Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: ts2p7xxi7mPWpjkG0o1Bl67pvoEJCHPKwS05VqHpl5Y=
Subject key identifier: CF:7D:83:C7:22:B1:D5:43:A2:6C:6D:8D:BD:FB:3C:FD:17:76:80:24
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019A4E865937A7D2698E5DEDEFD0F58EE771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:18 +0000
Manifest this update: Tue 04 Nov 2025 11:00:18 +0000
Manifest next update: Wed 05 Nov 2025 11:00:18 +0000
Files and hashes: 1: 1bEC89myvydEqo_ZPjw-OQX0Qi0.roa (hash: ZmacESfVCLkopUwGADnqjPbJ5MKyVKen61NApT+t8VM=)
2: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: TX1v9lei9bMQbxHDdVGFMcETg86Rgpdd5Nluk3wUFFE=)
3: iZ1aijGSpYaJ5lT694iv07s9IFw.roa (hash: epj7jnXUcZqcIR0Iu/H9+s0OqjsBdFMaftQUUMbM+4c=)
4: ksWoUId71Ta6zaKYKbekW8SN22U.roa (hash: tv73AIHBejtA7MQn113/2vhoh+psXUpDGtwp+NxnLcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:59:37:a7:d2:69:8e:5d:ed:ef:d0:f5:8e:e7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Nov 4 11:00:18 2025 GMT
Not After : Nov 5 11:00:18 2025 GMT
Subject: CN=cf7d83c722b1d543a26c6d8dbdfb3cfd17768024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:0f:7f:f5:61:d6:72:4e:b0:d4:5e:20:91:
f8:97:b0:31:be:3f:71:c1:fa:b4:6e:fa:45:b6:33:
da:dd:af:c5:54:d0:95:17:fd:45:85:eb:5a:b8:5c:
86:0f:1a:92:0d:2d:ce:95:a3:fc:3a:20:46:57:b1:
b7:5c:61:89:0e:e1:5d:7e:41:02:09:0f:88:b9:50:
00:5e:6a:16:04:23:a2:31:7b:05:b3:56:db:0d:e5:
5d:b7:1a:43:60:cc:d5:3e:91:2e:fb:bd:ef:d2:3f:
89:dd:77:4b:5c:ec:47:24:66:a2:9b:7b:ee:59:c7:
d4:a1:34:e0:1b:60:f3:85:97:04:86:54:bc:e7:43:
df:d9:41:07:21:30:7e:ed:bb:f3:9e:53:9d:6b:31:
dd:ec:eb:cb:bc:8d:43:49:00:af:62:5d:ec:5b:96:
59:40:4c:b1:d0:e3:18:88:7c:c5:8a:e0:a3:4d:42:
cb:d5:8d:21:a6:7b:03:f3:63:65:5f:43:3d:f0:c3:
1a:44:10:d5:f7:b4:9b:50:cb:ca:8b:db:4d:33:f6:
b4:7a:5e:0f:e3:d8:e4:c0:bd:41:bb:39:0a:78:8f:
92:b1:34:de:f7:00:aa:19:ff:ee:8d:fb:b4:37:7c:
d4:07:a0:63:3f:38:91:c4:d6:72:d5:b4:af:7f:d5:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:83:C7:22:B1:D5:43:A2:6C:6D:8D:BD:FB:3C:FD:17:76:80:24
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4c:fd:7d:d9:81:18:34:2f:0e:b3:5b:e3:fd:86:e6:d8:ff:
22:e3:2d:d1:28:5f:58:29:d5:78:1f:0e:d9:68:3e:6a:4e:ce:
c4:32:da:f2:9c:7c:3e:fe:d1:bc:67:7a:e4:ef:41:b6:99:64:
07:d3:a5:ab:ab:b6:98:95:9c:8c:3e:f5:78:a3:b0:92:1f:c4:
92:e6:17:11:2b:4f:d9:cd:16:35:1b:30:a1:3b:c0:06:42:d5:
02:8c:ce:8c:4d:c5:d7:47:21:d1:db:ae:8d:83:7e:99:26:88:
32:d6:fe:24:b2:71:e8:1b:36:90:82:18:d2:30:95:a2:74:11:
6e:89:0b:cb:78:ee:68:60:31:84:14:0d:fa:d9:66:17:9f:a8:
5d:ce:a8:81:be:a6:2c:73:32:06:35:fe:09:3b:d8:5b:dd:d4:
e2:df:29:b4:1e:99:5a:9b:55:bc:e1:b9:61:4b:58:08:e0:bd:
ef:81:10:df:92:de:1c:25:d1:4a:c4:b4:f1:61:71:02:96:da:
56:a7:49:0f:90:42:74:65:d9:5f:1a:4b:e3:6f:98:91:a8:f3:
09:f4:d0:e9:75:b2:5e:4e:fa:14:9f:e3:ca:3e:6e:34:f7:6e:
1e:4f:b3:a4:50:aa:1c:40:d6:1b:a6:c7:0f:d2:57:7f:5b:2f:
f3:09:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:50 2025 by rpki-client