Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: jyXdl6udruSW7rTUQ0ghYnV4ZO5AzsSIUSIuwuFVjK8=
Subject key identifier: 8C:46:CB:C5:42:61:AE:AC:8C:68:D8:C9:47:3F:EC:C5:5C:2C:6E:38
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 019A706DF48DDDB2EDFF430B8F42C27EF832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 01:00:45 +0000
Manifest this update: Tue 11 Nov 2025 01:00:45 +0000
Manifest next update: Wed 12 Nov 2025 01:00:45 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: 7f+KFwBd0RA7u0/OyryYfdYZlzo72TS2r/flTatSCrE=)
2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f4:8d:dd:b2:ed:ff:43:0b:8f:42:c2:7e:f8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Nov 11 01:00:45 2025 GMT
Not After : Nov 12 01:00:45 2025 GMT
Subject: CN=8c46cbc54261aeac8c68d8c9473fecc55c2c6e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:62:d9:61:52:2a:ff:0b:ee:09:53:93:18:
5f:f1:2e:a6:d9:6d:d6:71:4d:38:e8:3c:65:4d:5d:
8f:28:6e:b3:81:2f:6a:ad:ed:c5:bd:36:43:d2:19:
e8:c4:bb:89:b7:9c:8c:7d:4f:d2:f4:f2:78:36:ed:
a3:d9:01:49:19:8f:57:5d:35:7a:99:b2:40:91:41:
79:cf:cd:40:06:24:87:69:58:92:ad:dc:05:9a:02:
3e:27:22:37:39:dc:68:90:d5:a5:c4:46:fb:51:55:
b2:c1:a7:de:26:fe:22:ca:c1:dd:8c:ea:8d:6f:c9:
01:a1:07:10:44:9f:17:fe:72:60:f8:ae:bc:5a:89:
ec:63:88:a8:09:4f:04:ba:23:2c:b9:2a:23:2f:88:
92:1d:d3:b8:fb:f9:aa:c9:c1:cf:71:29:f5:ce:fc:
5b:1b:d2:8a:a6:f4:32:fb:e6:7d:e2:44:c9:7b:e8:
05:ae:52:f1:2e:89:dd:36:48:81:78:c9:2f:c6:5d:
08:4b:35:71:c3:ec:02:4c:54:79:59:f7:f2:2b:0d:
b0:00:e4:a5:07:f0:cf:7b:4b:34:f5:86:61:90:ef:
0a:29:d4:99:ae:e3:d9:68:43:3e:93:aa:6f:c6:91:
80:9d:91:52:52:32:f3:31:9c:e2:db:13:29:75:70:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:46:CB:C5:42:61:AE:AC:8C:68:D8:C9:47:3F:EC:C5:5C:2C:6E:38
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a5:8b:fd:ab:90:0f:b3:f9:03:cf:1a:d3:b2:8d:d7:41:f4:
ba:5e:20:af:6d:ad:92:f8:b8:da:d5:eb:2f:e1:66:33:4a:1d:
8f:05:20:88:ac:ba:3e:ce:6c:2c:1a:c9:5a:4a:aa:10:8b:13:
4f:51:9e:4f:67:0c:f2:f3:3a:31:dc:cc:34:f4:7c:a5:d5:c4:
5e:cf:92:7f:c7:4c:5c:24:d0:fa:5f:67:10:9b:4d:25:4c:3c:
a7:9e:ae:1b:9a:7a:ce:2b:59:94:5b:17:f6:9f:6d:f6:89:b2:
92:20:b6:f1:82:ce:98:a1:31:c8:0a:80:f8:4a:8d:f5:97:44:
2a:a7:0d:0c:99:5b:4e:2b:32:7e:15:04:f4:52:82:6d:70:58:
4c:36:f3:a2:e2:1c:20:04:ad:14:0c:0d:95:b5:f6:b7:13:52:
8c:85:be:a1:cd:9a:87:e3:c1:2d:7f:22:e2:08:46:d2:c6:f1:
26:41:9c:0f:b2:fd:bc:3f:95:3e:f5:4b:38:d0:07:1a:10:39:
89:2b:75:25:a2:11:1d:67:0e:3f:ee:6c:bf:3f:67:6d:23:23:
3e:a1:b6:7f:15:ae:4c:31:51:42:e4:e0:9e:41:bc:c8:8e:cb:
aa:33:93:53:a2:11:c8:73:35:62:55:a5:dc:31:e5:7b:1d:d3:
46:f3:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:20 2025 by rpki-client