Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier: qlY3TBdwNxt7j2iMKBmoptMiGcwTy/7Y03+PG6pLkJ4=
Subject key identifier: 87:E3:18:F6:0D:C7:71:C9:00:0F:46:27:2D:38:09:0D:50:E6:90:20
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 019A72933CF3444C0AFB9B38449D6A47E87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:00:43 +0000
Manifest this update: Tue 11 Nov 2025 11:00:43 +0000
Manifest next update: Wed 12 Nov 2025 11:00:43 +0000
Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: zvq6QR69hGSGyClxTfZwoK4k8L3khBuvHQTUkw1A6WI=)
2: 5E1ZOs6jBFxTFh2Cf5ZnFlkIOxc.roa (hash: pA+HTgzqmsnmbM9IncUhyb9kGpbMUOBHi5UiEoEtsy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3c:f3:44:4c:0a:fb:9b:38:44:9d:6a:47:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Nov 11 11:00:43 2025 GMT
Not After : Nov 12 11:00:43 2025 GMT
Subject: CN=87e318f60dc771c9000f46272d38090d50e69020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:eb:8e:a8:62:66:28:64:5c:fe:de:8e:62:
c7:f9:55:96:9f:aa:6e:d3:49:6c:d1:13:a9:28:42:
ba:43:14:c2:38:f8:e9:fb:39:c2:43:49:9e:bc:9b:
f6:33:06:60:7e:e5:55:17:63:36:45:1c:5f:b5:43:
11:a0:25:aa:a3:d4:82:9d:14:34:fd:e7:c8:75:64:
54:20:6c:8c:66:91:bc:bf:d6:12:e5:df:fc:98:b1:
2d:3b:c3:89:02:90:6a:63:e8:42:61:3b:d2:96:f5:
1b:e2:50:ad:e3:8b:aa:53:0b:13:64:e7:30:9c:6b:
64:15:44:50:6c:7b:cf:25:72:ba:a0:b3:08:f0:a3:
2c:d2:3c:93:6e:1f:9b:7b:a0:a7:78:2a:3c:6b:3a:
f5:6f:ff:19:5b:98:f6:83:1c:94:0a:93:b3:fd:43:
e5:55:9e:3e:a2:59:db:b0:b6:60:e6:12:dd:41:0c:
1c:41:d9:6b:14:12:57:8d:4d:43:a4:a1:cd:e6:70:
97:e7:b9:96:42:ce:33:08:6d:c7:ee:b0:6d:9d:19:
16:b1:76:2c:2c:af:a2:3b:d3:67:27:4d:89:aa:37:
39:ad:c4:b8:07:b4:cb:62:a5:bd:b3:7c:dd:1c:97:
c0:83:0c:6d:77:93:46:4b:12:7a:29:36:80:e4:e3:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:18:F6:0D:C7:71:C9:00:0F:46:27:2D:38:09:0D:50:E6:90:20
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:90:48:d1:32:ac:cb:a6:b7:97:e5:09:0e:39:49:c8:09:34:
28:4d:c5:da:c8:0c:41:6d:13:61:5c:92:c7:fa:45:5c:7c:1c:
31:05:0e:99:6d:16:3c:f1:4a:0c:02:96:c2:2d:db:ac:32:11:
f7:a3:c1:2d:35:72:fd:79:c9:bf:cf:90:35:9e:d5:f1:5e:b6:
f5:71:2e:c7:4a:a1:61:cb:97:94:d2:db:f3:12:4c:8e:3f:57:
64:80:09:4b:0c:d5:e0:0e:8f:d1:b0:dc:8d:73:3d:05:cd:8f:
43:ab:92:43:24:1d:cb:a2:51:ce:3e:96:40:85:40:86:5c:16:
e6:75:3d:08:f3:54:41:9d:89:34:2a:6a:17:ad:b2:c9:9a:ab:
6f:c8:7d:71:9b:28:8b:73:40:c2:57:63:21:e2:5f:61:c2:ac:
c9:49:24:69:1f:4c:c3:eb:e7:1d:93:ca:92:97:eb:19:30:d0:
3a:b2:32:19:b8:a3:13:91:e8:43:78:27:a8:a5:35:0b:ac:0c:
4c:78:36:45:03:4f:d5:14:5b:c3:18:0c:bc:f4:e7:40:61:24:
4e:ae:cb:1a:4a:f5:aa:82:4a:78:50:d5:2e:f7:51:f3:5d:85:
fb:55:31:71:9d:aa:d5:ce:bb:7d:b0:19:3f:b6:50:f1:ac:56:
c4:9f:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:34 2025 by rpki-client