Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: QkOGByvRIr0+5lm0gMm6EmzECEMzKxSzQu2+ALFb48s=
Subject key identifier: BE:F3:60:F9:EA:47:9D:A6:BA:3B:33:CF:F5:70:61:1F:74:F3:1F:D5
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 0199C2A0034C8461008227DE8A662D4B7419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 10BE
Signing time: Wed 08 Oct 2025 07:01:30 +0000
Manifest this update: Wed 08 Oct 2025 07:01:30 +0000
Manifest next update: Thu 09 Oct 2025 07:01:30 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: MzfbSq3/A6glE9ILJWO5ThksB7HJVPkXAiKdUzrJDfY=)
2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=)
3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:a0:03:4c:84:61:00:82:27:de:8a:66:2d:4b:74:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Oct 8 07:01:30 2025 GMT
Not After : Oct 9 07:01:30 2025 GMT
Subject: CN=bef360f9ea479da6ba3b33cff570611f74f31fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:b4:9e:0d:02:89:dc:22:b0:0d:b6:42:bf:
24:b4:66:1d:07:b8:c1:dd:1c:d3:58:d5:4c:cc:e7:
f4:7f:03:57:cb:61:10:dd:fe:08:e7:8b:db:39:91:
0d:62:80:67:1a:5a:dc:dd:af:06:4a:6d:b5:7e:74:
b3:ec:99:3b:73:d7:e4:64:69:b0:ac:c7:ca:c5:65:
5b:56:fe:28:3d:3b:5f:7e:0e:32:2c:bb:15:12:80:
97:1c:c8:4e:ca:98:a1:4f:5e:7c:74:d7:94:90:99:
f2:58:a8:14:b1:6f:8f:d3:b8:08:91:ff:ff:49:51:
14:fb:03:c1:4b:63:a2:33:44:52:44:65:41:7d:74:
f2:71:e3:40:6d:cc:89:ad:5b:ab:a4:4e:c4:ca:7c:
e9:31:d1:2d:a9:23:05:e2:c3:c9:aa:3a:50:7f:cd:
2f:79:bb:32:b1:70:b6:ee:80:cf:47:bd:26:76:eb:
86:d3:ca:77:0d:dc:d3:2b:7d:39:a2:58:2a:7f:6c:
70:85:56:7a:69:6f:fb:24:8a:55:f7:4d:a4:db:cc:
96:b6:4d:1c:36:b2:ce:38:44:e9:56:cc:86:a3:a2:
79:b2:a0:52:87:d8:ba:61:a6:21:2f:5c:47:43:ae:
1d:de:7d:b7:09:06:a4:59:86:1c:db:50:9c:b7:76:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F3:60:F9:EA:47:9D:A6:BA:3B:33:CF:F5:70:61:1F:74:F3:1F:D5
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a5:c3:1a:90:8e:3a:00:59:be:db:de:28:8f:24:98:8c:a2:
40:d1:d6:47:d9:32:87:56:f7:4e:54:83:0a:1a:32:01:cd:10:
28:33:33:62:37:fb:17:48:b0:5b:ae:ac:c9:13:c6:34:85:a9:
0b:20:e5:c3:ac:26:3a:6f:eb:48:44:d4:3d:6a:84:66:d7:87:
30:5a:d8:c0:a6:c8:46:d1:13:56:e2:5a:25:b1:88:b3:19:6d:
9b:fc:a8:c9:c5:fb:b1:ca:14:85:37:cc:ba:59:d2:95:14:57:
2f:bd:7a:79:f2:70:33:38:80:e8:c5:b6:61:3d:da:0b:3e:46:
9e:df:b0:ef:ed:13:b5:1a:89:8c:60:0a:37:e1:71:9d:d3:36:
e0:6a:62:13:1a:57:2d:48:9c:3c:09:a4:a9:3c:99:82:c6:c7:
1b:1e:ca:b1:a3:2d:da:7e:ed:0f:39:3c:a1:36:d4:aa:54:6f:
9a:3b:84:ed:76:12:88:0e:78:c9:37:0a:42:f0:f7:ed:55:ac:
d7:68:1b:6e:e5:25:3e:b5:0c:6b:a5:8b:46:46:6a:bb:18:29:
46:1e:2d:71:fb:da:09:20:ee:b2:19:8a:f5:0c:9e:29:43:00:
c9:1c:98:08:c8:de:1c:a7:f0:92:be:a3:ec:10:cc:66:5a:3e:
cb:b4:4f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:27 2025 by rpki-client