Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: XRsG0TKymQEeb/Uyb/DxqaMPKqnvzmV4Ho5bAljG1ts=
Subject key identifier: 7A:D7:5D:28:96:D9:12:23:09:07:A7:0E:FE:4E:1F:22:4A:80:0A:A1
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 019A72CA5C11EC24BB70714F27DAC88899DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: VKk+mOdeG50wNPdUVam1mB7tO9zLUL/dre3T4oGTe+0=)
2: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (hash: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5c:11:ec:24:bb:70:71:4f:27:da:c8:88:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=7ad75d2896d912230907a70efe4e1f224a800aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:96:6a:ce:29:11:98:28:74:0b:ce:11:97:
53:1a:84:54:da:47:f8:14:6e:9b:f8:8e:7a:79:c6:
4c:21:f7:80:59:f2:5b:8c:b8:64:58:21:99:12:8e:
31:a8:15:76:be:e2:a3:17:9f:22:68:d1:e1:aa:4a:
a4:96:9a:9b:6d:51:5f:78:da:fb:d4:7e:2a:f4:f9:
52:59:64:b7:33:33:73:f2:84:0d:1f:ce:24:c0:94:
d9:c8:d0:4f:18:a9:01:cf:0d:d6:e2:e5:bd:95:16:
31:de:81:b0:08:ce:0b:db:ba:20:a8:fa:19:22:f3:
c8:b4:33:e4:d8:5c:6d:42:85:90:73:79:e1:91:43:
a8:ae:3d:98:00:a9:09:d2:17:ad:e8:28:fb:cd:b9:
e1:1c:b8:3a:6b:fc:df:3f:4d:d9:32:60:ad:f2:5c:
a1:0d:90:a4:cd:a3:63:4d:f3:68:ff:8a:5e:07:a5:
6b:04:03:5e:3b:c2:a3:53:31:33:1c:1f:a3:cc:ae:
ab:92:bb:2b:36:fd:ff:28:9b:45:7f:10:7e:6c:bb:
e0:92:48:91:38:34:2c:66:bf:b6:de:e7:58:db:95:
18:e1:07:d5:ca:03:b2:bf:e5:b5:d6:f9:28:28:c9:
87:54:1c:6b:fd:5d:de:34:46:39:c6:46:a7:37:b1:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:5D:28:96:D9:12:23:09:07:A7:0E:FE:4E:1F:22:4A:80:0A:A1
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c2:80:61:3f:0c:4c:9d:b2:69:eb:49:db:cd:13:36:03:6d:
f9:d9:95:71:ed:8a:32:b0:17:30:af:91:e1:e5:66:f9:fa:3e:
8f:b3:b0:c4:63:07:92:89:39:27:9e:b3:03:83:3e:b7:9c:54:
31:d0:9c:a1:31:9d:d8:df:f9:70:91:cb:cf:96:05:74:98:ed:
7c:fc:09:8c:2b:d9:62:ab:5b:13:b2:d0:2c:6c:df:99:43:86:
c0:4a:f0:73:6b:2b:b4:ea:18:57:95:07:b8:ce:fd:64:27:57:
98:4a:ba:ff:4e:3b:3e:1c:00:42:6d:af:08:c0:4a:8a:f0:4e:
d3:9f:b0:7f:64:16:6e:80:84:0c:35:92:9a:fb:01:d6:91:0e:
27:c2:bb:69:d8:31:73:bc:17:c7:ce:15:3f:c9:e0:4a:c1:d9:
bc:c5:48:1a:db:1d:7b:27:04:78:32:07:48:32:d8:25:d3:2a:
b9:82:12:11:ca:0e:48:13:58:f8:30:69:8a:16:4d:d2:62:e8:
a2:8e:a0:05:f5:27:57:81:91:99:41:81:82:dc:8e:54:f1:53:
29:84:de:b4:97:64:c4:e0:61:10:2a:b8:ef:c2:9c:1d:d0:ae:
49:d2:8d:a3:39:2b:ad:44:7c:2f:b7:24:d9:d6:b8:c6:4a:41:
5f:0b:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:15 2025 by rpki-client