Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: 3DQV4687BdX3mth6QNeiwwWbQE8syl9pEVZXlKWblb4=
Subject key identifier: D9:3A:89:21:52:8C:25:C3:C6:78:8B:23:52:2E:F8:0D:F0:30:63:55
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019A7112D7D6BEB2127C23E27163B1CA2BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: bZqw9rkyCCFc6sdy9JPyh57MpQO4sszSQ0JRTHmlST0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d7:d6:be:b2:12:7c:23:e2:71:63:b1:ca:2b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=d93a8921528c25c3c6788b23522ef80df0306355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:4d:44:b5:9b:2e:6a:c6:29:ab:7b:11:0c:
a8:08:fe:12:d4:ad:25:a6:bb:1a:73:f8:42:ba:77:
fd:34:58:b5:2a:e6:42:f8:dd:e6:cb:c2:7b:87:c7:
49:61:f4:57:9e:89:df:f0:57:06:59:b0:e6:73:8f:
22:a9:59:80:17:8b:28:fe:d2:ca:6e:ef:d5:df:e3:
c4:ef:20:e0:a3:a1:fb:66:df:66:4a:34:43:df:57:
21:f5:a8:37:c3:5b:eb:4c:b0:c4:19:6d:0a:c2:fd:
7a:96:fd:42:cb:5f:06:9b:53:02:80:f4:bf:bb:a1:
3e:39:1c:98:f7:08:db:f7:35:cc:04:12:0e:98:e2:
6e:8a:57:39:6b:0b:a1:ce:61:98:07:b0:69:65:3c:
a2:cb:74:9f:87:24:7f:2c:96:b0:a8:7b:31:8b:2e:
c3:11:7b:0b:b5:1d:59:ac:c4:d1:4c:2c:e7:c9:a4:
42:27:ce:ca:1a:7c:1b:71:38:e1:1c:89:4f:65:8f:
d6:34:ef:8f:f2:c8:4e:24:6b:59:19:83:15:44:ff:
44:6a:4b:a1:8f:a7:91:73:c1:34:dd:18:28:88:74:
0d:74:cd:ce:b1:12:c4:fd:31:07:aa:22:d1:de:42:
be:34:3b:75:00:46:6c:69:c5:c5:00:de:07:cc:f0:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3A:89:21:52:8C:25:C3:C6:78:8B:23:52:2E:F8:0D:F0:30:63:55
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8d:af:be:4f:5f:b9:0b:97:f8:a3:21:d6:ef:54:c8:0c:b3:
d9:68:1b:70:09:47:62:73:af:02:b7:e3:82:3a:46:e5:a1:9c:
71:99:fc:27:79:15:5c:28:af:99:4f:06:ae:52:44:8d:01:c7:
60:60:f8:90:d2:23:f5:e4:f2:86:8f:59:70:67:fb:e5:0d:0b:
00:7c:54:14:c2:52:54:fb:ef:e1:79:ae:56:cb:bc:32:c0:ec:
9b:89:93:f1:26:49:93:09:37:13:f3:2a:b8:e3:c6:1d:a1:5a:
bf:9b:78:69:b5:86:28:2d:3b:06:2d:3b:8a:37:c7:0f:da:ad:
39:63:c9:53:74:38:e4:dc:f9:ee:c5:15:fc:c2:d5:91:cd:59:
6a:d8:16:46:c3:3c:35:a6:49:db:ce:3f:f4:71:09:81:4c:2c:
31:74:8c:e6:3a:13:c8:f0:c2:e9:45:90:0c:e9:53:80:23:cb:
64:54:5c:41:18:37:53:68:04:c7:d8:fa:f2:a0:66:97:40:97:
ab:76:c0:45:24:3f:c5:a2:21:77:71:89:53:88:f2:69:0c:0d:
19:0c:91:24:84:5f:bb:23:d7:53:f1:15:91:68:7f:d0:16:3e:
ce:f1:c8:49:65:ff:a6:b8:57:0e:57:87:99:35:dd:dd:81:25:
89:56:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:43 2025 by rpki-client