Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: Ub8OF8WyRlNfoOeH6t2KW4VixHe5O1jXmd3zCPltXD8=
Subject key identifier: 9A:3B:DC:46:02:A6:3A:3A:22:44:E2:E8:F0:2B:B5:0C:21:E7:A5:43
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 019A7149D8B4F1279267FF7081C3ECD240D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 1663
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: 7i1+D768wy+50LHW4jG9D0+/4UbRtjMpcjOGp7vzLe4=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d8:b4:f1:27:92:67:ff:70:81:c3:ec:d2:40:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=9a3bdc4602a63a3a2244e2e8f02bb50c21e7a543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:83:1f:75:75:ad:dd:88:36:bd:95:ff:c1:
8a:c2:2f:c9:c3:cb:5a:8b:f7:f5:ea:4f:a7:aa:be:
42:81:df:04:b2:d9:11:08:08:3a:8d:c0:41:61:64:
67:cd:ec:29:1d:82:e9:7c:cb:43:25:a3:1e:ac:46:
d3:5c:8e:0c:c2:bb:b3:3e:20:e0:f4:f4:c7:2c:82:
34:6a:a4:63:c1:60:52:63:43:48:2c:b6:57:29:41:
d2:62:4f:fb:1f:35:74:77:1e:2e:b7:d9:3d:a0:41:
b8:0a:c9:d8:dd:e5:8c:c7:72:61:f1:cf:62:83:c3:
37:c5:92:68:11:c2:1e:d2:b1:c7:ec:4d:39:56:29:
d4:d3:7a:88:6b:65:13:68:af:a3:68:36:59:8a:f4:
de:d1:aa:fd:91:db:83:9e:aa:1c:38:48:a4:98:ea:
d2:7b:7e:24:80:a1:b4:71:77:4c:d4:1e:8d:1e:36:
da:34:3f:04:09:67:53:9b:d4:46:f1:c2:0d:09:10:
9b:c1:ad:eb:68:42:c3:e0:b3:56:48:51:fb:30:4d:
76:fe:7b:ef:55:a3:e8:4c:ff:0d:f8:a3:33:26:2d:
23:3c:08:5d:f3:69:e0:45:0d:0d:b6:eb:ea:b0:89:
44:24:30:3c:ab:fd:81:30:22:5f:52:1d:f2:85:dc:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:DC:46:02:A6:3A:3A:22:44:E2:E8:F0:2B:B5:0C:21:E7:A5:43
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3c:53:38:b3:06:7e:0e:58:6b:34:d9:08:e1:3f:a1:6a:99:
ff:da:6e:96:10:95:c4:81:fb:99:eb:c9:e2:5d:8f:e0:09:a4:
92:0c:39:76:d5:34:34:ea:37:a5:94:62:a6:f2:a9:06:ee:98:
56:0c:d4:d3:1a:4e:ca:3a:fc:09:d7:3a:da:4a:ab:12:78:48:
0f:23:0e:a3:ac:44:c7:b5:ff:71:64:c3:f6:c9:09:cf:e3:7b:
d5:88:26:d9:f4:53:01:cd:29:da:20:56:49:ed:8a:99:f5:36:
82:d0:25:09:ab:5d:48:f3:d7:84:6c:24:a1:27:93:01:ee:b5:
e2:5a:0b:ff:50:84:a4:64:95:21:70:26:66:6b:09:66:75:d9:
5b:45:a9:3c:52:a5:46:19:17:b6:4f:78:f8:50:b4:21:67:4f:
34:29:7c:3a:64:a2:bd:0a:cf:70:bb:d3:a0:e3:f9:48:bd:8e:
58:10:48:67:9e:65:e1:2e:c1:ca:15:64:c4:50:ce:21:6d:ac:
76:47:b6:2d:22:54:93:d5:8b:6c:05:a5:7f:b1:1b:08:6b:1e:
96:b0:0a:49:cb:fb:3b:e6:77:46:a7:5f:17:c6:25:fb:3c:59:
b9:4a:3b:67:79:aa:18:41:f4:7b:a9:6d:be:9a:83:9f:ab:10:
1d:ae:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:22 2025 by rpki-client