Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: 9WdFBdMOZl0VgtRhXBW42CmZbGofDZwxRSdXOEjN49w=
Subject key identifier: 1B:78:19:FA:81:2B:E4:06:F4:40:A1:68:A3:CC:25:A5:0D:F0:F8:56
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 019A71B793D6014F2D8C26EE31FE3EABE35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: 6c7fpdTAGZJd9PMBA1XN8E7BWaxTWm4aZQJHs38YELU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:93:d6:01:4f:2d:8c:26:ee:31:fe:3e:ab:e3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=1b7819fa812be406f440a168a3cc25a50df0f856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:80:be:3d:61:5a:0f:b6:aa:a9:c9:f4:b2:
c8:d2:53:2e:cc:1f:81:b5:4d:30:b9:3e:3e:de:cc:
8b:b1:d5:a0:82:fc:a2:cb:c9:9f:20:9a:d2:ae:7d:
80:35:cb:a9:15:b6:10:20:d1:da:85:f6:02:a5:30:
7e:47:0b:83:64:fb:45:0c:ab:9e:44:16:5c:8d:4f:
d5:55:e4:35:c9:4d:ee:67:bc:92:f3:fb:c9:bc:f2:
71:00:15:61:49:16:d1:87:fe:11:3d:bb:e4:21:dd:
a7:09:f8:3a:0a:24:54:33:0f:df:78:7a:10:8f:0a:
e0:22:d8:d8:a0:4b:ec:de:57:2d:fd:ba:a7:90:d7:
a9:20:02:83:76:c8:83:d3:b0:20:39:5d:e2:e1:5b:
42:d3:cf:3d:c8:46:32:7d:47:54:13:c2:b7:6e:87:
df:0d:8f:20:00:4b:96:36:2c:9d:28:b3:9a:a2:19:
f3:c6:1b:e8:6d:49:e0:47:84:f4:73:d0:e7:4d:70:
f9:1e:15:c5:e9:44:79:6b:80:0b:b2:b0:7a:b8:5b:
7f:b1:48:40:7e:91:7f:fd:7b:86:fb:8b:cb:40:5a:
9f:6f:32:23:23:4d:c1:2b:9c:02:a7:cf:d5:11:b0:
3b:da:ed:74:c1:d8:fb:52:9a:6d:f3:c0:15:d4:e2:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:78:19:FA:81:2B:E4:06:F4:40:A1:68:A3:CC:25:A5:0D:F0:F8:56
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c2:47:51:3b:3d:90:50:0e:c1:db:18:9a:c2:15:b6:9a:0d:
2e:23:0b:ec:8a:0e:b5:93:8b:64:fc:7f:e4:5b:a7:50:11:35:
cf:26:05:d6:71:e9:50:65:f7:a8:93:c0:51:69:bd:90:db:76:
fc:90:e3:36:9d:38:e0:64:c1:25:73:26:e3:b8:de:87:46:3f:
da:1d:36:5b:14:e3:60:e3:2a:c9:68:7f:b0:ab:23:e9:07:ac:
50:47:a5:fb:5e:b2:5c:ce:4d:31:b3:77:84:46:bd:54:7e:08:
4d:80:aa:dd:fa:56:32:2b:5f:07:6c:97:f6:6a:42:30:82:c5:
9c:1b:1b:7c:51:bc:4d:f7:6c:4b:8e:ef:cc:ed:55:ac:fc:06:
7e:80:9c:4d:e0:7b:38:8e:a9:71:54:ae:51:3f:15:ed:65:d3:
02:7a:fd:cf:5f:c2:02:78:78:a6:6d:f1:31:6b:0c:2d:5a:dc:
41:61:be:1b:a0:21:56:9f:4e:92:67:7f:8f:c2:7d:01:9d:8c:
e1:69:f9:a5:5b:7c:ab:d5:1b:6d:40:7c:5b:67:21:d8:e7:d4:
d7:22:c5:46:b0:0a:cf:5d:34:ba:61:2b:fa:04:1b:ee:33:13:
3b:ee:e4:4a:a8:3b:53:aa:8e:57:c4:9a:0e:93:2b:c1:39:42:
3e:65:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:01 2025 by rpki-client