Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: qOQYBSSshZ6XItoubE3vn3Afy3dnwJPsb9x2tYQnZNM=
Subject key identifier: A8:CE:55:D4:AD:9F:3A:F9:E5:EA:19:E4:30:71:71:8B:38:11:10:6A
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019A515046B74CA476B49F9E467AABCD5F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 170A
Signing time: Wed 05 Nov 2025 00:00:06 +0000
Manifest this update: Wed 05 Nov 2025 00:00:06 +0000
Manifest next update: Thu 06 Nov 2025 00:00:06 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: pPKo8t1b4ZJxFmX+zQeqLxGx4gic9uK3cgujP3zPB1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:46:b7:4c:a4:76:b4:9f:9e:46:7a:ab:cd:5f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Nov 5 00:00:06 2025 GMT
Not After : Nov 6 00:00:06 2025 GMT
Subject: CN=a8ce55d4ad9f3af9e5ea19e43071718b3811106a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:93:78:5e:02:5a:dc:b3:33:f1:31:81:6b:
8e:e0:46:fe:2b:54:bf:64:fe:51:f2:d5:39:13:a4:
2a:1e:f9:b7:e0:91:a6:17:e2:7a:89:31:a7:ae:ed:
72:88:e2:81:5b:57:4a:2b:41:5a:7b:eb:b9:66:c5:
74:d0:d7:a2:8c:1b:ee:84:4e:6a:71:38:1f:3b:98:
8d:86:32:e1:dd:27:83:34:60:cb:c2:d3:d8:38:8b:
83:03:0f:e3:75:95:cb:45:1a:24:f2:b1:ab:68:74:
6d:5d:65:8a:d2:08:e2:22:b0:cf:ec:40:72:a1:8b:
53:0b:0c:27:73:56:8c:f7:08:9d:f5:42:4b:95:9c:
37:25:1f:73:5a:09:f0:47:6e:00:57:f8:32:e0:f3:
62:29:20:c6:2f:56:4e:30:7e:e8:08:77:54:24:d0:
93:ea:8f:41:a8:8a:50:c7:cb:c1:65:86:d9:82:49:
b6:c2:aa:1b:50:e5:50:96:1d:fe:f1:6f:ed:dc:53:
ba:78:34:44:78:85:d5:dc:13:db:2f:28:cc:b6:69:
1a:d0:4a:33:9a:36:0d:74:4f:89:5c:5e:d4:4e:bc:
72:ea:e5:92:e0:92:51:9a:4e:11:2c:38:49:c3:53:
04:08:55:27:9e:1d:dc:06:dd:53:d4:a1:c3:be:c7:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:55:D4:AD:9F:3A:F9:E5:EA:19:E4:30:71:71:8B:38:11:10:6A
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d7:76:0f:63:d7:54:4a:bc:76:22:7e:53:73:fb:f1:7b:b2:
91:c1:17:a9:72:df:82:9c:35:37:7e:9e:95:bb:0f:2d:13:e4:
52:49:e7:16:9f:57:cf:49:7b:b5:c3:4f:0f:59:f9:63:30:1d:
99:f7:46:20:64:99:26:7a:28:c2:38:aa:05:00:3f:6a:10:5c:
2b:83:2d:67:3e:ff:a9:3a:84:9d:2e:49:a1:79:5f:4b:f2:50:
f2:95:d9:36:8d:4d:21:d7:ac:b7:a4:05:d2:38:e8:b1:42:96:
f6:12:9e:ae:da:af:f4:5e:e7:9e:c9:e2:68:b6:21:21:b7:86:
80:c0:b4:66:27:44:13:35:b6:43:3f:82:05:a1:ad:2a:ac:bc:
c6:1b:d8:21:50:10:5e:e7:47:0c:bc:4f:39:31:84:16:bf:3d:
96:d0:ce:73:b4:7f:da:60:21:b0:4b:fe:7a:61:59:43:42:55:
af:79:fb:30:15:42:1e:fd:35:74:cb:23:cb:c4:c1:f0:6d:b4:
4b:01:29:70:21:a8:e5:c2:7b:ff:fb:67:bb:70:06:41:ee:5f:
e6:a6:48:db:11:56:c0:5c:42:63:4a:54:fd:c9:60:07:0c:60:
44:3f:54:ca:2e:ae:11:36:79:f7:73:47:ea:df:e9:fa:a7:52:
37:b4:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:32 2025 by rpki-client