Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: rJtXVB/cZmLWKHGZamK5Wje5fx1Bym6gHHmqNI499N4=
Subject key identifier: 0B:72:2D:59:23:E0:52:FE:91:68:C4:30:E0:D5:AD:80:A1:CA:73:09
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 019A541A6423414BA45023BA45902AB86955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 10D8
Signing time: Wed 05 Nov 2025 13:00:06 +0000
Manifest this update: Wed 05 Nov 2025 13:00:06 +0000
Manifest next update: Thu 06 Nov 2025 13:00:06 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: IVDwl9q7+wLPgjq1rumcCHDdqiGqvC/yNX2PhoHsxGU=)
2: 7RKc8XFi1ZBpZ1fyV1l65spfKVc.roa (hash: hdKthzCCiG0nuzNYJsrtq6rpWOtWCqRiyWfbA+gnE5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:64:23:41:4b:a4:50:23:ba:45:90:2a:b8:69:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Nov 5 13:00:06 2025 GMT
Not After : Nov 6 13:00:06 2025 GMT
Subject: CN=0b722d5923e052fe9168c430e0d5ad80a1ca7309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:40:2f:53:27:51:4c:31:f8:89:22:0f:46:
b0:a3:17:69:d0:56:5c:4e:be:91:50:83:24:ce:72:
7d:d4:01:28:f7:ff:9c:a5:f5:05:04:b7:61:12:80:
1d:30:a2:22:25:cb:71:7e:4d:72:12:f5:ca:20:8f:
5f:8e:ee:a5:82:bf:5f:d9:1a:fa:6c:42:84:65:4a:
58:ef:9d:c2:3d:f7:6b:16:ce:ba:3f:b6:ce:15:bf:
de:0f:ae:87:89:4e:4f:11:1d:7b:d7:81:e5:29:eb:
f8:7e:0d:9c:07:c1:56:a2:0e:88:bb:71:41:2c:3f:
a1:ea:78:64:34:ab:32:5e:60:ee:a2:f6:3b:fa:20:
0d:31:0e:a7:31:98:37:28:e4:01:e7:66:07:87:73:
9d:7c:f5:1d:5a:7c:75:dd:4e:36:1b:ee:86:77:dd:
f6:33:9f:e3:6e:9b:41:80:93:e6:80:af:0e:fa:f7:
55:b2:a5:47:95:e6:37:9c:d0:30:3a:eb:6a:f2:6c:
e0:57:e8:12:9a:63:53:a6:71:8e:cb:0c:fc:44:66:
96:db:f2:19:7b:45:e8:44:4a:57:6a:f2:9a:c4:60:
4a:78:0b:4e:ba:38:ff:8c:d9:c7:d1:b5:c2:19:6d:
80:e7:1f:33:ae:5d:03:a6:6f:1d:3c:37:1c:6b:8a:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:2D:59:23:E0:52:FE:91:68:C4:30:E0:D5:AD:80:A1:CA:73:09
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:94:17:ad:00:e9:5c:79:ed:3b:51:94:13:ba:b5:71:b8:ec:
70:0b:6e:68:0a:f5:cf:91:dd:1b:17:51:f9:83:bf:e6:9b:03:
0c:e1:0d:75:6e:35:d2:0e:39:7f:fd:bb:6d:60:03:d4:78:47:
81:77:68:48:d8:e2:e5:c3:b4:27:66:05:86:2c:3a:8e:2e:95:
14:9c:e4:57:fc:cd:89:b7:9c:55:67:46:a5:e6:af:95:22:d4:
67:a0:a1:9e:b1:79:8c:06:c3:1f:08:80:f6:57:91:ac:bc:61:
db:d0:30:a2:9d:a9:84:ad:42:75:c8:bf:ec:bc:da:99:ba:13:
d5:5a:d5:17:32:81:6d:4e:a8:b1:dc:8a:e5:48:6a:91:6b:a1:
46:eb:61:1e:a2:6f:ed:81:80:2e:94:a9:a7:e6:ea:b3:f7:68:
db:da:e6:97:b8:7f:a5:3b:38:c3:a5:48:0c:f6:1e:97:6e:f4:
b9:58:7a:f8:3e:30:b8:0c:ba:2c:62:40:29:7b:84:60:7e:be:
e1:b6:f2:34:ab:e7:87:0e:92:a6:a4:df:f3:bd:a4:ad:b4:74:
29:45:b3:f5:2c:83:fb:53:cb:09:58:46:c5:ff:fd:77:37:26:
08:5c:16:75:ff:b8:90:f7:ce:ff:07:4f:4c:af:a2:f3:7f:59:
47:49:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:16:27 2025 by rpki-client