Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier: +owbsGiR0x4VkgfxPhKkV6H5nkCNagSr0x5vEW8TY48=
Subject key identifier: 29:85:34:01:06:80:63:44:C7:4B:BF:BD:67:C0:1E:28:DE:FB:B6:49
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 019A12A8816F7C2B167624D5BCC5DB62D14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number: 170B
Signing time: Thu 23 Oct 2025 20:00:24 +0000
Manifest this update: Thu 23 Oct 2025 20:00:24 +0000
Manifest next update: Fri 24 Oct 2025 20:00:24 +0000
Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: rLh+xvH87gR8bqyzX7ZUK+X9jC0Zzk4gwpl8eqGJ+CI=)
2: kB9cAhV9F3NlODRT7TjrXEPyRnA.roa (hash: F03Hqfl3wd5NxqjFi4e8XEepN0xlDsOdLzMn6Oyc4yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:a8:81:6f:7c:2b:16:76:24:d5:bc:c5:db:62:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Oct 23 20:00:24 2025 GMT
Not After : Oct 24 20:00:24 2025 GMT
Subject: CN=2985340106806344c74bbfbd67c01e28defbb649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:d5:c3:5e:d1:e6:0f:39:66:ae:73:03:05:
29:7b:0d:75:d2:26:b9:fb:89:81:fa:f7:18:00:6e:
27:fd:9c:ee:5c:d5:79:37:43:17:34:0c:2c:18:33:
8a:42:4d:7d:e6:a4:f9:5a:0b:aa:55:6e:dc:52:e0:
a0:c1:3a:bd:bf:f6:02:db:09:73:69:93:13:fd:cd:
97:8f:ac:22:cf:0d:7c:50:c5:e6:32:6d:74:f2:82:
ac:14:75:be:62:2b:90:96:b9:74:af:c3:34:f6:9d:
f4:18:e1:0f:c4:44:b1:76:2d:b6:f8:ff:22:78:29:
2b:e7:79:aa:af:8d:ef:a8:90:0f:1d:a8:f2:1a:3c:
a4:e0:3c:da:4b:48:d9:87:1c:ab:b3:49:22:0b:1e:
43:4c:05:21:00:f3:26:60:48:97:12:e0:ef:d7:4a:
55:e8:20:56:e0:71:eb:7e:c8:cb:27:75:3b:49:27:
5e:9e:35:64:fd:d1:51:8e:e0:fb:8e:58:71:41:bf:
67:04:ab:09:04:4a:16:44:7f:31:a5:68:e4:fe:a4:
ba:8e:4c:0b:0e:af:de:e4:82:81:b3:ca:65:99:a6:
25:6b:fd:ba:5c:4d:67:4e:f6:bb:e7:61:27:c7:21:
19:85:1f:b4:79:7a:25:79:7f:c7:83:02:5c:4c:41:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:85:34:01:06:80:63:44:C7:4B:BF:BD:67:C0:1E:28:DE:FB:B6:49
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:84:f0:58:fb:3b:76:d7:73:58:a4:47:3e:aa:37:16:b0:64:
89:0e:bc:48:9b:d0:d9:4a:c6:54:2e:85:be:69:6f:98:2d:e1:
08:c9:ff:6d:1f:d2:6e:66:97:15:13:11:a0:d1:ce:70:4b:ca:
c1:a1:cc:c0:96:9a:d7:ee:8c:9e:dd:71:69:e2:12:1e:8f:19:
fc:c8:0d:56:8f:a5:7e:d3:1d:44:9f:6f:1e:5b:56:e9:0c:08:
5f:5d:da:20:02:c9:9f:18:cc:34:01:a4:06:17:40:d0:af:77:
08:d6:1b:13:c1:14:ef:37:34:99:48:68:ad:a8:2b:a3:57:ec:
58:63:98:f0:1c:5e:4f:87:89:ae:ce:d8:99:5c:4b:29:83:8b:
3f:44:2c:2e:5a:fa:c3:6c:b5:35:17:50:01:12:2c:17:e2:c6:
e7:c6:6d:54:d0:77:af:6a:6e:25:09:63:98:f8:f1:2d:92:e8:
12:e3:64:2e:6e:41:5e:22:ac:89:9b:33:5c:2f:fe:9f:71:10:
52:53:fe:49:61:01:0a:52:7f:0b:b0:b2:60:f0:ea:68:47:ca:
86:05:26:a7:d8:b6:ec:79:b5:1a:0f:78:2c:94:ac:2b:36:bc:
5e:90:ef:1c:50:f2:86:58:85:9b:e2:ae:94:b4:7c:7c:34:4a:
fa:a1:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 02:45:01 2025 by rpki-client