Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: UIkaQNFeiJoQJ2VSyzz0SRxEkgIPTAcihV/BK5jYxHw=
Subject key identifier: F6:5E:3E:5D:7C:C8:D5:4D:5E:0D:8F:64:3A:D8:84:DA:C9:D8:AB:5F
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 019A296749856D31ED6716E52B39AAF233DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 06DA
Signing time: Tue 28 Oct 2025 06:00:26 +0000
Manifest this update: Tue 28 Oct 2025 06:00:26 +0000
Manifest next update: Wed 29 Oct 2025 06:00:26 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: EaqJKPI3mfTU/N2bIGOF9c//mvReBkeSv/4unUtJESQ=)
2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:49:85:6d:31:ed:67:16:e5:2b:39:aa:f2:33:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Oct 28 06:00:26 2025 GMT
Not After : Oct 29 06:00:26 2025 GMT
Subject: CN=f65e3e5d7cc8d54d5e0d8f643ad884dac9d8ab5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:7f:2a:3a:5e:20:2e:9f:b3:91:8a:aa:1d:
07:ed:ec:ce:33:e9:48:b3:9d:fa:18:f9:05:53:5a:
14:f3:38:61:6a:55:12:c0:bc:ea:6a:74:03:90:8f:
a6:7b:1e:b5:a7:1c:6b:c5:82:48:9a:90:03:fe:98:
d6:9f:cc:2f:83:7f:b9:fb:15:40:b4:f0:2d:d1:30:
bc:84:b0:36:e5:49:72:2a:97:3e:33:c1:c0:c3:4a:
51:9d:6b:68:d2:7c:4e:e8:12:ba:6d:97:11:f2:60:
68:41:7a:71:e2:81:2d:bf:8d:20:a0:51:f7:f2:4b:
ce:11:10:9d:f4:b3:fe:3f:23:a7:d2:16:a0:61:6c:
f8:81:bf:c9:a5:1c:39:16:16:96:40:e7:68:59:4c:
3f:91:30:a9:74:93:c0:65:17:91:4a:91:34:0d:9d:
7b:a6:9a:dc:1f:e2:91:cb:2d:6d:67:66:d3:8f:af:
2f:ce:f0:e2:98:1c:a5:7a:d1:4a:f5:3a:84:60:da:
a7:10:bf:c1:fe:52:52:ae:43:5b:e8:93:ac:66:71:
92:e8:3e:73:89:84:a8:8e:39:e4:9b:06:c4:6c:81:
1c:25:82:c8:80:56:cb:a9:8c:80:40:61:7e:19:d1:
e0:8e:56:21:d9:b8:ff:6d:05:51:9d:57:5d:4b:09:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:3E:5D:7C:C8:D5:4D:5E:0D:8F:64:3A:D8:84:DA:C9:D8:AB:5F
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e2:eb:d4:e1:fe:bb:57:ac:8a:f0:53:a2:4e:89:d6:b8:b2:
af:ff:0f:d5:ed:07:b7:7c:97:84:8e:5c:5d:cb:05:11:53:5e:
84:e0:97:de:05:ea:19:32:87:d8:cd:39:3e:5d:8f:3a:6d:c6:
a4:fd:be:89:1f:05:a7:5a:98:23:c8:fc:43:4c:30:dc:1d:04:
44:4e:6a:05:ae:41:ec:03:d6:b9:e9:6c:66:f4:46:62:e7:7f:
10:84:7a:c3:0a:c0:ce:94:aa:93:6f:61:6a:1d:30:a4:1f:fc:
e3:d3:64:c2:ee:59:4d:21:07:89:27:8f:ca:93:e5:cc:f7:6c:
e5:7d:d4:2f:6e:12:13:0d:93:e6:1a:aa:29:90:06:95:8e:9f:
e8:7e:f6:bf:b2:77:be:57:7f:ea:02:41:6d:a8:67:08:13:3b:
e0:1c:90:81:b7:09:4d:19:41:81:c6:d9:8c:a3:ed:1d:8d:f8:
b9:9b:00:6c:ee:f9:a8:bb:ff:c0:1d:9b:b0:0a:79:20:6e:b7:
27:ed:50:b6:7f:73:d5:0b:82:7a:0e:8b:3d:a6:cf:1c:5a:4b:
17:6c:7b:a4:d9:ee:61:30:33:cd:2b:55:a9:bc:ee:b6:0d:14:
97:2d:3b:94:42:2e:49:9e:53:c8:e6:e8:3f:06:04:27:86:c3:
43:30:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:12:27 2025 by rpki-client