Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: UJ1kx58qYF92kL3Q/XuTLzpj+hvERpNGAS9fgrQuxLU=
Subject key identifier: CD:F6:58:A5:08:ED:AA:63:2E:B0:EA:93:BC:9B:0A:3E:77:43:D8:67
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 019A714A0265E62989F1B4860950A2383E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: HpEVDcrq8WIWrrG/CYD0XRI7QRReFOCRju92RC/Ub7s=)
2: sQyECaaIBBJuTWR_GAKRUGY2zLs.roa (hash: a7MHGEIK7Syni3DpYI0UPL4y49isayDX/P6hkOd4qq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:02:65:e6:29:89:f1:b4:86:09:50:a2:38:3e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=cdf658a508edaa632eb0ea93bc9b0a3e7743d867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:e1:1d:14:b7:48:98:56:1e:af:f3:58:e6:
e6:a2:7f:d7:4b:1b:0c:da:ce:17:c0:18:53:3f:e0:
94:5d:91:53:f3:73:cb:d4:4c:7c:95:bb:8e:5a:db:
b6:fc:4d:36:13:59:4b:7c:cb:b5:e4:a8:13:6f:50:
bb:ed:ac:f5:d1:69:a5:24:72:66:d4:76:57:36:9c:
6a:69:85:b3:1f:b8:5e:49:99:00:cf:1c:e0:b2:7f:
86:cf:d3:eb:63:cf:82:13:41:6e:4b:40:06:05:d2:
2f:b8:2a:52:8c:31:30:82:82:79:fe:4e:aa:ac:49:
37:ee:ec:4c:d0:03:fd:c8:97:94:dd:5c:ff:31:6c:
1d:5f:b9:42:83:9e:a9:d3:f3:ab:84:cf:e6:16:0c:
7a:8e:ca:b3:ca:cd:39:f6:b5:ef:5c:ed:78:c7:e5:
b7:c7:91:84:72:f5:51:9c:fe:0c:3d:de:54:90:a8:
64:88:51:e3:f1:c9:9c:14:41:26:78:ae:00:a4:90:
8d:31:da:ee:bc:fe:cc:12:0a:a7:92:80:67:bb:57:
97:4e:95:01:bc:6a:bf:f6:d0:05:65:5c:a5:72:9a:
20:0a:bb:c7:50:d3:20:49:b3:b9:e5:81:c5:07:26:
66:82:5b:32:50:76:da:a2:70:ae:08:f3:79:9d:12:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:58:A5:08:ED:AA:63:2E:B0:EA:93:BC:9B:0A:3E:77:43:D8:67
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e6:15:fc:39:19:a1:8e:1d:34:f1:29:15:b0:7a:cc:dc:99:
73:f9:35:3e:7a:8f:01:30:ec:34:2d:56:18:48:22:57:49:8d:
f5:c5:58:0a:ef:f6:e6:ae:75:dc:47:4f:2d:4b:8d:0e:33:5d:
b8:4b:96:99:bb:5f:b7:6f:cc:b5:a2:53:1c:13:68:bf:f9:7c:
b1:c5:23:4b:ad:6a:90:56:10:91:ba:8b:9d:4c:48:1f:54:45:
f6:2a:5a:d1:51:02:31:d7:44:8c:99:99:2a:b8:10:e7:64:2f:
85:1e:23:d6:48:de:a4:f8:d1:b2:b3:e1:57:ed:ea:bf:18:36:
be:7d:35:b7:d0:db:1f:6e:a9:b1:c5:86:7a:09:66:20:de:9f:
2b:4d:a7:f0:4f:f1:71:20:e4:56:24:01:24:c9:88:48:0e:cb:
cd:c4:c6:a0:e9:16:b1:58:1c:5c:0d:f1:4a:32:89:63:9a:c4:
5a:74:f8:27:bf:ff:ee:65:02:45:78:74:bc:f6:69:3a:dd:a4:
f6:dc:cc:72:b5:a4:fc:44:3d:af:cd:8a:0b:7d:61:cf:01:34:
80:3f:40:60:c2:c5:f3:a4:44:8b:5c:10:98:1d:76:11:b2:8c:
0c:f4:eb:b9:03:df:9e:0a:3c:dc:12:a2:d6:6a:b7:1f:e7:67:
63:c4:35:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:22 2025 by rpki-client