Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: uaLjNQ/GOAmtVVn5VLVgOUQN9651UYOhljQ+CNDxe20=
Subject key identifier: 25:C2:81:62:35:01:0B:F8:63:F3:3B:F4:95:4C:18:09:C3:2F:91:EB
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 019A72933664CD3338F6D48D7ABE1BA7831A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: S7vk3nypm2pFQKF9lXcVg6VMNQlmZjKNJ2PFRBATdDg=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:36:64:cd:33:38:f6:d4:8d:7a:be:1b:a7:83:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=25c2816235010bf863f33bf4954c1809c32f91eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:ff:25:f3:de:10:f5:bb:74:12:91:d2:2e:
de:f9:94:ba:53:df:e8:19:59:e4:bf:a7:c5:f5:a5:
d7:aa:55:a9:aa:8e:50:23:f2:c9:dd:91:c6:ad:ca:
1a:7c:6e:e8:6a:f6:d1:e5:01:ea:2c:4d:87:d1:78:
87:23:36:61:13:6f:1f:df:30:42:09:49:9a:1d:bd:
1f:6d:74:d8:0e:1e:b2:2d:56:fc:38:de:99:18:28:
19:75:55:10:37:ef:d3:22:1a:5e:12:9d:85:8e:0e:
40:85:8f:9e:81:15:e6:d6:80:17:c9:75:4c:22:49:
f5:cf:6b:74:6c:2f:dd:8b:aa:04:73:54:2b:80:48:
8d:68:9f:2a:a6:95:42:7c:ae:5b:6c:75:9a:5c:d5:
da:1a:c2:3f:59:f1:6d:cc:5b:5a:70:2e:70:e0:7c:
c2:2c:40:9e:76:8e:ac:c6:58:4f:3d:cf:ca:fb:09:
fb:a1:69:4f:b3:57:3a:84:ff:8a:b9:e6:24:d0:e8:
ac:c6:7d:2f:02:b3:d3:63:11:16:be:b8:61:55:60:
e2:d7:bd:4d:d2:a5:f7:d8:a2:22:3e:de:5d:13:57:
37:28:cc:ff:87:74:b2:9e:2e:46:1b:95:6c:5d:4b:
21:53:b0:93:33:74:56:ac:af:f5:fe:50:a8:dc:33:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C2:81:62:35:01:0B:F8:63:F3:3B:F4:95:4C:18:09:C3:2F:91:EB
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:52:37:7d:dc:d1:83:e8:16:a2:c8:ce:e8:7f:a4:69:eb:0f:
d8:72:27:4a:1b:d7:da:ca:0e:a3:5e:2f:68:2a:70:f8:38:83:
5f:f3:12:a5:8b:19:3d:1d:2b:e5:90:2f:73:c9:35:e5:25:a6:
8d:2c:01:2d:02:80:86:ca:5f:b4:c9:7c:4d:f9:4d:3e:4d:4e:
81:14:6b:42:7c:fe:4f:d2:99:c1:34:7f:07:25:78:e9:ff:42:
42:dc:a3:08:f5:d8:ab:c7:75:d0:03:fb:c2:48:15:68:66:c3:
92:c5:b5:53:9e:72:be:a9:c6:9d:7d:d1:b0:5e:89:b8:bd:12:
11:29:94:85:e7:50:95:58:50:80:84:ea:b4:22:9f:f1:1d:c1:
e1:f7:76:e2:c5:78:60:13:8f:f5:d6:d8:e2:65:8a:19:81:6b:
60:bb:b3:7c:8a:1b:c9:4c:d5:e8:2d:5f:30:97:1f:f7:cd:3f:
98:d4:3d:49:70:2a:ca:4e:f3:ab:a3:02:81:b2:97:78:30:92:
c6:e3:69:df:7c:d8:f6:df:17:84:13:65:b4:a6:f5:ca:f8:7d:
e7:bc:6e:34:1d:e4:6e:ee:da:02:11:31:07:d9:2b:2a:37:86:
41:42:3c:34:1c:38:f6:e9:bb:37:01:90:88:f3:74:fe:f4:da:
57:8c:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:16 2025 by rpki-client