Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: D5cX9oQHE9JDRco+HW2tylx4Kkt/mD5bi44VxJI6wbw=
Subject key identifier: 38:F3:E1:20:C2:E7:58:E2:8F:BF:DC:EB:B7:CB:90:BC:8C:CE:81:31
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 019A71B832633F305E20D570BDCE2E4E2AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: 0jDOG6azAhfxjBx9k3QOIOMjZgNTLFqzPknOebQD07M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:32:63:3f:30:5e:20:d5:70:bd:ce:2e:4e:2a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=38f3e120c2e758e28fbfdcebb7cb90bc8cce8131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:83:cc:a9:93:64:6c:51:9e:9a:0d:e3:53:
1f:63:13:7e:61:0d:16:ca:d6:23:41:79:c7:84:f3:
84:ab:b6:03:a0:17:ac:fb:c0:1d:9f:85:22:5d:34:
9b:0c:e2:1a:ab:3c:93:3b:6f:f8:bf:48:5c:c5:10:
50:f8:f0:5d:96:f9:5d:a3:c7:39:b8:47:14:23:98:
48:16:57:62:38:e5:82:d5:a3:fc:a7:88:08:37:5b:
60:02:64:f5:f0:b2:46:5e:fc:6c:5e:31:0a:d1:89:
88:ec:be:58:66:16:9d:8f:e6:db:3d:c5:db:4f:69:
78:72:d7:49:3e:50:c7:fa:0b:ed:a0:0b:dc:60:d7:
ed:98:49:96:1a:ce:70:8d:10:08:1e:b0:f3:97:24:
b1:8e:bd:b1:c0:36:20:81:e4:ba:5d:c5:c2:a1:fb:
81:4f:41:5f:16:7f:9e:1c:64:93:ad:c6:c2:fe:6f:
94:fe:b2:65:82:b2:c7:92:1a:0f:9e:bb:15:7a:c7:
6b:eb:6b:b9:cc:d6:69:31:f5:9d:29:f6:63:1a:2d:
fa:1d:c0:16:b9:43:69:15:83:57:c1:98:39:1e:54:
f8:de:bf:e7:14:b6:e0:1c:58:2a:3c:03:b2:cb:ac:
a3:f4:83:bf:70:65:b7:d5:88:81:f2:fe:21:0c:88:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:E1:20:C2:E7:58:E2:8F:BF:DC:EB:B7:CB:90:BC:8C:CE:81:31
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:56:29:b1:84:12:7e:39:ba:9e:f1:b2:5d:b7:38:66:2c:64:
83:58:37:aa:6c:01:84:ee:07:41:c3:5a:0d:c1:40:e8:71:e7:
4b:80:ca:4e:43:a0:cc:3a:4b:98:41:56:89:e2:04:68:c6:7d:
24:c3:5e:ec:6d:8d:cc:36:37:d8:18:58:ca:f8:48:6e:ee:9d:
37:82:ee:0f:bb:ea:d4:ef:25:7d:48:f3:bc:3d:1d:bd:f7:74:
56:91:be:7c:07:27:32:95:af:d1:4d:ba:6d:5b:35:16:8a:95:
1f:21:5f:1a:b2:95:b7:24:c2:8f:b2:79:56:c2:14:e6:9f:1e:
ae:fd:0e:a4:98:45:e4:ec:0e:f9:a9:53:8f:6d:d8:a5:25:29:
67:34:cb:da:f1:cf:1f:0e:6a:78:7b:c5:74:c6:3d:ab:0e:14:
ab:dd:e0:4e:01:32:44:11:7b:ab:a3:08:36:61:7b:41:0e:28:
f7:4c:b4:e4:8d:6e:d1:94:fc:27:8c:9f:e0:08:94:f1:02:95:
e2:1b:4d:ca:a8:77:c2:b5:47:4f:c6:33:62:f6:b1:12:e8:3b:
05:82:74:c1:de:9f:70:c7:45:71:0f:0d:d7:4f:6a:7d:c5:9d:
a9:c3:cf:8d:3a:c1:12:a3:14:1d:cb:02:8a:ba:e1:77:9c:42:
56:b6:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:13 2025 by rpki-client