Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: rloxLpb8t2mBi0qhRcDiEHCu+HKCHgGbpMRlEGT0NJE=
Subject key identifier: 7D:04:AC:2E:58:12:A0:2A:12:1A:77:DA:32:02:A7:D2:56:C7:E1:B5
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019A326A8416E6BD267086CF6E1CA3601FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1700
Signing time: Thu 30 Oct 2025 00:00:32 +0000
Manifest this update: Thu 30 Oct 2025 00:00:32 +0000
Manifest next update: Fri 31 Oct 2025 00:00:32 +0000
Files and hashes: 1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
2: Poiw2E-mLT2v3vPHQ4mWn5Erbv8.roa (hash: 3V6NagY5nBDP5ry2LKf1AJl9T65osEYx7aEHS/N5Z0A=)
3: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: 60J1HvTwsRzrr2o7g/UBnTxgqqqk5P/xTL6zbZH5b/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:6a:84:16:e6:bd:26:70:86:cf:6e:1c:a3:60:1f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Oct 30 00:00:32 2025 GMT
Not After : Oct 31 00:00:32 2025 GMT
Subject: CN=7d04ac2e5812a02a121a77da3202a7d256c7e1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:ad:a7:ee:7a:fd:f7:a8:8f:07:68:a1:c9:
4f:d3:fd:f7:37:d5:98:9b:ad:b1:e1:ca:90:ab:57:
48:fb:01:ff:a9:4f:6d:3d:be:c2:82:d0:5a:f7:5b:
6c:da:a0:cb:6a:37:a9:38:bb:af:55:fb:1b:b5:66:
56:04:3c:48:63:32:96:6d:8a:cc:d4:04:ba:06:90:
68:c9:4c:3e:0e:80:c1:f3:b7:b3:3e:d2:50:33:97:
b7:4e:ae:82:10:ad:23:8c:40:28:9d:61:7c:e7:31:
a9:b3:1d:fc:6b:98:96:ee:1c:6d:6d:7b:91:9d:0d:
44:2c:bf:e3:3e:ac:21:f0:54:3a:fb:c6:8e:99:cf:
87:86:04:8f:3c:1d:23:ce:0f:0e:06:f3:e0:69:2b:
02:39:0d:e3:bf:24:ff:6d:30:b4:04:58:24:67:02:
01:53:85:eb:cb:77:77:52:40:39:1b:b3:c2:e3:6a:
45:4e:2e:42:24:62:28:f9:8e:6d:59:37:19:73:d0:
d4:f7:42:db:2b:1b:93:90:43:45:a8:6a:c7:19:9d:
d2:e5:fe:ea:81:51:4a:c6:d8:bb:fd:18:b5:73:e3:
b2:3a:9e:90:2a:da:68:49:2a:f9:0d:83:85:99:97:
bb:da:c4:2b:f0:9f:ec:a2:be:42:af:fc:bf:31:ba:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:04:AC:2E:58:12:A0:2A:12:1A:77:DA:32:02:A7:D2:56:C7:E1:B5
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c6:61:9a:2d:c3:d4:64:b5:8d:ba:27:30:76:a9:1f:e4:03:
fb:7d:ae:b5:26:c9:a3:37:ad:ff:ef:3c:22:b8:06:ca:2f:de:
e0:6b:0c:f9:ad:a5:90:78:3a:0e:68:01:50:c5:38:64:3c:a3:
62:b3:c4:ab:d1:a6:b7:d6:0b:0d:98:8c:99:f2:e4:48:f7:96:
b7:f1:de:ca:12:45:8f:ba:f2:57:11:04:87:d0:98:ff:73:e2:
b0:7d:b0:83:1b:54:69:d8:3a:77:da:57:c5:91:39:82:71:40:
07:38:4f:1a:41:e1:a8:82:68:a4:67:b4:67:1e:68:da:40:67:
61:96:95:53:4e:9a:a9:3f:20:00:a0:c5:b0:d6:90:ef:4d:b4:
6a:54:48:3f:ed:c5:91:8d:ef:7a:d4:0f:79:92:a9:e3:82:30:
9e:f2:69:20:21:13:bd:60:78:76:b2:95:84:3d:97:ae:65:cc:
19:52:bd:84:e7:e0:72:d4:1c:95:e3:42:86:61:fa:7b:98:80:
f9:40:e3:16:25:d9:2d:01:f8:47:2c:a0:55:22:f2:e8:77:41:
3d:1f:84:af:b6:2e:e0:12:58:a7:6a:99:45:ed:a7:52:77:ca:
17:2e:10:b1:f6:fd:74:72:4f:3e:7d:6a:0c:07:09:a7:0a:07:
5a:13:8f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 07:47:51 2025 by rpki-client