Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: 5T1QUPUn9PD1FtqihSpwkIhdKmAKdOckKzeqweLcqCU=
Subject key identifier: 65:EB:53:6E:C6:00:D9:11:04:19:41:60:38:9A:1B:B0:49:D3:86:94
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 019A50E41593BC31DF07E4A68E0CE77C05D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 22:01:56 +0000
Manifest this update: Tue 04 Nov 2025 22:01:56 +0000
Manifest next update: Wed 05 Nov 2025 22:01:56 +0000
Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: z78zS658N9iuLiuC/NDx5HszW2CL318RHQRn8QD5lLM=)
4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:15:93:bc:31:df:07:e4:a6:8e:0c:e7:7c:05:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Nov 4 22:01:56 2025 GMT
Not After : Nov 5 22:01:56 2025 GMT
Subject: CN=65eb536ec600d91104194160389a1bb049d38694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:12:5e:29:b1:24:90:d5:2b:e4:0b:e8:df:
6a:1b:f1:07:56:99:87:a9:9c:6e:73:1e:cb:b2:89:
8f:15:f5:86:44:8e:c2:ed:2c:76:de:b7:15:2c:4c:
30:d7:7e:17:c2:a6:41:05:8e:23:5c:48:50:ae:89:
73:e1:9d:f0:99:a2:90:ae:5a:a2:22:59:b3:bb:0b:
87:1f:ce:16:39:71:08:83:32:88:37:d3:ce:09:58:
a8:0d:e9:bc:bf:b1:22:97:3d:ab:c4:39:7f:d4:d8:
c6:c5:6d:31:2d:6d:81:c6:f0:16:18:47:4e:d6:7c:
60:d7:cd:88:35:f1:48:25:26:d2:c7:c2:93:2e:e8:
2a:4b:4a:98:9f:9a:42:55:df:6a:71:32:6f:24:71:
96:b8:61:50:0e:09:b8:7f:59:b8:8c:3b:53:ba:49:
d3:7a:cc:98:85:88:9b:c3:dc:1a:b3:7b:8d:30:e7:
bf:8e:3d:02:2f:71:d3:f3:60:1f:9a:3a:75:1e:82:
85:0f:6a:ab:8a:47:00:bc:66:6a:e5:26:5f:41:ab:
c5:c6:b6:12:22:06:97:cd:23:1d:6a:a3:af:06:bc:
f6:12:2a:de:d4:04:50:ac:95:1c:07:8e:36:59:9c:
cb:3b:79:bd:4c:1a:82:ff:b7:1f:9e:b7:35:a7:ee:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EB:53:6E:C6:00:D9:11:04:19:41:60:38:9A:1B:B0:49:D3:86:94
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e3:f8:a4:ec:e2:ed:0b:79:dc:c4:98:5a:d0:90:77:e7:69:
d0:d2:5c:80:c1:a2:16:06:09:89:2f:df:1c:5e:1e:53:e3:64:
28:a9:86:15:d3:9d:f1:5e:0e:19:1a:ad:9b:a9:0b:86:b6:b4:
d2:57:1b:63:31:d2:28:cb:a8:88:5e:88:05:c9:bc:1f:de:f0:
74:88:72:f7:65:81:7b:73:27:b6:8c:e0:68:71:b0:a5:43:cd:
75:04:68:ed:b8:9d:cc:5d:cf:af:7f:05:0b:2b:e0:09:0d:03:
4c:8f:ff:b5:ea:25:7c:3c:bd:08:76:53:ff:cc:cc:be:ef:24:
78:ce:c7:65:05:aa:9c:6b:63:27:6b:50:25:9e:28:a0:81:36:
35:79:f2:3e:83:68:db:71:c0:71:39:40:c6:4c:6e:77:04:5f:
4f:4d:09:07:c9:6f:1a:27:e9:1e:7f:02:ef:6b:a5:8d:52:aa:
81:93:e8:8a:f1:48:aa:6d:48:28:2d:ea:f4:3b:e8:69:f5:a3:
37:98:c4:72:29:41:6f:ed:82:b7:4b:2f:b8:74:c1:e7:91:9e:
9a:62:d7:88:97:88:21:e8:97:3a:c7:17:f3:47:66:fc:5a:e4:
88:d8:c2:8b:d9:99:d0:be:8e:0c:a8:ef:8d:a8:f3:4c:1f:49:
f0:e0:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:21 2025 by rpki-client