Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
File: dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json)
Hash identifier: adrAKHakS7el5CkP2FIAIrkOXZwH7Aq5Us693Ci+Jro=
Subject key identifier: 35:6F:99:73:65:85:0E:0C:CB:70:E8:DB:D7:AE:B1:66:B7:A8:F2:A2
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 019A51194DAE0F4F6E816DB02630544908AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 23:00:04 +0000
Manifest this update: Tue 04 Nov 2025 23:00:04 +0000
Manifest next update: Wed 05 Nov 2025 23:00:04 +0000
Files and hashes: 1: 0gep-REqlULawvS-x4T-wK7S7GA.roa (hash: FGJj6xlXiADWsaDG4OrAocOgRs0lC02TjnV2BjtgY1E=)
2: Q1XUBD_s1D_F0SITgp44J4I9gSg.roa (hash: w5981UwpX34Mt96TzsvSXFggOvVKomyq+xMftlqjtX8=)
3: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: 363M5gCDwxFoaq98PX6V6B/v0+6xXzvlF0KBd+I1Yps=)
4: wN2TdkfIPR3J0gvl0DtgYNB7D9w.roa (hash: NqvC6VGS3DEUxOPhIZWiZLcfYzHuOJ6bd3D616XpZos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:4d:ae:0f:4f:6e:81:6d:b0:26:30:54:49:08:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Nov 4 23:00:04 2025 GMT
Not After : Nov 5 23:00:04 2025 GMT
Subject: CN=356f997365850e0ccb70e8dbd7aeb166b7a8f2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:c8:eb:96:1f:18:74:47:fb:89:84:0c:0e:
0e:de:6a:a3:a4:bf:f8:f5:02:79:22:35:e7:59:1e:
ab:71:7d:a7:79:5b:38:bd:17:84:37:10:18:1f:8d:
65:10:08:91:0e:33:91:7a:aa:54:3c:d7:9a:b0:1d:
e5:b5:81:4d:be:3f:bc:a5:9b:17:d8:2a:46:f9:fe:
dc:53:55:b8:7a:68:8d:9f:37:7d:3e:0a:57:e6:d0:
d0:90:2d:c8:d0:1f:27:50:58:d3:ae:fb:ee:9f:dd:
4e:83:d5:dd:ba:fb:ac:b5:96:df:94:cd:b9:1a:29:
33:5c:25:cc:98:30:90:6a:78:c4:22:02:fd:7d:98:
0b:96:57:86:9b:88:9c:5a:4d:af:36:e1:32:ec:0f:
68:3d:6b:2b:8b:b9:c5:2e:26:a6:90:11:1a:f7:24:
81:71:04:a0:f5:6a:04:59:38:b2:cf:9d:2e:41:32:
56:02:1f:1c:10:aa:36:a1:0f:71:7c:41:04:89:5c:
61:1a:2c:39:18:16:fb:7a:c5:50:7b:c7:cb:34:ab:
ec:71:bf:3f:4e:81:21:8d:5c:4e:64:9e:83:a7:cf:
68:b3:0d:c7:bf:be:6c:c3:68:fe:83:1f:d9:37:1a:
26:87:c7:16:bb:3f:4a:19:f9:b8:b2:27:0d:e9:61:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6F:99:73:65:85:0E:0C:CB:70:E8:DB:D7:AE:B1:66:B7:A8:F2:A2
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3f:e1:64:b4:99:47:f6:21:cf:0c:e7:d7:08:af:ce:a2:76:
24:d1:97:b1:93:05:78:fe:56:0e:60:ae:e9:b3:25:1e:87:e0:
76:81:fd:e4:84:0d:82:e2:04:c7:a0:4d:b0:db:eb:59:a1:42:
01:92:28:2d:40:6e:07:ec:02:58:3e:be:82:2c:7f:b9:94:38:
a8:89:fb:98:fd:ec:91:d7:8a:72:21:d1:1d:a4:63:f4:7a:62:
08:5a:80:00:e9:ae:60:c2:44:0e:1d:9b:13:94:f1:d9:8f:1d:
4e:09:0e:de:08:4e:74:11:c4:7c:e3:29:36:1a:6a:c1:e5:f2:
4a:ad:8d:8f:13:b5:c6:79:b9:49:42:36:da:97:80:65:17:6f:
14:b8:44:f0:c2:b1:f4:90:a7:76:35:02:40:44:65:64:ba:49:
ec:57:fe:9a:32:0f:cd:33:66:05:ef:d3:55:e5:34:4f:56:d0:
13:6e:31:11:f9:f9:73:5a:17:7f:cc:98:6f:b9:de:f6:56:b1:
e6:cf:a4:34:35:0a:ce:40:93:25:68:dc:a5:5b:46:d1:b7:2f:
f2:0d:b0:0f:a4:2c:0f:55:ab:1e:09:ed:e5:89:0a:81:ec:c8:
21:62:cb:aa:3e:68:21:81:27:e2:d8:f3:8f:12:f0:af:c0:92:
d7:b1:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:11 2025 by rpki-client