Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: 8CqOGYI6d5hK4l7+my6Y30vdGWpX+Fm1MCyD6e6R258=
Subject key identifier: FC:1C:C7:62:70:72:C6:A0:C5:1C:1F:54:A7:3D:5B:CE:37:82:65:13
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 019A7112F33C7374DB9B6F03ABFD794A81EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: 9Wih3bBXgCCPPYiJfQiKz5GEoxtKyud0Dj20n0UTsfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f3:3c:73:74:db:9b:6f:03:ab:fd:79:4a:81:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=fc1cc7627072c6a0c51c1f54a73d5bce37826513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:87:1f:42:6d:e2:49:a2:bc:cd:e6:b1:90:
9f:c6:49:69:bc:90:d2:f1:71:12:f0:ee:7b:ed:ed:
cf:c6:f7:8c:2d:11:ca:51:5c:a8:f3:09:1c:4c:a9:
60:5d:61:56:c8:d1:82:ad:9e:61:0d:a8:d6:bb:38:
f5:a8:7c:20:cd:db:e5:7c:70:d7:4b:7d:3d:0c:a8:
30:d2:93:2e:3e:db:5a:f8:12:68:d2:20:5d:f4:c9:
a1:5f:b9:3c:8c:a7:b3:dc:09:31:3c:38:55:fa:cf:
26:85:f0:14:d9:50:49:73:53:6f:c9:14:fd:67:63:
8a:23:f2:d4:62:12:d8:06:4c:85:e5:0f:a2:a0:f4:
b3:d5:3c:72:61:b4:9d:34:98:37:49:63:e7:e7:cd:
19:8a:21:63:8f:da:1a:68:39:86:37:e2:38:d1:af:
54:b9:71:25:a4:8e:a5:68:ed:b8:37:0c:cf:c5:8e:
4c:ce:4f:4b:ca:28:23:37:1d:c7:e5:f9:03:3d:78:
61:ec:a8:3e:82:7f:40:56:91:85:5d:68:1f:20:18:
be:75:fc:72:0d:65:17:45:ff:65:ab:66:8b:03:2a:
04:19:3b:bf:f4:14:02:ac:ba:89:87:45:cc:9f:f6:
c6:ca:d1:7c:75:5d:6f:68:39:51:0b:5c:87:9a:a5:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:C7:62:70:72:C6:A0:C5:1C:1F:54:A7:3D:5B:CE:37:82:65:13
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:62:e0:78:91:fc:2b:3d:b5:7e:f1:26:05:69:02:a0:0c:95:
bd:be:bf:61:f8:08:51:77:dd:a3:0d:77:40:fb:53:bb:80:90:
17:3f:8d:41:95:97:45:5f:37:9c:ee:27:50:0e:dc:ec:54:ba:
91:01:d9:51:9e:f7:b4:a9:6a:f1:75:77:e5:03:ba:27:9b:5d:
8f:21:bf:e2:b0:97:ce:14:8c:cb:7e:68:60:6d:ff:07:79:9a:
a4:6b:33:55:e0:3b:9c:1e:33:db:3c:79:60:f6:47:bd:5e:0d:
a8:90:07:8d:b3:f5:a8:45:78:4e:b9:cd:1c:f5:78:65:4d:a0:
6d:51:a4:93:a4:bd:98:8b:15:9c:ca:81:54:7b:8c:8c:0d:ad:
f8:a5:bc:92:e3:59:e9:68:f6:46:58:48:dd:6b:29:89:07:bf:
6d:94:1b:4c:44:69:af:fd:45:13:73:7c:bf:a6:31:59:43:ff:
f2:52:73:4d:89:25:6d:32:d3:00:7e:67:d1:e2:4a:52:19:38:
d0:cb:a5:b2:86:f3:53:30:dc:2d:38:65:8e:33:99:8e:f0:7e:
9a:d3:77:d1:0f:d5:f9:7c:ca:8c:bf:62:d3:75:f2:7c:db:c4:
9c:48:12:34:a5:cc:ba:0e:22:be:aa:29:03:2c:21:4c:e4:96:
03:c1:9b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:01 2025 by rpki-client