8d:43:bb:f2:4f:05:7f:
a3:2d:14:c5:f4:a3:b8:9b:03:f0:32:2b:7c:e5:04:0f:81:0c:
fe:f5:49:2e:31:a1:72:23:fa:25:7f:0f:e6:81:c8:c2:8f:2a:
59:f2:4e:b0:6c:c5:3c:1b:19:bb:4c:a0:42:74:42:2c:ac:91:
90:bc:cf:ec:45:86:d5:d7:cb:5d:e2:4b:61:4e:81:a4:38:fe:
74:89:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:52 2025 by rpki-client