Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier: +r8zKVQeHn4HWwm5cozXmiv4zO2eokhdYyipf7XDNBs=
Subject key identifier: 23:35:7A:61:35:C1:46:23:EE:8D:C8:CE:AD:0C:CA:62:A1:8F:08:47
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 0199FC8FC0B141CCB12ACE4621B8D26CE2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number: 1606
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: ZwTBnzv4PO202sH/Oax8bOfmJbuX50gWSMAzOcdV2p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c0:b1:41:cc:b1:2a:ce:46:21:b8:d2:6c:e2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=23357a6135c14623ee8dc8cead0cca62a18f0847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:03:65:e2:bb:24:65:f8:f1:93:64:34:bf:
5a:86:d4:5c:f1:5c:1d:21:d1:0c:fe:e8:fb:78:2e:
b9:00:43:4b:80:94:a2:d9:54:38:70:7b:9b:c2:98:
50:ce:7d:9b:ea:a3:ad:70:63:0a:22:00:22:06:2c:
d9:0e:9b:65:02:7d:7a:02:5f:2b:84:57:b1:ef:15:
1a:c8:56:0f:27:8c:7c:3a:7b:ff:84:94:79:4e:31:
dd:30:08:2f:f0:98:e8:66:58:90:7d:2a:9c:56:0b:
67:30:0c:35:7e:9a:3c:46:06:20:6c:55:8a:b0:80:
37:20:fa:dc:68:1c:cc:dc:3e:ae:65:00:b4:26:94:
e4:43:87:39:2c:15:fc:8a:3b:40:09:0c:a7:a3:55:
18:32:9f:1b:28:63:03:f9:d7:6e:d6:b4:40:dd:6a:
37:f3:d8:14:40:fc:81:79:04:aa:ec:90:ea:72:e3:
6a:29:5b:81:66:5a:da:e1:56:ff:c0:6e:8a:85:fb:
51:81:39:27:9d:2a:ec:39:b3:a1:f3:dd:1a:83:ad:
58:8f:e4:59:35:87:e4:24:d7:94:ba:9c:f5:9b:d2:
70:fa:a7:a6:70:46:33:72:b1:0a:ac:f8:46:fe:89:
83:a0:61:74:19:cc:f9:f0:d4:ea:8f:c4:32:c2:1f:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:35:7A:61:35:C1:46:23:EE:8D:C8:CE:AD:0C:CA:62:A1:8F:08:47
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f3:12:ae:67:26:99:5b:67:3d:ca:d2:57:b2:d7:18:1a:b9:
bd:21:0d:9c:d9:e2:16:cf:9c:8f:5a:8f:9e:6c:94:4c:8f:a0:
28:74:25:8d:47:19:8c:19:4f:85:7b:fb:74:66:cd:cf:91:fa:
04:c4:af:81:39:5e:8b:07:a5:aa:6a:77:73:7c:82:f4:65:f7:
74:ea:a3:ea:ff:33:f2:34:98:b6:76:75:1f:29:44:b0:79:6a:
71:08:0f:3d:e6:38:b0:57:8f:eb:13:ee:d0:83:b1:1f:64:d4:
4b:e6:c8:1e:3b:43:0a:33:c5:37:e7:26:ea:47:1d:ec:37:aa:
83:c9:dc:8e:95:3c:b7:82:23:b9:87:4e:e3:94:38:50:da:28:
46:20:db:d5:99:29:e9:88:d0:58:02:3e:a3:2f:17:93:ee:be:
e9:5b:1a:53:ee:34:9f:b2:cc:a5:31:90:bf:cf:f4:ea:7e:a2:
4b:79:d5:52:54:85:3f:2a:0a:db:24:f9:c0:03:41:0e:eb:93:
21:f5:3c:ca:4b:6b:c6:b8:bf:a6:cf:80:62:eb:cd:d2:1f:ae:
a3:e3:f2:ae:a5:61:97:e5:96:3a:f2:3f:6d:70:6b:0b:ca:fa:
8b:ec:e4:5a:ff:ed:d6:b5:f5:7a:a3:43:41:8c:0f:38:6a:85:
d7:71:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:12 2025 by rpki-client