Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: SYevPeA81ziTqAiQrWgT145ssOTfJ7JIyh3VphXBdiw=
Subject key identifier: 1A:02:FA:D7:6F:57:EF:C5:A2:61:A7:29:FF:72:0B:1E:03:70:A5:C7
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 019A4D05E4EF6FC8359A29EF5C54DBC17B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 04:00:23 +0000
Manifest this update: Tue 04 Nov 2025 04:00:23 +0000
Manifest next update: Wed 05 Nov 2025 04:00:23 +0000
Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: xPm8VCSnb1ssg6W/ZPP5qSi0YT68rC2C2jSM/KC5DZg=)
3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:e4:ef:6f:c8:35:9a:29:ef:5c:54:db:c1:7b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Nov 4 04:00:23 2025 GMT
Not After : Nov 5 04:00:23 2025 GMT
Subject: CN=1a02fad76f57efc5a261a729ff720b1e0370a5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:65:c2:f7:4b:63:e6:0d:22:47:53:b3:0c:
d6:46:20:a6:8a:35:99:ec:c8:d9:06:99:4c:31:7b:
43:09:24:1b:c6:45:b4:7d:7f:0d:a0:a2:be:d5:ea:
ce:b7:81:51:75:8f:f3:24:bb:2c:33:b2:9b:76:5f:
82:e8:f2:ea:f0:9e:1f:30:24:4b:b0:1c:41:87:ed:
64:04:62:4d:2b:b0:be:a4:87:16:96:89:4c:e1:a8:
21:46:c3:42:96:df:a1:77:d7:09:39:56:4d:24:eb:
c7:d4:09:10:1d:4c:92:6f:2d:c2:95:6e:9e:ea:70:
88:af:bb:4a:e4:6e:73:a2:4f:30:de:0b:2b:c6:0f:
b9:56:54:03:09:b5:d3:c7:1c:ef:f5:57:e2:25:26:
ed:5e:bf:1f:a8:ca:51:a5:49:d2:0a:b9:31:f8:e0:
4a:77:2c:bd:65:af:f7:11:70:87:2f:95:fc:ba:a9:
02:1f:f6:b5:91:4e:31:1f:ab:ad:c3:02:e7:ba:a1:
7d:59:26:0d:da:59:fa:f6:4b:3e:bc:1a:e6:88:63:
02:33:3f:e0:94:8b:12:cc:bb:a2:f5:b5:1b:e3:19:
e9:c2:28:93:f0:d3:1b:39:f3:1e:c8:27:1b:37:31:
d5:ca:b2:11:d5:61:ee:e3:37:ca:b2:98:95:11:1f:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:02:FA:D7:6F:57:EF:C5:A2:61:A7:29:FF:72:0B:1E:03:70:A5:C7
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d1:73:3d:5d:b8:0c:ae:ab:da:80:30:f6:7c:71:3b:26:a8:
88:2c:12:fc:34:f6:ea:6d:84:27:d5:c0:a2:37:46:eb:ec:51:
99:b7:1b:aa:f9:12:7b:61:5f:96:da:ad:0a:0b:82:40:7f:04:
b4:7c:80:08:2c:40:3a:58:46:b2:51:60:93:6a:5e:ba:ad:36:
55:ea:f8:09:08:2c:22:89:9d:1e:b4:46:e1:75:1e:70:f9:7a:
16:b3:cf:d3:43:de:31:92:03:a3:d9:44:7d:3c:8c:7f:83:5f:
aa:db:07:c2:e6:bb:e8:d6:f8:6a:9b:fe:de:43:29:2f:50:14:
3d:e1:ac:2e:84:11:34:de:b6:0a:a7:c6:74:53:82:1f:42:8a:
95:1c:01:d2:6f:dd:47:1a:a7:f0:10:f6:0b:d7:28:a9:4c:38:
e9:14:bc:32:5b:09:b7:49:12:81:c0:28:fe:55:5f:fb:a2:29:
90:76:cb:34:0a:77:6e:b5:45:6e:a9:2c:1a:80:4e:90:bd:a5:
c6:9f:4d:d6:3d:ae:62:dc:ab:07:57:7d:02:b1:0c:56:62:d4:
1c:71:e4:c4:ae:50:af:a3:09:a9:2a:9a:22:07:68:bf:a2:9d:
70:0c:c0:f5:36:d3:55:53:db:6d:db:51:79:cb:53:74:39:8d:
f9:8f:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:23 2025 by rpki-client