Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: A9eJZH7hYR3w3tkOisQDxX8L+/LCEq3u1b//wYi9ds4=
Subject key identifier: D4:C9:A7:6A:C7:CE:7E:41:86:73:7C:25:2C:69:A4:27:52:92:57:07
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019A7225C7A29F59B491DF460AABF3F934B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: CsCAi/lV6PQ38SKAgElN9AAdQYqpxtNGgKG0dMWK9Bk=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c7:a2:9f:59:b4:91:df:46:0a:ab:f3:f9:34:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=d4c9a76ac7ce7e4186737c252c69a42752925707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:17:c3:0f:71:d0:00:a4:ad:08:72:c5:91:
a0:7e:2c:c4:1e:9a:52:a5:8e:df:58:43:8f:b0:03:
63:e3:b8:16:ae:f7:9e:05:40:da:f0:db:3d:87:8e:
b3:53:87:9a:f7:9c:25:72:31:d6:70:cf:30:ce:0f:
17:74:70:e4:7a:bd:6b:fb:bb:b3:df:32:74:76:12:
3e:bd:3c:b1:4a:7d:7b:1f:8d:6f:74:7b:5f:7c:3d:
62:b3:c0:2f:7b:7b:91:18:ce:a8:fd:ab:1c:41:06:
8c:61:fe:fc:3c:7f:99:90:e9:03:1e:d4:38:8d:f2:
a1:ba:9d:2d:43:13:85:27:65:46:f7:d3:f3:6e:54:
bb:d8:1f:c5:70:56:92:2e:dd:a7:0d:df:86:cb:27:
a1:6f:f7:37:8b:27:a4:a0:20:a5:98:ed:bb:e7:59:
27:24:72:12:f4:87:56:40:8f:c1:5b:f0:85:c9:9a:
09:28:b6:bc:3c:ad:8e:bb:98:94:5d:0e:3c:80:40:
50:41:e1:fb:2a:5b:c9:47:0f:cf:63:7d:1f:fc:1b:
49:cc:f3:de:66:8e:ff:70:6c:e3:4f:ae:1a:1d:3c:
79:a1:4b:e4:f8:c7:90:51:6f:67:d9:75:f4:f5:75:
12:53:b5:5d:4a:b9:1c:ce:6c:49:f8:f0:f4:f0:76:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C9:A7:6A:C7:CE:7E:41:86:73:7C:25:2C:69:A4:27:52:92:57:07
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a4:23:78:8f:50:45:84:68:6e:46:4d:1f:12:32:47:fd:f7:
87:e1:96:c8:91:68:45:9e:26:03:e2:e0:60:e9:c0:5a:bf:b9:
cd:5c:8e:93:62:44:ac:b2:4b:1c:7c:b1:6c:a5:bf:e3:0f:ee:
0b:e9:8a:03:dd:3b:31:92:60:1b:5d:ba:15:8c:6b:6d:85:b9:
10:26:aa:5b:99:67:bf:8d:0e:0f:5a:f1:d2:aa:3e:b8:3b:7c:
b0:04:2b:9c:f5:12:59:59:c0:25:20:53:fb:f3:9f:07:5a:9b:
7c:92:78:bd:b3:2d:0d:45:e7:ab:7e:50:df:80:40:0d:0c:94:
a9:48:02:7e:45:b8:ca:87:ab:d5:d3:8d:4b:1b:b2:0b:19:63:
1b:ea:b3:ee:21:41:0f:03:38:70:30:e7:1e:cd:16:68:90:41:
fe:e1:ac:39:50:84:f3:9c:09:43:31:0d:7f:8b:52:ab:b5:20:
b1:88:d3:44:50:7d:58:09:40:f1:3e:33:2c:2d:a2:56:f9:d6:
ec:b6:62:24:cc:0a:b8:49:34:77:d2:2f:c4:d4:48:75:de:04:
ab:df:ed:d1:f9:cc:45:63:38:c8:de:42:76:f0:75:bd:b6:ef:
a0:7c:6c:0e:94:34:3b:d9:6b:ad:39:d5:17:ab:f1:11:d9:ce:
cc:2e:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:14 2025 by rpki-client