Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
File: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft (raw, json)
Hash identifier: VSRhXz93I4WA8ZAizKANMLGmWrHA0rmltP7tGYmprGI=
Subject key identifier: FD:02:5A:0B:75:CB:70:6F:2E:A5:84:54:53:34:6A:2B:C5:89:A2:4D
Authority key identifier: D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
Certificate issuer: /CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Certificate serial: 019A70DC477A96BAACCE7991449013ED141A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
Manifest number: 85
Signing time: Tue 11 Nov 2025 03:01:15 +0000
Manifest this update: Tue 11 Nov 2025 03:01:15 +0000
Manifest next update: Wed 12 Nov 2025 03:01:15 +0000
Files and hashes: 1: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl (hash: b3cuKoSkkYmE9Pk5vIxCHpZJ8H0zIHE3mMHN3CDo+zc=)
2: qEIvOXeJOReZ450RqGjB6EOS1CI.roa (hash: Fk0yq1BlMLJDNsR0LsHKuSZEhch+26LuQGGBHUWFKpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:47:7a:96:ba:ac:ce:79:91:44:90:13:ed:14:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Validity
Not Before: Nov 11 03:01:15 2025 GMT
Not After : Nov 12 03:01:15 2025 GMT
Subject: CN=fd025a0b75cb706f2ea5845453346a2bc589a24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:25:a3:e5:5e:e6:dd:3e:9a:62:9e:e0:0d:
1b:97:cf:5e:d3:c7:0e:cd:58:c1:94:25:20:f4:31:
a2:27:0b:df:b2:3b:ea:4d:36:62:26:ab:b0:a5:35:
1b:82:14:25:6c:20:d8:c6:10:bb:ce:31:21:6a:e2:
ec:42:86:5b:9b:15:75:d5:d3:f8:f7:ec:92:fd:75:
8e:52:ad:ef:39:59:04:0d:86:da:bd:57:b0:76:be:
ab:3c:26:93:9f:04:74:16:cf:60:60:92:c8:9f:69:
91:df:3e:f7:c9:86:c8:6d:af:39:fb:4e:a6:24:65:
1b:5e:f0:75:59:3d:e8:eb:0f:83:b7:74:37:e5:28:
ed:ac:24:ba:cd:2c:54:18:95:b1:ad:01:71:61:b4:
c7:0c:b9:6a:af:3e:bf:af:25:4a:2a:81:81:8f:dc:
ec:3f:49:30:1d:1e:81:47:6a:72:65:99:cc:20:50:
82:55:34:01:ce:31:f9:88:f2:64:ae:1c:e2:da:1f:
86:b4:73:3c:7d:0c:dc:02:32:61:02:d4:7d:6a:18:
4c:5a:dd:44:f6:86:40:ec:fe:61:6b:aa:f9:8a:88:
85:c4:3e:88:b9:ce:6f:de:fa:02:b1:ad:99:8a:00:
55:55:c0:d5:88:6a:45:0c:fe:e0:fa:3a:20:c4:69:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:02:5A:0B:75:CB:70:6F:2E:A5:84:54:53:34:6A:2B:C5:89:A2:4D
X509v3 Authority Key Identifier:
keyid:D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:60:9e:b6:15:f8:7e:ac:9b:14:1f:29:5b:21:15:74:33:03:
8b:ca:95:7f:fc:5c:46:3d:11:51:5b:4c:e2:11:1f:0f:95:7a:
ad:23:c2:f0:5a:ab:1d:64:53:d2:17:d1:1b:eb:7b:0c:46:4f:
c1:9f:6b:d1:3c:9a:ba:c5:2b:b0:91:8d:11:60:56:b2:37:6e:
36:80:aa:7f:2e:39:66:ba:8a:ec:dd:21:79:1d:dd:78:fb:ba:
fd:4a:67:0f:14:72:61:03:96:fc:8f:3f:a8:f5:5e:38:c1:9d:
7d:57:75:25:8f:56:b6:ab:83:ac:56:72:d4:40:65:7e:c6:ed:
ee:81:2f:a5:33:42:e2:68:a5:ad:dc:af:56:be:4c:80:19:93:
da:83:c9:8c:5f:84:6a:d4:4b:72:6a:c0:4b:f8:71:c5:f7:8d:
3a:48:20:09:b3:08:32:dd:27:b9:56:85:2f:da:ac:d6:35:d9:
d5:90:3d:e5:ff:02:85:d5:64:2e:61:6f:d9:5c:8a:20:68:8c:
e5:3a:9b:07:87:7a:96:37:85:72:9d:b2:7c:34:79:05:c5:1a:
0a:fd:8e:07:4b:2f:d4:e5:a1:a4:cf:28:fd:5f:5f:7c:90:ea:
48:26:e4:a3:71:0c:82:6b:f6:38:58:a3:a5:f6:09:35:bd:8e:
68:27:14:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:05 2025 by rpki-client