Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier: MR2KfK5RC+zo5QIDBPXtfvdnu+2mqBFcbJ/cIK/3c9c=
Subject key identifier: 87:55:D0:E5:C9:77:28:1E:8B:F4:CC:5B:CD:7B:9C:4F:8E:8C:95:72
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial: 019A4D7390DCABB6AF1C5B787615009B7911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:10 +0000
Manifest this update: Tue 04 Nov 2025 06:00:10 +0000
Manifest next update: Wed 05 Nov 2025 06:00:10 +0000
Files and hashes: 1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: qhKJvoJb4j0R2fsw6vxPVi0JaRtQn6PDQrn/4E6hb8M=)
2: DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa (hash: CPWB4WNXgBrN2XbsNeobPvgMpGNxH4sIm1wHWj5pBrM=)
3: Ow9-1popY8awsgXf2GNA95SUDT0.roa (hash: VV75kE6L9UJcAH7/vX99k0BbRR6uwoTqG3wp/AEMXlA=)
4: qFWMItDWl1Jum13M8uyWAtZgPxI.roa (hash: ulclJf7s+eMnTN7KGqSCmRwy1emYo05IB8k/ir7oKts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:90:dc:ab:b6:af:1c:5b:78:76:15:00:9b:79:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Validity
Not Before: Nov 4 06:00:10 2025 GMT
Not After : Nov 5 06:00:10 2025 GMT
Subject: CN=8755d0e5c977281e8bf4cc5bcd7b9c4f8e8c9572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:6c:6a:41:98:79:d7:c1:d6:2f:ec:fb:d6:
e6:d2:7a:53:f6:d3:b8:ab:e3:86:74:a5:00:81:0d:
f1:78:7e:7b:01:e9:43:61:7b:c4:06:80:76:7b:eb:
eb:75:66:12:21:e8:6b:6c:e1:8c:37:04:f6:7d:f3:
0c:55:3f:38:ee:31:77:9d:a7:3f:40:c6:d4:64:e6:
4b:ae:2e:d7:72:1d:c3:23:44:70:28:61:20:6f:e6:
d6:0b:84:c1:49:c9:5a:b7:10:b4:76:77:6f:5e:db:
30:41:f4:0d:94:21:67:f6:70:db:5d:fb:56:7d:26:
9e:a4:59:b9:19:a9:ac:46:07:53:66:d5:f1:53:c6:
1b:6f:e6:49:ec:59:a3:64:1a:2c:cd:c1:d5:a8:96:
f8:ae:f3:57:54:f7:0b:8a:8f:00:26:1d:57:e8:67:
1a:2c:85:5f:00:14:67:08:51:e4:96:2a:a1:f0:fa:
72:4c:dd:6e:d5:ad:71:ef:2b:2c:7a:9a:f3:30:8f:
65:81:ad:54:98:72:ea:1b:40:41:db:bf:96:0d:e2:
f1:82:38:a3:65:1a:47:ef:6c:0c:02:aa:2e:a7:6f:
5b:a0:1c:e2:c4:d8:62:dc:d0:44:94:18:a7:85:7c:
62:ed:48:2c:7a:29:ef:c5:68:4a:97:05:ad:f2:64:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:55:D0:E5:C9:77:28:1E:8B:F4:CC:5B:CD:7B:9C:4F:8E:8C:95:72
X509v3 Authority Key Identifier:
keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ff:28:ca:9f:26:41:0d:2b:15:14:62:44:9f:2d:e2:84:01:
89:66:03:3f:46:be:9e:d8:6c:66:4c:a2:6b:52:5d:a1:cf:ae:
f9:47:81:32:f6:6d:ee:14:4b:80:cd:8e:87:eb:4a:9c:a3:ad:
5d:7e:b4:e6:94:fb:09:87:f4:bf:3b:64:f1:3f:d7:7c:ee:d9:
3c:a8:fd:43:cf:a4:36:17:f5:67:31:ee:0b:a8:94:db:07:8f:
8f:11:21:d1:10:4b:39:e7:25:41:89:f8:38:15:30:3f:6b:f6:
12:1b:11:85:71:16:cc:d3:d5:56:1b:a8:39:98:ad:ab:00:bc:
42:41:29:b5:73:86:98:ad:7a:f2:30:b6:42:9b:d4:17:26:2b:
e9:99:8f:f2:de:6b:22:26:98:06:70:4c:a9:96:3f:fb:94:ea:
41:c4:8c:61:9c:e7:5c:58:af:a8:71:c2:0b:83:91:73:15:66:
f0:c0:62:f6:3a:89:ee:21:74:9d:63:9a:f8:cc:10:f5:8f:63:
0e:c4:16:80:16:16:b4:d1:b7:ed:bd:0d:a1:fa:88:30:7d:5a:
bf:76:06:28:2c:3b:f9:20:3f:ad:08:e2:be:2c:a2:6d:aa:be:
e6:ec:16:8f:18:60:7d:9c:e4:f3:b8:5b:de:e2:4f:a9:2e:3d:
bf:c3:ee:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:18 2025 by rpki-client