Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: gCwjPhqYqGFIUJF0ifaxYcqiAbIyT/pWabSrTz0FBhc=
Subject key identifier: CF:FE:F4:6F:0C:86:4C:28:37:65:E0:21:49:20:08:07:CD:8F:26:11
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 019A4D3CE625F3710CA857011EF2C0A1C0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:27 +0000
Manifest this update: Tue 04 Nov 2025 05:00:27 +0000
Manifest next update: Wed 05 Nov 2025 05:00:27 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: WhR4XxmmbXCc/fiUljN0aOKtaNGQPiCdgzdZDqX2/TA=)
2: RRxWR41Hund7xXvTLqB2r5qi970.roa (hash: rUpiHcsIUELuq5TefHF1+krXhbgfuQVPMP1TCObsJG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e6:25:f3:71:0c:a8:57:01:1e:f2:c0:a1:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Nov 4 05:00:27 2025 GMT
Not After : Nov 5 05:00:27 2025 GMT
Subject: CN=cffef46f0c864c283765e02149200807cd8f2611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:7e:88:82:71:1b:62:0c:34:56:5c:f7:9d:
34:a2:fc:1e:be:4a:a2:8b:94:d8:c2:23:45:22:09:
a5:75:4e:6d:1f:9f:26:59:d7:00:c5:cd:26:5d:f5:
c6:22:db:94:d5:27:6d:51:a6:22:d4:56:90:77:94:
0a:1c:c2:00:0c:6d:7f:95:7a:cd:95:2b:d9:0e:97:
a4:91:23:06:cb:f6:cc:85:15:90:21:ce:83:fb:c1:
4d:5a:19:b0:21:a3:7c:e2:98:5b:f5:90:f2:b0:75:
e3:a6:59:d5:ca:0c:97:bf:f0:39:61:d3:92:cc:6d:
11:66:8d:84:56:5d:64:6b:0e:a3:23:b7:66:d2:a8:
6c:7c:b2:80:1f:a9:90:55:76:03:3d:cc:5d:04:ce:
a9:8c:ca:be:90:49:15:e1:41:64:08:59:d6:2f:f2:
29:b3:b4:9b:10:eb:6d:7e:fe:d1:d4:35:9c:1e:ac:
37:0c:72:0f:e2:5d:88:4d:d0:64:a9:38:aa:87:ce:
81:7a:e6:87:3d:5d:66:52:70:a3:28:a4:6f:9b:43:
3f:34:27:25:9a:21:75:ab:db:24:d9:30:6e:c1:6c:
80:35:9c:9b:25:9b:6d:a8:93:7e:3d:ea:7f:be:01:
4b:45:8f:15:e9:b4:21:2a:be:fa:39:90:66:02:d9:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:F4:6F:0C:86:4C:28:37:65:E0:21:49:20:08:07:CD:8F:26:11
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5c:1c:e9:70:5d:db:a4:bd:d4:af:f6:a2:63:0a:0d:bd:35:
86:40:99:73:49:ff:5e:cb:51:fa:2c:07:47:07:de:8d:45:fd:
6d:c4:e9:3a:b6:cc:63:6a:b2:68:98:e7:2c:a8:ec:b8:10:14:
76:5d:41:83:93:e4:08:06:cc:6d:24:df:5d:a6:64:ca:73:b5:
7f:9f:eb:2b:7b:15:6d:34:e8:ac:8d:1b:fa:a3:c5:03:f7:f9:
c6:f1:5b:7a:49:6b:9a:4a:a1:1f:09:6f:6d:b0:24:87:03:b5:
f0:b0:b4:07:6c:52:34:20:4c:61:d8:b0:f3:89:bd:95:d8:2c:
04:de:f8:e6:d6:e6:cd:7f:7b:4c:69:c6:0b:94:51:e8:2c:a1:
0c:2f:e4:aa:c8:67:e7:6e:69:72:71:9f:fc:5e:05:6b:49:d4:
85:4d:3b:7a:1d:9d:6b:f0:c7:15:dc:f4:be:00:31:6a:91:db:
9e:80:5d:9e:97:e9:76:0d:3c:73:87:3d:e8:fb:6a:02:a5:a4:
42:d5:31:ad:22:b2:89:e3:7f:67:0d:d3:07:68:fc:15:80:f9:
9b:46:b8:b5:1a:c4:63:da:b3:2d:13:0e:91:5e:dc:50:ba:a2:
be:6f:6a:72:65:8f:e3:c4:8c:bc:53:1a:92:18:b6:e9:4b:9e:
ec:d8:bc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:17 2025 by rpki-client