Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: IJ4+ub21IKvDkk5HpvxLkGVJaWMDcL0Mv5b23oLsPBI=
Subject key identifier: 96:A7:4C:40:1F:95:E4:B7:19:AA:87:36:E0:48:5A:8F:8B:C4:A1:27
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 019A522C726971CF4374BA80A24C2A318333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 04:00:35 +0000
Manifest this update: Wed 05 Nov 2025 04:00:35 +0000
Manifest next update: Thu 06 Nov 2025 04:00:35 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: PzKjeChqaaKN+DZ3shAVjibv113P1d4/2LzPqrcBV8A=)
2: SeJ_MUIfyEphmZtsrhRCas-Zt7E.roa (hash: 8yf8UNspB0AXwJ0f5mj6a36u/vut8a8srUMh6OwnuMY=)
3: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:72:69:71:cf:43:74:ba:80:a2:4c:2a:31:83:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Nov 5 04:00:35 2025 GMT
Not After : Nov 6 04:00:35 2025 GMT
Subject: CN=96a74c401f95e4b719aa8736e0485a8f8bc4a127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:0f:09:f4:3f:8f:9e:13:0a:9c:2e:9e:bc:
79:26:fa:1b:cf:0b:3a:2f:2b:20:e5:dc:fe:d5:93:
8a:67:84:1f:b4:27:d6:6c:92:a8:c1:c3:01:21:6e:
a0:fb:40:f0:16:14:af:f0:3a:f9:2a:0f:d6:ea:2f:
4f:18:c8:95:1d:02:7b:ad:b5:45:9c:6f:c4:73:83:
9d:50:1c:77:5b:91:cd:62:02:c2:2c:e2:2d:de:5c:
8a:d9:d3:4d:f4:52:82:c7:95:ab:85:64:e4:b3:33:
25:a9:da:f7:68:ef:97:1c:f4:0a:55:3c:a8:31:be:
4b:38:5b:33:01:40:5a:e2:9f:88:34:ad:ee:94:7d:
fd:50:9d:0c:46:3f:cd:25:15:64:d6:ee:d2:51:73:
24:83:de:4e:3f:00:15:5c:26:2f:c7:0c:fa:5f:e3:
b4:92:16:fa:43:5f:f0:1d:f6:ce:e5:35:00:b3:61:
0c:70:c5:6b:4c:3e:4c:73:01:f3:d8:7c:29:aa:52:
55:8b:4c:4e:75:70:e3:16:7d:17:0b:f4:db:82:b1:
c2:45:3a:4d:88:33:c1:e8:f9:29:ea:28:60:f4:e1:
e7:47:1d:ec:6a:c4:c8:5d:b1:52:9b:d9:30:7a:ed:
12:ed:a5:c3:c2:56:e9:7e:ae:07:ec:b9:ab:d5:ad:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:4C:40:1F:95:E4:B7:19:AA:87:36:E0:48:5A:8F:8B:C4:A1:27
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ed:d6:88:d6:72:02:28:a0:69:f6:38:82:29:50:ae:e0:63:
96:ac:b1:7f:3b:3a:03:b1:8d:e5:6e:6d:00:e2:db:64:78:57:
de:9a:dc:cd:6d:08:da:ef:85:f8:b2:66:e6:d1:9e:3c:90:f9:
97:ac:e9:5c:c2:ac:ee:0d:19:6e:15:30:b1:b4:01:0c:d7:21:
07:df:2f:dd:ee:98:39:f4:cf:b1:b8:c1:d1:a7:14:8f:a0:03:
e8:91:da:7f:f4:68:24:18:f0:08:c3:0c:58:a2:19:c0:d6:0c:
e6:b4:38:0a:8d:2f:b0:84:32:1e:82:ff:2a:8c:a4:ea:3d:66:
18:30:02:49:76:76:91:03:1c:4e:9c:26:c2:4f:a2:c6:b0:65:
b5:0b:6a:33:d5:64:ac:a5:50:f9:e0:ae:19:b4:7c:97:44:7d:
a4:90:84:4b:f5:c1:35:08:3f:32:ce:7a:b2:0f:b5:2f:90:14:
f2:2b:e0:4b:96:5e:47:3c:e5:37:01:c0:2c:31:e0:94:52:f8:
89:1f:ce:ce:62:81:35:b1:f1:a6:e2:b2:8d:a6:1a:74:79:eb:
eb:11:27:00:38:2e:31:71:45:b9:88:d6:c0:2f:a0:f8:c7:a1:
c9:f1:73:4a:ec:f7:f9:e3:cd:e3:e0:00:50:b6:f3:db:36:e9:
cb:0e:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:25:18 2025 by rpki-client