Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: ijU0GZ2canjCOLcY1T8+vV6aud1KZlfKJniQSBurPdw=
Subject key identifier: 75:9B:C2:8B:23:1C:B3:90:C6:61:1D:C4:FD:73:80:82:1A:BD:C7:65
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 019A70A58A414E35C26FFC4A73F325E29605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 1200
Signing time: Tue 11 Nov 2025 02:01:28 +0000
Manifest this update: Tue 11 Nov 2025 02:01:28 +0000
Manifest next update: Wed 12 Nov 2025 02:01:28 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: t9GyK04J/8sRB2haTkGYt+/NPJtWLua2wnlxR3fS/BY=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:8a:41:4e:35:c2:6f:fc:4a:73:f3:25:e2:96:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Nov 11 02:01:28 2025 GMT
Not After : Nov 12 02:01:28 2025 GMT
Subject: CN=759bc28b231cb390c6611dc4fd7380821abdc765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:6a:87:4c:ec:33:a5:2c:f8:2d:52:6f:16:
37:85:d3:7b:ba:e3:e7:55:f3:89:a6:8b:5c:41:95:
98:e1:6c:09:1a:c1:fd:0d:0d:0b:b8:a3:4b:3c:3f:
3b:8e:07:0a:e4:02:b6:c6:62:cd:2c:61:2b:87:7c:
c0:81:7e:2f:9f:eb:1b:72:1f:e0:37:a7:7c:ab:96:
5f:ff:0f:ea:81:4f:23:87:e6:fd:c9:21:b4:00:f4:
80:58:57:4c:6b:50:f0:73:7d:68:d6:09:3d:76:87:
b9:c5:43:3b:8c:18:56:e6:9b:89:ab:26:55:d9:bf:
4a:b1:b3:b2:82:b8:c0:71:b3:fe:cf:f2:0c:76:ed:
0a:e7:8e:0d:d4:54:b5:96:0b:cb:d2:69:42:0d:2d:
51:1a:a5:a0:39:17:33:a5:00:44:ef:3b:ca:f9:6c:
51:c8:07:22:59:af:b9:40:d0:84:64:15:42:13:99:
b3:40:44:5b:29:12:9a:23:34:19:e1:2e:11:01:e5:
df:ed:2e:29:d8:02:e6:2a:19:8a:00:85:f1:41:75:
3e:5b:19:fa:00:18:b9:10:f6:69:9a:36:86:65:b4:
ac:46:9a:5a:e2:51:af:c0:fd:62:48:3f:d0:eb:08:
a3:f7:59:d4:1e:db:57:5f:82:a3:46:ec:20:aa:8b:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9B:C2:8B:23:1C:B3:90:C6:61:1D:C4:FD:73:80:82:1A:BD:C7:65
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ca:98:48:c4:91:4c:50:07:82:11:01:01:fb:4e:b9:88:54:
c3:4b:3b:74:63:4e:87:2d:2a:e8:43:82:37:fc:36:12:80:cf:
1b:ab:13:3e:4c:00:28:7c:bb:2b:23:0e:6e:11:e2:93:77:db:
90:5d:7a:08:5f:94:01:11:b8:b2:a5:a0:57:9b:7e:34:6f:a6:
e8:a0:4f:f1:8c:c7:0f:32:6e:cd:68:3d:3d:52:c9:1d:7f:df:
9f:da:12:ec:c9:e7:fe:6b:4d:64:9d:a2:2f:b2:9d:22:6a:4b:
8c:2d:c2:1e:7a:cd:c2:b9:33:62:db:8f:52:f9:21:e1:df:32:
e3:98:8b:7d:6e:13:cf:ed:56:31:96:1f:24:f0:56:9a:7c:7f:
89:40:41:3c:f1:35:4f:78:d8:17:2f:5f:54:22:58:2d:94:82:
d9:42:a9:c4:7b:31:de:d2:49:25:8b:6c:4f:d9:af:c8:f2:59:
de:08:63:42:95:8f:37:8c:a6:3b:a4:04:89:ec:75:bc:a9:1f:
82:90:77:12:0b:d3:69:85:2e:a4:e3:1d:c2:cb:30:70:ce:1d:
35:53:fd:ae:b6:74:70:18:89:c8:df:b3:c8:a0:ae:b8:b0:68:
82:f9:ef:34:ad:08:7d:c9:6d:31:70:a7:42:49:25:c9:0a:22:
f6:20:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:29 2025 by rpki-client