Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier: s3CWHpRhjyJNIFaK5SaoP0g5fY/1uP16QwNFLcQozIo=
Subject key identifier: 30:C9:61:4D:1D:8E:F2:EC:53:76:FF:23:7C:A8:96:04:40:F2:58:3B
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019A5119908218E320A0AEFACBBCB9338C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number: 173D
Signing time: Tue 04 Nov 2025 23:00:21 +0000
Manifest this update: Tue 04 Nov 2025 23:00:21 +0000
Manifest next update: Wed 05 Nov 2025 23:00:21 +0000
Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: NWDcuc6dewg4DWlhK+f/L+73dcSqAN96lLWVN2G3CTI=)
2: DdbBxkSpqv27jL5VCitevUUKtGo.roa (hash: W2qQ5Ka9ZbfjONO7pHLlOm1UmxsrTkoa9epsQmZhKZM=)
3: KOSFefQ82yRsHMP6xQC1amzxZ5A.roa (hash: PbOvMYy+aS17nQQCkPtiW0Swv+8ZrIMSdL3ZQAHYmIQ=)
4: U4B8gIRkl6vMFpf6uf4FiRg-PGU.roa (hash: xjlWzszBjbkzgZlr1n6anraY55j54PVbdFl2R0E6OSc=)
5: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:90:82:18:e3:20:a0:ae:fa:cb:bc:b9:33:8c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Nov 4 23:00:21 2025 GMT
Not After : Nov 5 23:00:21 2025 GMT
Subject: CN=30c9614d1d8ef2ec5376ff237ca8960440f2583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:65:76:3c:fa:e2:1e:8a:91:db:84:72:c0:
c2:d6:77:80:c7:b3:3e:c6:1c:a9:1f:75:18:ac:a8:
4a:b6:d2:fb:91:b5:75:fd:8e:75:00:9d:f4:83:bc:
a1:75:34:4b:d6:91:c2:5d:07:82:aa:de:bb:c5:11:
9c:08:58:5c:25:3f:2b:51:e0:9b:df:b6:a7:7d:ad:
7f:e4:ce:e0:d3:65:92:ab:de:07:b2:b5:fb:1d:e6:
88:e3:25:06:9d:9a:c5:5f:eb:12:95:93:d2:8f:51:
8c:aa:40:09:3a:20:0d:52:5f:b3:05:02:50:65:b6:
1e:1a:6c:19:c4:c1:64:4d:6f:11:59:94:3a:4a:1f:
86:65:a3:20:d5:fa:48:b6:78:ae:61:25:47:93:7b:
89:56:9e:f6:12:5a:7f:fb:e3:a8:e1:43:b2:6d:9b:
6f:28:3f:eb:fa:17:3b:ef:0b:ae:d3:e1:4e:c6:ee:
4a:95:bd:14:83:62:45:c2:48:da:8b:e6:e4:49:6b:
94:21:a2:2b:0d:25:65:49:41:49:30:e2:5d:fe:05:
6e:f2:a0:a3:31:a8:2c:9a:23:12:e6:a4:c8:a0:3a:
89:73:32:6c:88:31:69:fc:cb:c8:b9:13:bb:77:2b:
9d:91:67:5c:75:de:34:91:34:72:dd:a4:d5:9b:c2:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C9:61:4D:1D:8E:F2:EC:53:76:FF:23:7C:A8:96:04:40:F2:58:3B
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f3:a1:b2:80:76:00:54:99:b3:a1:c3:b9:1c:09:81:b1:0a:
a2:2e:b2:3d:ad:24:9f:fb:b4:b1:63:1e:b3:1f:b6:25:e8:c3:
43:fe:73:7e:3d:96:d0:72:7e:2c:40:fe:46:d6:9e:a7:22:54:
d2:4c:f0:20:a5:78:cc:39:19:ed:ad:48:b0:6b:c8:6d:21:cd:
70:55:5f:00:c5:3c:ab:4f:d9:4f:bf:44:0e:f9:34:f4:51:b0:
33:aa:dc:71:3a:1c:29:d0:ce:ab:c3:b3:87:8b:f9:d3:03:6f:
f3:58:47:31:ae:ea:ca:1c:d8:24:64:89:46:f0:3d:a9:98:51:
33:6e:da:c7:8e:ad:10:8d:74:eb:e9:52:87:b6:8c:d4:d0:a4:
cf:24:a0:a0:3d:eb:d5:3c:d3:94:62:7a:d3:11:69:d3:ce:b1:
0c:52:62:d2:ef:36:12:ca:89:4a:a3:4b:86:4c:8a:7a:bc:75:
14:6d:1c:4f:5d:66:ac:d9:7d:38:96:fa:3e:8c:02:f3:d8:7d:
4e:e0:68:27:ee:98:96:c0:6f:5a:2b:bb:27:c1:de:52:ce:53:
0d:15:fe:08:91:bb:c5:66:12:ab:74:a5:36:d0:45:72:1f:22:
66:2d:e1:48:e2:ce:2a:9c:68:d5:44:54:81:fc:44:20:ce:11:
70:91:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:49:05 2025 by rpki-client