Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: B4XkBs747VCKZSebsZC7oQd2i+mXgtofN8ublU69Khs=
Subject key identifier: C2:2D:C4:53:7E:6E:0F:BB:4F:5F:18:DD:8B:22:7E:06:AE:B5:26:06
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 019A56400B3AC7C0F3E61C34487C387F8C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 1727
Signing time: Wed 05 Nov 2025 23:00:29 +0000
Manifest this update: Wed 05 Nov 2025 23:00:29 +0000
Manifest next update: Thu 06 Nov 2025 23:00:29 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: RRshYy6xJJ36lApryodWZ0ORruRGKzbUqfUTlpHF4nY=)
2: cOUnq0vuqxo-7tAHaSmMNpB4xjA.roa (hash: wsxzS6oiT3Fp4m4xvinb8fl886ODt+8izctjh085880=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:0b:3a:c7:c0:f3:e6:1c:34:48:7c:38:7f:8c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Nov 5 23:00:29 2025 GMT
Not After : Nov 6 23:00:29 2025 GMT
Subject: CN=c22dc4537e6e0fbb4f5f18dd8b227e06aeb52606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:fc:ee:44:0c:38:ac:2f:66:ad:46:2e:24:
4a:f1:89:9e:0b:5b:4b:dd:69:59:7d:ff:e1:4d:3e:
9e:6e:40:bf:fd:16:5c:ff:4a:d5:49:a0:56:36:43:
80:60:f8:e4:97:a1:99:3c:28:93:ff:fa:43:56:2e:
43:e4:1e:61:da:50:f7:60:62:b0:f9:5f:f6:ea:c0:
bf:b5:2f:f2:9e:00:7b:19:ff:20:ec:b5:79:05:2e:
f7:a6:33:3d:e2:46:c8:88:a4:93:8c:a5:71:b2:a5:
8b:a0:ca:9d:46:51:be:a1:22:19:7c:30:bb:f5:c3:
c9:93:89:37:41:7f:d8:8b:c7:cf:6c:a0:bd:23:e9:
0f:59:6b:83:05:6d:c4:07:fe:55:04:d6:a3:6f:c3:
80:e7:bb:77:e7:2f:9d:e6:f5:37:8f:1f:f2:2f:37:
3a:36:7f:a4:1a:e0:a8:24:1a:38:2c:d7:e3:21:cf:
2b:b8:85:ec:2d:62:79:a2:58:f3:bc:5a:db:e3:e8:
57:fe:ff:10:67:ab:4a:9e:64:c7:1c:dc:71:90:72:
eb:58:b3:85:0d:90:66:70:24:ae:31:a0:99:94:8b:
2d:1a:5b:7c:ca:24:85:7a:7a:08:3e:b9:dd:6e:59:
f5:0c:37:e6:a6:b7:c2:74:6d:ef:78:d8:9b:b4:4c:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2D:C4:53:7E:6E:0F:BB:4F:5F:18:DD:8B:22:7E:06:AE:B5:26:06
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3c:47:a5:05:de:37:ef:e0:53:34:d1:98:16:c4:cf:be:28:
48:b6:91:bf:9c:2f:b7:a2:09:c3:20:5f:36:9d:49:4c:fc:2f:
58:29:c1:27:1d:10:57:ff:14:e2:5c:bd:a4:4d:8b:7f:9b:e9:
1a:33:4d:4a:a7:fb:ff:9b:24:cd:93:b7:79:71:67:70:14:df:
8e:78:2b:11:a4:b2:fa:ff:dc:13:90:07:5f:23:10:6c:27:59:
17:19:bb:cb:42:40:28:42:19:33:b1:fe:9a:fc:53:c3:d1:48:
fd:ba:11:f5:ad:26:6b:76:43:d4:60:fb:9e:a2:d9:5a:fe:69:
04:a0:96:5a:a8:13:83:0a:87:c3:b4:59:5b:1e:03:98:4f:ae:
77:f2:9f:d2:c5:4f:eb:2a:ee:d4:b7:04:38:a4:8e:08:e4:a7:
2e:97:69:1a:4e:ba:09:e3:2a:52:ad:d0:9a:56:2d:b4:03:4d:
15:38:ac:c2:10:cb:8d:3b:b2:d2:65:1a:eb:14:83:52:f1:28:
c4:4a:10:db:94:f3:bd:22:e6:ff:91:28:7e:57:48:a6:05:97:
32:87:2f:52:e1:06:07:6d:d4:81:0c:0c:a5:20:90:aa:d9:cc:
ed:33:4a:ef:df:7c:fc:38:c3:a0:e7:ae:74:0e:94:c7:72:bd:
b4:c3:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:19:51 2025 by rpki-client