Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: OFAZVttoIi6deKycMkSBk1KHoMWvT9QNkFsC0dx/Y8I=
Subject key identifier: BF:D9:66:22:AC:B5:16:4D:AD:84:4D:55:E6:B6:2B:EC:0D:8E:B4:F3
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019A71B8C476D5E2B42CB81FBA189748B049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 1078
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: WBGaBaREEYNqEiu35y4GeGsTunk+8JeeYxWXJMPIiP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c4:76:d5:e2:b4:2c:b8:1f:ba:18:97:48:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=bfd96622acb5164dad844d55e6b62bec0d8eb4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:65:65:3e:ac:ae:70:91:28:32:75:42:4b:
81:08:73:78:ec:ef:e8:75:18:e1:20:56:cc:11:41:
9e:a9:9d:83:51:03:88:d0:54:09:d9:a5:95:d4:9c:
5f:10:f3:5d:8c:2a:10:63:e5:12:c6:22:fa:29:17:
5e:c0:51:56:7e:b9:ac:20:ed:0a:31:c9:bf:db:59:
a6:58:5f:4d:9d:4d:97:43:46:2e:99:42:25:05:4f:
9d:e1:71:28:ad:d5:ad:c4:08:44:c1:77:59:e6:24:
d3:4a:2d:85:51:3e:c0:1e:aa:08:7a:9f:66:9a:c4:
ea:6f:34:6f:48:cd:57:e7:61:84:ac:39:db:e5:61:
1a:d8:80:1c:b7:02:ec:c3:0d:88:b1:0c:0b:90:18:
92:3a:56:47:1c:de:52:fb:8b:51:c0:a5:89:b8:cd:
d4:6b:30:25:58:63:00:ec:5a:4f:e7:c8:27:91:ef:
65:3b:45:3f:12:d4:65:4f:57:46:9f:d9:5e:ee:2a:
2f:48:cc:29:05:d7:d4:db:6d:32:cb:33:93:84:25:
b0:de:f1:28:c6:7f:02:42:c6:a9:09:fc:69:ed:e3:
e5:92:89:95:e4:7e:a2:14:4e:14:3b:8a:dc:4e:fd:
58:3b:b2:ef:0f:3f:72:c1:ce:86:bf:31:83:71:bd:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:66:22:AC:B5:16:4D:AD:84:4D:55:E6:B6:2B:EC:0D:8E:B4:F3
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ab:43:32:2a:f4:ad:c6:c0:cc:af:53:bb:96:09:95:4f:e1:
8a:7d:53:76:97:67:b6:1e:78:b7:49:cc:bb:dd:1a:9d:41:a6:
87:62:99:0f:33:68:46:5e:fc:87:c3:e2:7d:b5:46:37:41:96:
8f:70:35:cb:7e:0f:0b:d7:42:60:12:e7:d8:34:cc:68:cd:41:
98:6a:a4:56:04:cf:7d:43:45:4a:15:ba:bc:38:3b:8d:f1:2c:
f7:b1:49:97:cb:1a:68:2a:6c:05:16:9d:1b:92:b7:cb:57:a4:
3f:ba:4c:ef:fe:46:17:e0:17:82:09:10:37:12:56:f5:b7:b1:
1c:c5:22:d7:5d:e2:da:66:f5:40:31:7e:93:af:2a:6e:2d:82:
e0:b5:c4:24:f7:e5:c0:8f:09:c3:18:36:cf:bd:22:52:02:4e:
eb:85:ad:4e:26:d4:9f:81:5e:60:8b:96:e9:26:3b:0d:f8:4f:
55:9d:1c:62:d6:85:3f:31:2d:f6:db:bd:9d:a2:92:e0:aa:2e:
af:e5:d5:0c:8b:89:46:3c:6d:56:8c:53:ec:55:3d:8b:72:0f:
cf:41:8e:1f:f7:41:eb:4d:88:81:5b:ee:ae:a9:29:a8:e4:a8:
d7:cd:3e:31:28:e9:91:00:fd:b2:01:f5:71:af:76:1a:82:a1:
a5:25:7c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:19 2025 by rpki-client