Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: 0eJjEr/Kcap2TO0GVPgV1Mqw7/9jchVXH6RzH7l9lHk=
Subject key identifier: B4:BB:03:3C:BE:43:05:EE:34:71:A9:18:E3:3B:7E:4B:BB:E1:B7:1B
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 019A725CBA9400B0696C33DF6463495132FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:10 +0000
Manifest this update: Tue 11 Nov 2025 10:01:10 +0000
Manifest next update: Wed 12 Nov 2025 10:01:10 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: GqVd3fQy2HpYURqGPmGFucwL0GsqUK0UjE2pz+LRzWg=)
2: J2pjS99ea6SMp7lb4ewsQffNh8c.roa (hash: 704wqH0ujui7TKq+2h1aj9AcNsB+Fn+EgZ7FOUmvebI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ba:94:00:b0:69:6c:33:df:64:63:49:51:32:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Nov 11 10:01:10 2025 GMT
Not After : Nov 12 10:01:10 2025 GMT
Subject: CN=b4bb033cbe4305ee3471a918e33b7e4bbbe1b71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:14:70:16:8c:ef:43:a0:67:ce:63:e8:3a:
6e:94:0f:c8:aa:e6:e2:0b:f9:e9:c6:92:6c:8e:92:
5d:4d:5f:a9:ca:bf:b7:9a:27:0d:c1:f8:80:d2:07:
72:5d:ca:0d:0a:99:d2:69:7c:2d:f9:f5:67:3c:95:
68:0a:32:2e:04:9f:16:80:2f:fd:74:8f:3a:0a:5b:
96:66:d4:19:f9:b2:94:9d:bd:66:29:71:23:41:f7:
95:38:be:b4:96:90:7b:95:d7:df:5a:4a:fe:6d:01:
3e:23:62:7f:aa:9a:4a:cc:6e:0d:03:1f:63:17:2e:
28:aa:9d:0d:f6:bf:ed:67:e1:24:30:65:a6:e6:2a:
b8:06:00:b2:00:3e:5a:75:ad:be:87:4b:e1:f6:c2:
ba:ef:86:c7:ca:ba:79:c3:c4:84:d3:c0:66:1d:bb:
5a:be:50:62:77:85:f8:ac:08:25:93:d9:d1:a9:24:
7b:c6:eb:c1:5f:7e:4d:77:ec:8f:6b:6e:eb:7a:87:
b3:eb:f8:f8:75:c6:bb:b7:dd:22:68:a0:d2:91:8e:
ec:e7:5a:5e:a2:42:50:f0:29:3a:4c:e3:c1:54:c9:
e9:09:d2:d5:33:fd:9f:0e:15:68:1b:58:70:56:c0:
5c:cd:77:c5:28:71:82:f4:9d:a1:ae:32:dd:d3:e3:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:03:3C:BE:43:05:EE:34:71:A9:18:E3:3B:7E:4B:BB:E1:B7:1B
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b8:82:1f:20:64:51:6a:ed:c1:a6:f4:f4:1c:6c:44:1f:17:
e7:4c:be:59:3d:af:19:87:fd:cc:77:97:95:9b:fa:59:3c:42:
06:73:23:c0:8c:af:dc:50:fd:c3:39:91:52:8c:77:da:77:83:
45:b0:49:75:4f:f4:4d:5a:4a:54:ff:ca:e2:48:bd:dd:e8:f7:
28:ec:ff:23:59:54:17:b7:1e:48:04:5a:15:9b:88:ab:87:fa:
b7:fd:d2:cd:71:24:79:51:7b:ae:58:c8:63:18:a2:40:96:6f:
2d:35:61:7a:af:97:8c:1d:ba:18:4f:a0:cc:92:ef:7d:f4:e0:
eb:69:f7:c7:06:90:bb:89:ed:0d:a2:51:3a:fe:5f:6d:a7:12:
16:60:ca:57:41:de:27:8a:14:9a:e4:52:bf:7b:b2:18:3d:6a:
59:af:1a:5a:88:b6:08:3d:eb:ef:4b:a3:22:c5:0e:df:81:28:
bf:b9:50:15:61:22:dd:d3:fb:7c:eb:80:e2:f6:d9:e0:2d:01:
3f:aa:99:8f:b8:a6:5a:48:97:4a:39:bd:47:82:5a:41:81:53:
24:f3:13:8f:b3:e2:c0:93:12:fb:94:29:42:6e:35:6c:85:14:
ca:ec:b0:21:7c:ed:a0:fe:43:76:76:52:ff:11:93:d1:70:4b:
ab:29:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:03 2025 by rpki-client