Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: 09OOf4PSmdMxe9VaNhKxB9LIWFOCn/MUgCCXI3rSFDk=
Subject key identifier: CF:7A:54:B4:45:2F:DC:94:BB:C0:17:68:22:93:EA:61:E8:38:45:9B
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 019A71B84E54D7DC8E5B45B89F056B69E641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: vTz0f6ZDxLmuZLHzd2SD4EvjpIxmUr7XktqK6ChuDoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4e:54:d7:dc:8e:5b:45:b8:9f:05:6b:69:e6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=cf7a54b4452fdc94bbc017682293ea61e838459b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:6d:de:65:4a:45:77:62:19:30:9a:17:cc:
9b:9c:40:b6:ec:1d:32:26:4b:cd:a9:8f:29:7f:b5:
93:26:92:10:2f:1c:95:ca:ed:e4:c4:1c:4e:b1:ef:
70:8e:8b:b9:b7:0d:18:f1:2a:f5:84:12:1d:49:19:
1b:f3:9b:56:53:69:f6:80:e3:9f:b7:ac:a1:51:29:
97:2b:e8:d6:f0:56:ee:6b:67:7a:15:ab:9d:6e:72:
b7:bb:b1:9e:3e:a8:35:68:f2:5f:4e:31:3d:a0:93:
8e:5b:55:27:47:a0:c6:37:c6:d9:95:eb:12:37:6f:
a1:07:81:f4:be:21:40:aa:79:50:6d:2b:da:3a:12:
80:a3:29:b5:17:7d:75:53:d0:da:38:c3:cd:84:f3:
0c:79:0c:70:ee:22:c9:e8:54:cd:c8:16:cf:16:7d:
82:05:d9:f4:4c:70:e1:ec:12:72:71:c4:6c:00:e4:
e4:df:f4:97:cf:2e:72:b2:ee:56:d6:02:1a:b4:e0:
b5:37:25:eb:fb:cd:64:b0:ff:77:9b:36:2a:88:98:
46:ac:b6:9b:e6:9e:55:a8:e4:d7:43:ec:b6:19:4a:
62:db:d0:8a:b8:ca:00:35:c0:cf:41:62:1f:f8:cf:
3b:bc:53:d9:7b:3d:4c:57:3c:21:88:06:4b:03:b1:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7A:54:B4:45:2F:DC:94:BB:C0:17:68:22:93:EA:61:E8:38:45:9B
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0e:7f:02:1c:be:75:a7:c0:05:5a:38:b5:1e:e5:d9:27:05:
2f:1e:69:ac:89:a6:f5:58:6a:d6:1e:fe:b3:60:da:a4:54:b2:
f8:b7:52:a3:e5:bd:86:fd:94:72:c7:53:76:ef:ac:47:02:ec:
59:7c:bd:7e:69:98:2f:56:b7:85:34:14:ce:0f:ee:50:48:ae:
8b:05:7e:7a:38:d8:e0:22:5c:de:78:b6:f4:9f:5c:81:42:7c:
ed:52:2d:f9:87:14:a2:da:b1:17:f2:e3:ea:48:f4:8f:f3:5e:
36:e3:05:14:ca:66:ef:ce:9b:19:fe:33:5f:d6:43:37:2b:9c:
d6:e6:d6:1e:d4:0b:62:82:b8:be:17:89:5b:92:d6:64:66:f4:
b0:4b:fa:ad:c1:01:0f:9c:09:27:51:7f:5e:de:cc:2a:4f:28:
69:fe:d8:41:75:d4:2f:c6:01:0a:11:a5:9c:cd:df:7c:33:ed:
58:d6:04:b1:bc:b4:f0:30:d7:dd:00:a8:46:98:4c:f7:eb:49:
5b:a5:70:c9:d0:58:dd:be:97:2a:8c:01:bb:8d:c6:8e:05:fd:
ab:ac:c3:c1:04:a3:6e:f7:68:f8:2f:c9:0d:65:3d:2c:f2:fe:
a0:4a:c6:be:22:d2:6e:10:07:37:5c:3f:33:48:e5:c9:2d:57:
04:ad:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:01 2025 by rpki-client