Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: 45/4n/VqIuNXWAc+j6g5ggujVho2SzHWfzCShGBmTRg=
Subject key identifier: 1B:23:A7:77:79:DE:CB:66:A3:4B:F2:E1:4E:1E:64:CC:D2:E6:87:2D
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 019A71130F3B9C7002921DB64B3197303836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: rKDZRC+axhvt2lIN9hy2VzB6mFXwAva35BTqGjfpsxE=)
2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0f:3b:9c:70:02:92:1d:b6:4b:31:97:30:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=1b23a77779decb66a34bf2e14e1e64ccd2e6872d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:f5:e2:02:b5:c1:ad:a4:aa:66:9f:01:bc:
7f:ea:8e:6c:9b:3b:9c:5a:68:ae:a3:fa:49:3b:6e:
d4:11:0a:d4:06:1b:c6:90:e6:5f:82:9c:28:73:12:
44:e6:fa:53:09:21:05:a2:4e:70:26:4a:23:0e:f0:
79:5e:8d:94:cd:a4:c2:d4:c8:14:1f:e0:56:d6:89:
2f:a5:2a:ef:15:fd:0c:93:12:1e:4e:23:43:ab:40:
4a:50:72:bf:2a:3a:66:61:17:21:0a:a3:6b:6e:0f:
ee:b9:f3:c0:d0:ac:71:68:68:dc:57:9e:40:90:b5:
54:ec:8e:26:29:02:bf:c8:71:6b:d5:e3:8b:6c:4a:
86:0f:50:9e:10:df:65:6a:db:f2:fb:fe:7e:5c:ff:
d9:39:f9:c3:df:27:9c:6b:49:6d:66:da:de:29:96:
ca:c4:55:2f:13:b2:11:90:a9:05:73:c6:77:63:7e:
b1:f6:92:35:5d:f6:4e:26:7e:54:a9:5a:a3:00:58:
77:ee:5d:b7:7b:9e:1d:21:35:2f:18:60:90:14:2a:
6b:2f:ab:9f:b9:5f:5b:6c:e4:16:44:98:71:1f:c2:
12:88:95:db:c3:dd:93:18:b8:18:fd:a0:0d:f7:21:
93:84:34:85:3a:83:10:a7:bb:81:82:3e:ad:5f:fb:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:23:A7:77:79:DE:CB:66:A3:4B:F2:E1:4E:1E:64:CC:D2:E6:87:2D
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:29:ce:79:5e:a2:d8:a0:f0:28:61:e5:10:fe:ee:c4:41:c6:
a5:9f:11:c2:5d:c0:bb:4b:25:71:1d:68:ab:bc:af:ad:4b:fb:
c2:98:11:b0:c2:fa:bd:48:e5:7d:66:b2:49:a9:a9:84:00:ba:
b0:1b:2a:41:0f:02:aa:52:4d:ea:99:8b:27:7d:51:c4:0b:aa:
21:e6:6d:de:28:19:0b:b1:5f:f2:70:be:90:13:d1:6e:65:2b:
09:fa:1d:96:c7:08:61:ab:05:f4:c5:ef:5a:29:e7:78:8d:bf:
a4:42:cc:2b:90:e0:12:87:96:cf:b5:aa:36:87:21:ee:31:0c:
dc:2d:b4:e0:1d:de:41:50:06:12:88:a6:be:d7:4b:93:64:8e:
38:80:b0:d5:b7:3c:ce:e6:94:92:28:49:5b:3d:c7:a1:cc:66:
13:a1:3b:15:08:37:6f:7c:f8:60:f1:3b:b6:ba:12:4c:77:11:
86:29:d4:f2:e8:f5:00:13:15:47:7d:d4:1b:40:94:d5:74:74:
88:0d:ef:20:e3:b5:14:aa:d3:6c:88:0e:cd:5c:5c:d1:cb:eb:
b6:d0:6b:7f:ea:02:02:81:c5:cb:fc:f2:c2:b4:1c:5c:ef:85:
95:92:45:f1:c1:67:fe:3d:46:79:6f:2a:b2:39:a1:f4:c4:cc:
ff:a5:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:13 2025 by rpki-client