Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: WRDoaJEhMJZJNIVrn3Hz4YF8efyMwjU9Mneau+rgo60=
Subject key identifier: 75:0E:1E:66:AE:E7:5E:E2:E6:70:B8:65:2A:49:CC:21:4F:E0:1E:7F
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 019A70A534671AE7866F36E4AAEF03C08C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 1656
Signing time: Tue 11 Nov 2025 02:01:06 +0000
Manifest this update: Tue 11 Nov 2025 02:01:06 +0000
Manifest next update: Wed 12 Nov 2025 02:01:06 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: TFmxi+8w68mfO7kEBLFGSGoXfxAheRrktSbeWe65Xqs=)
2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:34:67:1a:e7:86:6f:36:e4:aa:ef:03:c0:8c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Nov 11 02:01:06 2025 GMT
Not After : Nov 12 02:01:06 2025 GMT
Subject: CN=750e1e66aee75ee2e670b8652a49cc214fe01e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:e9:58:ff:94:fa:8a:0c:cd:ba:91:71:b7:
7f:76:f3:81:70:49:1d:fa:aa:50:24:38:08:a2:c1:
aa:0f:89:f3:9e:52:27:c9:d8:99:d7:dd:fc:61:ea:
40:46:93:b8:b1:ff:8e:48:7d:53:2d:38:57:72:e1:
ac:8a:10:cd:fc:64:1a:7d:18:f7:3c:8f:a2:d7:b4:
b7:77:34:fb:8e:27:04:12:5e:8f:f2:dc:21:56:ad:
1e:8b:45:c1:52:6f:f6:e4:87:9d:b4:a7:ee:10:05:
d8:99:ba:c5:00:26:c9:6b:e5:63:74:a8:3a:b7:76:
9f:d3:d8:ac:35:f6:e7:0d:c6:48:8b:01:b7:ba:db:
3d:ee:86:b9:65:89:65:17:7f:f8:03:e3:df:ad:25:
85:0a:f1:36:38:b3:ca:5f:72:ce:78:02:fa:51:fa:
92:ff:1e:2e:83:cd:df:22:75:c1:cb:6e:37:39:fb:
ad:2c:6a:d8:7b:2e:5e:19:4f:de:0f:e8:a3:f2:ef:
5b:ad:5b:d4:90:f4:44:94:d0:fe:2f:ca:e2:be:6e:
2a:1c:8f:9f:47:50:45:e1:70:82:c4:ee:cc:eb:07:
94:2e:04:d7:54:0f:3f:2f:67:ae:eb:54:f6:f6:3d:
6d:7a:95:0a:e4:50:6c:11:77:ff:9a:45:70:07:d0:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0E:1E:66:AE:E7:5E:E2:E6:70:B8:65:2A:49:CC:21:4F:E0:1E:7F
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d4:9c:71:0f:48:1a:0c:ca:ac:22:fa:fa:19:78:d3:f2:e0:
69:91:d8:eb:7d:30:64:85:b5:02:85:ec:19:5e:cb:f4:c6:bb:
8f:a1:b8:03:87:24:e0:53:07:b8:8e:a1:55:fd:0c:81:31:f5:
b6:f5:8c:27:5e:ec:22:f1:33:d5:4c:40:f8:2b:3b:2f:0e:96:
47:56:0e:8a:03:f8:3f:b1:2c:4f:6d:57:ec:a0:58:8a:83:b6:
7f:50:da:b1:18:39:7d:c1:2c:a4:26:c7:75:88:e5:86:10:c6:
ee:46:be:cf:aa:97:a1:73:94:79:f1:ce:73:92:a3:80:2f:a1:
56:0e:e0:da:c1:a1:b5:14:cc:23:83:e2:07:91:80:a1:c9:b4:
bb:a8:3a:43:c9:33:7c:cc:f9:0e:74:43:e2:30:2f:c7:01:a4:
87:af:0c:65:8a:a1:9f:65:b6:8c:d0:1c:da:68:de:b2:17:48:
7b:73:60:62:e5:ff:e5:df:11:be:3e:d1:8c:bb:d9:31:58:79:
48:8a:72:5d:e3:17:9d:f1:6c:c7:9d:05:1f:ca:42:ac:eb:29:
8d:5f:cd:67:e6:23:e2:bd:ff:20:ea:6f:b5:b7:47:95:81:f4:
4a:ec:a2:28:9b:5d:b2:fb:f7:67:33:f2:76:68:d1:6b:d3:81:
25:7b:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:16 2025 by rpki-client