Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: V5+nEoxN+s7KZ5YwsuMpsc91mP5rVlpuOTxvyt3Tzfw=
Subject key identifier: 2D:BE:5E:D6:A9:C6:5D:68:9A:F3:1E:C0:7A:EA:FE:ED:23:D9:55:A1
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 019A503E0654908E6737D32EA07359878A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:33 +0000
Manifest this update: Tue 04 Nov 2025 19:00:33 +0000
Manifest next update: Wed 05 Nov 2025 19:00:33 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: LvwVUEqTNv0IOK5cLXr4ySkPrCm9ZsbIdxJEKC+fDqw=)
2: SeJ_MUIfyEphmZtsrhRCas-Zt7E.roa (hash: 8yf8UNspB0AXwJ0f5mj6a36u/vut8a8srUMh6OwnuMY=)
3: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:06:54:90:8e:67:37:d3:2e:a0:73:59:87:8a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Nov 4 19:00:33 2025 GMT
Not After : Nov 5 19:00:33 2025 GMT
Subject: CN=2dbe5ed6a9c65d689af31ec07aeafeed23d955a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:57:a7:36:c8:ff:01:63:45:a4:55:ab:9f:
07:8a:a8:d4:21:cd:f7:bf:76:3d:ed:4a:a4:3e:a4:
68:a9:5c:0d:fa:89:92:27:16:ea:dc:3c:61:26:98:
21:8d:b0:df:b1:f6:ed:49:2a:fe:e9:35:90:89:e8:
7d:19:85:05:9b:d7:2c:64:e1:cf:77:eb:9c:e3:1e:
43:1a:46:f9:02:49:51:ba:87:15:d0:49:7c:d5:3b:
cd:7d:7e:31:71:dd:08:95:c3:59:f8:8f:10:e1:10:
c8:83:cd:e9:85:54:66:cf:2c:6c:48:7c:b9:0b:05:
af:2a:94:92:09:ea:62:20:a0:c4:03:a9:cc:bb:f0:
5e:64:4e:90:b3:a7:cf:66:04:17:da:0f:1e:8f:77:
f4:71:1a:f0:f1:be:95:c0:e3:d1:79:91:14:48:22:
1c:02:2b:be:73:06:ad:59:d1:6c:9f:1b:03:a3:a5:
31:fc:d8:37:2a:ce:16:04:70:c6:a1:7d:a6:8a:e5:
20:2f:38:8d:13:64:75:28:82:92:ff:ae:f4:5b:0b:
d2:a1:5e:19:8e:9c:af:67:29:00:db:cb:55:4b:9f:
68:37:a3:9e:55:9a:55:26:ee:6a:17:cb:84:df:0e:
44:69:ee:d8:05:44:22:ae:f4:05:e6:5b:0e:ba:79:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BE:5E:D6:A9:C6:5D:68:9A:F3:1E:C0:7A:EA:FE:ED:23:D9:55:A1
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ed:51:ac:69:fd:cc:c1:c6:d6:1a:1f:aa:3f:5f:40:40:58:
a1:8a:a8:ee:d1:8a:79:67:9d:ed:38:bd:bb:8c:c8:e3:6c:52:
40:b4:80:8e:09:db:59:a5:2b:9f:ba:86:1d:01:6f:ce:ad:b0:
6d:8f:7e:4e:3e:d8:e0:2a:71:f9:6a:e7:10:2b:0d:c5:c5:58:
79:be:a2:54:ef:e6:34:4f:73:fb:8b:3c:d9:2f:c2:eb:f1:4b:
1a:83:e9:53:8f:1c:d2:fe:14:94:e7:57:5e:8c:6a:2a:d2:96:
49:d3:92:a1:8a:15:2b:b5:95:dd:75:43:4b:24:f8:ae:92:5b:
8b:f7:2d:f3:5b:40:2b:93:d0:92:bb:a0:9d:a2:18:d1:7f:bb:
c9:f8:45:6f:e1:c8:97:e2:39:62:bd:f3:00:6e:07:c5:16:9f:
25:dc:64:71:31:df:16:cf:a8:04:bc:fc:f5:7d:5e:e0:3f:ae:
0e:c0:fc:c1:34:b6:a5:32:63:13:d5:f5:82:b6:31:f4:01:1c:
fd:c6:16:e4:6d:62:a9:24:49:29:8f:23:3d:c7:af:66:01:6e:
6c:a7:89:52:e9:69:0a:fc:f6:2b:35:88:4a:b9:e4:26:ef:d9:
db:7c:a7:f6:e2:14:a1:98:e4:cc:e1:88:75:8f:eb:51:04:19:
67:a5:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:18 2025 by rpki-client