Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: KFPfzFZG3u2TZJm9Z42UevxSXf8SzPJi36loetTAfNk=
Subject key identifier: 28:89:B5:21:FD:72:FF:37:C2:97:4D:00:AB:78:64:26:AA:2F:41:83
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019A71B8748233E1B82484DBC6020287DE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: 3mPFkVjkLT1PEPJRGUroqwD/qFEMCWUReij3JJa3ROU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:74:82:33:e1:b8:24:84:db:c6:02:02:87:de:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=2889b521fd72ff37c2974d00ab786426aa2f4183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:af:d0:32:cc:af:88:78:d3:83:e9:5c:8f:
9a:ed:4d:51:5e:4a:c1:24:e4:97:3f:8e:8b:e9:14:
95:e0:5d:20:5f:42:41:bd:95:de:5c:47:42:a1:d8:
35:8c:31:33:f1:83:8d:4b:09:54:13:68:7e:42:95:
1a:d6:88:be:45:a5:99:19:d7:f7:9a:6e:75:94:b5:
29:e2:74:4a:b1:33:84:1c:7b:4c:27:dc:ae:05:ae:
f2:d8:6c:c6:f2:65:97:3d:26:23:db:29:46:eb:85:
e7:45:89:85:e1:24:21:5c:97:33:89:aa:99:60:d8:
da:9d:66:82:0c:84:b0:ef:8a:a1:d4:bb:95:e9:69:
80:02:f1:ac:cc:d0:ef:e0:8d:d6:6f:a5:c6:8c:12:
e1:fe:63:d1:a8:64:42:c0:a3:9d:22:f4:62:1d:74:
06:01:36:70:c6:9d:e5:ca:29:0e:42:51:4d:7e:fe:
d3:d8:dd:57:25:0c:07:97:6d:47:74:6f:b4:62:f8:
4d:1b:3d:00:d4:53:dc:93:68:04:ab:3b:d0:30:de:
64:fe:70:aa:72:25:da:ca:28:6b:8d:f9:33:26:fb:
47:d8:10:44:c6:0e:68:20:b1:71:f0:67:96:af:69:
68:07:0c:db:b8:50:c3:f1:e3:da:68:ec:92:86:1e:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:89:B5:21:FD:72:FF:37:C2:97:4D:00:AB:78:64:26:AA:2F:41:83
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6a:53:5b:58:7e:42:fa:1c:aa:e9:4e:93:0d:90:0b:5c:4d:
cd:b4:e9:f4:1a:76:4d:4e:5e:a1:2f:7a:f9:70:05:a4:dd:85:
73:28:02:47:9e:a2:7e:06:3a:16:6d:48:06:9b:8d:2f:b2:1a:
c5:69:be:1b:32:f4:bb:1c:a7:cb:03:6f:b6:58:7a:e4:fa:bd:
c6:02:30:2c:2a:b2:2c:69:8b:d5:84:53:28:6d:fe:c6:8c:73:
d5:6e:ce:9b:c3:a8:98:d3:4b:9e:31:21:0f:1f:34:b4:15:67:
7d:29:9b:d7:b5:d8:5b:a9:42:e8:dc:44:a1:d1:e3:6f:a1:7f:
59:e7:b1:fe:87:d4:81:8c:9e:3d:e8:e5:82:dd:43:63:98:f7:
24:1b:71:44:a8:11:db:60:6c:5e:4e:68:f2:d5:dd:73:48:87:
91:25:f2:21:70:76:37:9d:7a:38:83:3e:88:85:c0:f6:47:f0:
bf:55:57:a8:8b:ca:80:16:ac:a1:98:09:08:26:a6:03:63:9e:
79:23:6e:3b:46:fc:37:bc:ba:1b:3e:8b:3b:6d:50:39:22:11:
77:29:98:dc:b5:ab:49:8b:14:a0:2c:5e:7c:36:17:a8:8c:d3:
6e:3b:c1:8c:3f:ba:3c:0d:c1:0c:24:6e:d6:ff:46:c4:4c:c2:
79:f0:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:51 2025 by rpki-client