Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
File: 1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json)
Hash identifier: VEbwPIXjYH5LjWFp0v7LR8r1Tv3vTezJieBb/LCpMJY=
Subject key identifier: AA:D8:2E:B5:0C:E5:0E:8F:C6:40:9B:85:54:88:06:CA:4B:B6:AC:6B
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 019A4C2A1B70FAC118727330D8920F90A942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 00:00:19 +0000
Manifest this update: Tue 04 Nov 2025 00:00:19 +0000
Manifest next update: Wed 05 Nov 2025 00:00:19 +0000
Files and hashes: 1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: cwslFNiSZqrzwAsXbun3yI+r7ZD9cSmRJdnR3ZnYtsM=)
2: 14BL-wRZn5qjKkbFlqqqjR24P9o.roa (hash: Q0+ry8DIoIvWS3jg4INnkBPjowRqJvM+1fF1Ae0B9HU=)
3: 3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa (hash: mHlRrwC758D0HqzkPpUCJ65f9p+erZHSEHy+5VU4L4A=)
4: 4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa (hash: kG5O2uK7FPMtHKZqn4oBt9q3T41tqnOK54SmBGsdGls=)
5: M13OT1H85As_Tv9wWN39JJmrGq4.roa (hash: 3iWdknIUsVQtlNk63UCp+noj8Iq5EODisWGU9pdA1Es=)
6: XBvyNtAX_qyPJCtO1fGS20UqGjs.roa (hash: KHN56+uDjic5K6QfFI010t46UK2xFZQ5/zoeeWjaQBc=)
7: XDE5yWHym2A5ak6WQEhkh6UG6-E.roa (hash: ZtYfbKKZBHtlgDqAoKqJ/Mw8EPVT2w6fQRb3QDPCDXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:1b:70:fa:c1:18:72:73:30:d8:92:0f:90:a9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Nov 4 00:00:19 2025 GMT
Not After : Nov 5 00:00:19 2025 GMT
Subject: CN=aad82eb50ce50e8fc6409b85548806ca4bb6ac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:4b:18:57:1b:b5:86:62:9f:b2:2f:dd:84:
e1:d8:0d:fe:16:d4:f9:4f:18:38:12:39:e5:a9:16:
1d:ac:a8:71:df:b1:3e:93:2a:71:93:11:9d:86:ec:
4a:4e:26:a9:8a:98:65:47:48:15:c7:76:f1:16:31:
a2:30:83:bf:34:a6:bb:79:59:dc:a4:b4:4e:a3:81:
78:2f:ff:60:86:81:70:59:87:0f:63:42:cf:01:ba:
d3:16:02:4c:86:8a:5f:2c:c2:b8:a1:ca:bd:d9:93:
a4:4a:2e:bb:7d:12:0d:a8:39:24:76:d3:d6:7d:72:
16:43:0f:8e:a6:8f:64:85:24:2f:ab:16:ac:c0:9f:
bb:49:1d:50:de:c4:c3:40:3d:46:46:21:e6:5f:2f:
09:06:8a:03:10:a0:87:5e:d9:52:c3:ca:c0:e7:e5:
09:47:eb:00:61:7b:2a:f9:50:41:79:34:7d:ce:7e:
0d:ac:b8:52:87:20:8f:b1:59:47:cf:65:b1:65:18:
71:f3:a4:64:07:63:91:18:a6:98:eb:0a:f8:f7:64:
0b:18:95:10:37:60:c4:ce:8c:5b:e2:c3:6b:3f:21:
dd:7f:1e:a8:3c:f4:94:4e:99:27:90:49:2f:ff:34:
f4:2e:f6:69:2d:85:38:89:ea:22:34:e3:bc:8b:64:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D8:2E:B5:0C:E5:0E:8F:C6:40:9B:85:54:88:06:CA:4B:B6:AC:6B
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:76:5c:b8:9b:4e:bb:00:41:c8:8c:0f:a9:56:de:d2:05:f9:
1f:ba:79:18:ed:b2:74:f5:96:81:5e:78:40:62:8a:ad:99:30:
d5:a6:16:81:27:c6:44:83:2b:5b:a8:bd:71:ca:ac:e3:3c:d9:
23:65:73:f3:19:3b:6c:2e:68:dd:42:b6:98:28:aa:a9:7b:18:
5d:ec:e4:87:54:62:e3:c0:1f:e7:cf:d0:d0:5b:d6:ab:11:ca:
e5:e8:72:0c:34:ab:ef:b0:2e:88:73:5b:81:dc:26:51:5e:99:
77:71:5f:ec:6f:86:23:7b:ec:5e:55:4e:d4:96:25:b8:b7:a5:
21:08:5a:7b:46:95:47:b7:a1:9a:39:36:52:3a:f7:f5:18:dc:
c5:bf:d3:ef:25:63:0c:8d:ed:b1:16:50:32:2c:ec:5e:f3:4e:
f0:72:22:ec:42:2c:d3:67:13:88:3d:07:41:42:01:83:8e:7e:
9c:5b:2f:06:06:09:8e:2e:ff:50:27:0f:ee:46:e6:3d:fc:96:
e2:e7:cd:de:97:44:00:17:62:a3:81:f8:51:b1:cf:32:65:ff:
85:ca:1d:43:81:32:6f:14:41:83:8c:d0:db:62:4a:77:04:18:
d1:1e:3d:fc:b5:b0:95:1f:94:2c:b4:d5:b7:a1:d9:73:65:b9:
f4:a2:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:00:04 2025 by rpki-client