Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: FXEiluWlXrd7/KwB4p+WqApKuTmMLeoq8L8//s/xgLI=
Subject key identifier: 72:5F:79:CA:F9:5C:3B:BB:A0:B7:3D:2D:58:D7:59:39:4A:46:37:BB
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 019A4E4FC04CE85013512C06C9B1DBD28D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 09D7
Signing time: Tue 04 Nov 2025 10:00:40 +0000
Manifest this update: Tue 04 Nov 2025 10:00:40 +0000
Manifest next update: Wed 05 Nov 2025 10:00:40 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: nC5N7CcEfAPsOvzhqPYx/RRW3moQsTyuR0S1RO/++5s=)
2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=)
3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=)
4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c0:4c:e8:50:13:51:2c:06:c9:b1:db:d2:8d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Nov 4 10:00:40 2025 GMT
Not After : Nov 5 10:00:40 2025 GMT
Subject: CN=725f79caf95c3bbba0b73d2d58d759394a4637bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:d5:e1:7c:a3:b0:38:28:5c:30:02:59:e7:
ba:92:98:e1:ae:ac:3a:88:62:53:ac:f1:b3:e8:99:
b1:7d:c0:91:e8:32:d5:7c:e8:34:04:fa:53:6c:70:
41:e0:56:9a:ee:77:40:7b:f3:24:12:68:14:28:09:
98:14:02:05:af:30:67:e7:8a:28:22:6e:6f:6a:14:
09:92:1c:67:ff:f3:5f:73:01:ac:47:2e:64:c3:2d:
f5:60:7f:51:f0:ef:1d:77:18:94:00:c7:46:fd:51:
f3:55:07:d5:db:d4:5b:2a:8f:07:6f:a0:7f:96:cc:
1a:c8:f1:90:11:27:f2:6d:9e:f8:e1:0a:f5:64:04:
a9:c1:b0:01:49:76:6c:6d:4a:5e:c3:74:44:3f:73:
08:70:84:22:4a:13:e8:11:7a:4e:ae:b0:f0:a9:4e:
e6:92:0b:c1:4a:38:d8:67:59:4f:79:02:53:9e:eb:
f4:02:25:5a:4a:aa:17:99:54:9d:48:ce:18:d2:ec:
7d:90:63:3c:fd:0d:d2:70:e4:36:c6:93:1b:3c:85:
d8:84:0d:55:81:cf:aa:c8:70:36:ae:f9:ee:db:f7:
9f:36:0b:38:49:c9:54:bf:1e:f2:36:da:e4:d5:d0:
af:80:22:b9:51:4c:58:71:84:82:b0:8f:ca:c6:9e:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5F:79:CA:F9:5C:3B:BB:A0:B7:3D:2D:58:D7:59:39:4A:46:37:BB
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d4:9f:2a:10:c4:fd:b6:6f:ea:19:d7:53:0b:b3:c6:c8:23:
67:3d:73:89:00:79:ef:56:56:46:f6:b3:50:f5:58:f4:ad:6a:
46:85:f8:46:b4:64:d0:51:64:69:58:65:44:1a:54:73:79:89:
cf:ab:29:5a:a2:a8:85:11:68:92:4d:ec:76:7c:56:23:5d:c1:
72:dd:b4:f4:9a:03:74:21:b3:e0:43:12:b9:ba:ed:fe:61:44:
09:a2:33:27:51:eb:d6:86:af:48:99:8f:5e:ff:9e:54:a5:36:
47:62:cf:78:77:db:4c:f2:ad:7f:25:e7:86:6d:3a:ce:3b:69:
7d:71:86:33:7d:db:db:79:9f:54:78:ea:94:0f:e6:76:fb:8f:
23:d4:df:08:bb:3f:43:93:0c:e6:08:4d:72:4a:07:6c:8a:ae:
54:43:bf:8f:3a:81:09:92:75:5f:c1:da:54:83:e6:82:04:4e:
60:34:d7:aa:51:92:bf:b2:af:64:be:f2:ab:58:a4:06:0f:e6:
ae:76:d6:92:cb:99:99:39:60:ae:30:cc:22:0f:9b:78:30:e3:
c3:aa:18:e5:2c:92:43:e5:54:d7:3e:4a:84:48:2b:c3:af:8e:
57:7f:25:e4:30:70:be:be:ca:74:cc:17:3f:46:b5:21:84:2f:
d6:e9:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:02 2025 by rpki-client