Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json)
Hash identifier: KD8bGSvV1Y8a/Li+xhQs0Tzk67uGpa03dMzrRPWztIM=
Subject key identifier: AF:D3:87:F2:03:8D:E3:D3:AC:BE:A4:69:3A:F0:A2:F4:6C:12:6A:45
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 019A7301752C2EF025872D266993D9A41AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
Manifest number: 0113
Signing time: Tue 11 Nov 2025 13:01:06 +0000
Manifest this update: Tue 11 Nov 2025 13:01:06 +0000
Manifest next update: Wed 12 Nov 2025 13:01:06 +0000
Files and hashes: 1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: G2Agq8JDOZIKzu+vMEE8UqKMViOcgPZNwM+aP2scG6c=)
2: 1j10fGgoumz7WTH368PI_luQFZo.roa (hash: I8kLuezU2XygaqC04v/laZ7klhdBf+W1z6e/cSddoJA=)
3: warGeR8KF_Qduq42XjiOHRQiVOo.roa (hash: rRr5EdH0nhSwX6FyG7IpMNhRuhDpGs/F3/vvkFXiG7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:75:2c:2e:f0:25:87:2d:26:69:93:d9:a4:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: Nov 11 13:01:06 2025 GMT
Not After : Nov 12 13:01:06 2025 GMT
Subject: CN=afd387f2038de3d3acbea4693af0a2f46c126a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:c1:d8:a0:a7:03:46:cf:b4:52:39:16:ee:
84:49:55:6b:ec:89:cc:83:a4:e4:b0:bb:91:42:55:
9d:24:cf:f4:76:6c:ae:d9:39:d9:5f:36:90:09:e8:
3b:a8:e7:77:33:dc:85:99:11:2c:a4:74:7b:17:8e:
dd:46:7d:7f:2a:73:53:5e:a3:0f:6a:97:7d:54:54:
0c:72:9a:3c:b1:e9:7d:54:f7:28:88:8c:a8:fd:42:
c2:c8:ac:94:4c:9c:a1:7e:8f:57:23:26:5e:ce:99:
55:35:7e:7f:4f:df:17:6e:52:a1:e6:eb:27:3c:29:
0a:ff:2b:47:f3:df:f9:9f:87:67:bc:b5:c0:db:0d:
0f:21:b2:e3:13:9a:e1:30:d2:3c:e4:2e:11:2d:de:
c1:66:a4:b3:54:b7:a1:b1:a5:74:72:c6:2c:9c:d4:
93:4a:ee:5b:d3:88:4c:fb:1f:58:29:49:35:9a:0c:
a2:08:66:0c:43:2a:52:0b:09:f7:8e:3c:aa:3b:42:
50:05:61:5b:b2:5b:b4:e8:02:c5:ba:ca:56:9f:86:
e2:11:b8:0a:7a:61:ff:8b:a3:5c:ea:30:72:e1:44:
cf:bd:31:41:9e:fa:24:99:90:b8:bd:11:8d:9e:42:
da:75:61:70:7b:f5:d1:7a:fe:f7:89:35:f5:58:8d:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:87:F2:03:8D:E3:D3:AC:BE:A4:69:3A:F0:A2:F4:6C:12:6A:45
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c7:41:6b:c1:45:81:1d:84:d0:b7:95:e2:81:d6:73:db:c0:
04:13:aa:df:91:6a:bf:17:3d:d0:91:df:d4:64:d6:54:79:b3:
97:d4:7d:5c:10:66:31:4d:9e:c5:38:7b:56:64:cb:53:de:f3:
f6:c2:52:dd:a9:31:53:84:6f:85:01:bc:7f:11:b0:2d:36:9d:
21:c1:91:0f:60:fb:e6:42:b0:81:ab:52:c5:09:2e:71:9a:52:
91:e4:9e:d7:4d:6b:44:d5:35:fa:4c:27:88:42:bb:ae:00:e6:
83:cf:11:1c:04:d5:ab:ca:16:67:23:f2:b6:d7:e8:03:fd:32:
f3:7b:6f:5a:f6:49:ce:ed:f5:53:4c:0a:e2:d0:bb:b6:a4:fb:
d0:17:f9:70:87:99:3c:18:2a:aa:a8:67:47:b4:6c:5b:06:c1:
d8:0f:c4:af:7f:89:32:ef:f6:8e:9d:a3:91:31:56:e3:ae:8f:
0b:94:22:76:fb:47:2a:49:b5:46:de:60:c0:d4:6c:04:09:1d:
97:87:12:9f:91:bf:fc:bc:07:b4:00:40:7f:12:86:41:70:94:
ff:16:fc:71:90:a7:4d:3b:9f:8e:4e:39:e5:e1:e4:55:e3:63:
bd:f3:8b:e1:50:ba:87:1d:ec:29:4a:06:d8:b1:7a:8f:d3:07:
b3:7a:60:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:56 2025 by rpki-client