Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: yuzBStxkJmdZf22QHCrDkVS6J7SV87Dvvc2v5OymzG0=
Subject key identifier: 7F:94:CB:37:09:29:A4:63:51:E2:8E:CC:CA:0C:9B:B2:81:73:9B:31
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 019A4F62BC9C8403294CD5839C7E21DB2F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:01:02 +0000
Manifest this update: Tue 04 Nov 2025 15:01:02 +0000
Manifest next update: Wed 05 Nov 2025 15:01:02 +0000
Files and hashes: 1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: lgRV3cyPIjR5e08OFA6Yl+4rwmkl7Oa7g1tNrNY+KVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:bc:9c:84:03:29:4c:d5:83:9c:7e:21:db:2f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Nov 4 15:01:02 2025 GMT
Not After : Nov 5 15:01:02 2025 GMT
Subject: CN=7f94cb370929a46351e28eccca0c9bb281739b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:b3:06:ec:77:11:d9:f8:8b:6d:0f:5a:fb:
70:79:61:b5:63:24:97:86:ff:74:b2:d3:34:ad:ef:
3b:9e:18:23:3b:7b:1b:7a:0d:01:11:f3:88:e2:6c:
0d:3a:b3:7e:87:3c:0c:91:f9:22:08:58:4a:f3:ec:
83:d0:a9:1f:64:56:f7:c1:2f:41:93:0c:13:f2:be:
c2:8b:98:ad:60:cc:4f:9c:a9:ef:3b:53:f5:59:20:
3a:59:54:80:56:b5:6f:f9:79:be:0c:d2:ee:15:44:
06:bd:14:62:fc:b4:da:fe:81:c0:75:a7:40:1e:b4:
2c:3d:2b:4b:f6:88:aa:d8:66:81:3b:db:5d:61:64:
a9:92:57:bc:3b:84:a5:a8:e0:2f:e5:27:2f:0a:45:
38:6e:b8:ef:52:28:46:26:1e:4d:04:b9:4f:90:97:
d6:87:86:05:14:6b:52:a8:21:f8:c0:8e:de:22:44:
2c:a7:40:fc:61:f5:9e:bb:97:55:2c:44:bd:58:63:
3d:ac:5f:0d:b1:cc:7a:cc:48:b1:38:b1:07:f5:97:
9f:59:c3:b7:1c:a9:1a:1b:fc:44:74:f2:17:bf:af:
35:4f:3e:2e:0d:97:2c:28:a7:53:3f:b8:b7:ff:63:
88:bf:73:27:b0:54:8a:b2:59:84:37:d7:5f:25:50:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:CB:37:09:29:A4:63:51:E2:8E:CC:CA:0C:9B:B2:81:73:9B:31
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:44:0e:21:50:05:6b:c2:2e:8a:82:7c:0f:de:62:c3:02:d5:
37:6a:81:40:37:24:44:2e:63:05:16:1a:b0:75:59:8d:c4:1f:
ad:b8:bc:f3:e5:27:c5:d9:ea:1a:71:43:12:55:42:91:22:e6:
53:c1:10:c4:af:16:93:98:13:da:e8:17:d1:e7:c5:37:33:75:
5b:74:da:ab:9d:e7:59:fb:f0:0f:98:cb:d0:98:f9:f2:be:05:
38:9a:e6:c4:2c:f9:1a:d7:e0:67:84:10:ce:33:d9:e8:8b:68:
fb:24:29:4b:37:b8:fe:dd:17:d5:ce:06:d4:95:a8:35:5f:95:
8f:1a:80:07:b6:36:69:0c:0e:b8:1b:dc:a6:5b:22:df:73:fb:
ad:19:e5:d6:49:80:3b:d3:32:96:b3:8e:ab:f7:1b:42:64:a9:
19:91:25:18:22:eb:c9:5b:5f:c5:ad:0a:58:84:ad:88:ee:c9:
f6:8d:16:82:cf:44:41:7f:2a:42:c5:4c:a2:2d:e3:27:a8:77:
30:e5:eb:48:a6:51:a9:95:52:a6:46:cb:95:3b:25:a7:ae:63:
1d:31:72:bd:9e:72:77:68:da:9d:95:33:e2:2e:ca:11:70:75:
79:7e:5a:16:44:c3:5e:d9:68:68:88:36:25:70:05:99:20:4d:
c0:75:49:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:23 2025 by rpki-client