Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier: MbLGBby9W8HrmKHOUqiga5ZXb0vwFQ4DTW8zIKRxIK4=
Subject key identifier: 28:0A:F6:BA:0D:83:C4:BB:34:08:04:03:E7:D2:52:4A:F6:E9:05:1F
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer: /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial: 019A7301A0EFC2752529D4009C8F7F04BF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:01:17 +0000
Manifest this update: Tue 11 Nov 2025 13:01:17 +0000
Manifest next update: Wed 12 Nov 2025 13:01:17 +0000
Files and hashes: 1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: t0RXRhZqeum0eLapnBzJgzw0SEFdm61XKNc7+4Op0Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a0:ef:c2:75:25:29:d4:00:9c:8f:7f:04:bf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Validity
Not Before: Nov 11 13:01:17 2025 GMT
Not After : Nov 12 13:01:17 2025 GMT
Subject: CN=280af6ba0d83c4bb34080403e7d2524af6e9051f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:ca:b1:7b:c2:bc:23:66:b5:34:59:e0:6d:
e9:01:0f:7f:d0:49:40:73:cd:6f:68:25:39:50:68:
d7:3c:e5:f1:9a:ec:b4:28:36:8e:ac:7f:38:07:c0:
f0:63:c4:f7:62:14:b5:d3:2a:12:32:ae:9c:a6:32:
93:3d:2c:0b:27:3d:b2:ac:3d:d4:a3:32:fd:69:38:
ea:4f:d3:d8:d8:60:fd:36:3c:45:42:b2:75:a0:b6:
d3:c9:1d:ed:7e:23:eb:e7:8c:5b:0d:8d:48:4f:24:
4b:3a:89:7d:6b:f8:fb:27:72:4d:a9:41:a0:ba:8b:
17:e1:a5:6c:5f:10:25:50:85:c1:20:ba:b5:b6:73:
ba:a9:6b:02:48:9d:49:a6:26:1f:46:d8:df:c7:24:
0b:29:f8:e7:18:93:a2:d2:5e:96:ca:ec:a2:dc:36:
13:8e:51:ec:12:a0:ad:f0:ce:59:68:06:6b:be:48:
91:ce:4d:62:c4:7b:dd:6b:ef:eb:13:b5:ac:23:54:
9b:d4:42:38:73:eb:19:e4:8f:45:c9:c2:0b:2d:93:
56:79:74:a5:d9:17:14:94:75:52:1a:b4:9d:ba:d3:
58:3d:ad:0f:ff:11:62:84:ef:98:e4:50:05:cf:76:
f8:4c:a6:74:81:51:59:0d:b1:55:e1:e5:a4:a3:c0:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0A:F6:BA:0D:83:C4:BB:34:08:04:03:E7:D2:52:4A:F6:E9:05:1F
X509v3 Authority Key Identifier:
keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:90:4b:12:a7:4d:fe:0a:77:90:32:dd:38:32:04:7c:1a:6f:
26:c4:6a:76:26:b5:53:5f:58:a4:8f:e3:eb:4a:85:c7:93:6c:
a2:9e:13:61:0f:44:93:1c:d2:6d:46:54:d2:aa:bc:f8:ae:8d:
2d:13:1e:4f:95:48:d0:8f:f8:4d:c4:49:3c:37:f7:c2:8c:f5:
b4:27:c5:45:c6:97:f0:44:db:ab:2a:d8:0a:d8:5f:a1:81:5c:
7a:fc:37:59:70:cf:40:ff:52:69:6b:15:50:8b:31:3e:b3:3c:
3f:bd:84:b2:8d:26:61:ee:14:d8:9f:ed:d6:57:b7:b7:87:90:
6c:91:79:9f:00:95:80:a6:cc:ce:e1:71:24:3f:b1:b2:5d:17:
51:5b:37:81:04:26:de:b7:d1:2f:cb:1e:fb:e6:bc:21:72:1b:
ba:23:85:0a:05:74:38:76:d0:e7:66:22:d6:69:8b:a9:df:f0:
b7:8d:c5:9a:ba:1c:a7:a1:36:2e:c2:73:25:c6:6d:cc:e8:46:
52:32:73:33:16:fa:6a:a6:6b:97:b6:6d:9e:fc:e5:42:59:7c:
69:87:c6:16:b3:26:51:72:c7:31:3d:5b:95:a3:06:67:06:6c:
2f:f3:10:11:c8:8e:f4:a9:5b:ce:d0:27:38:54:43:67:7d:9e:
9e:0e:d9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:36 2025 by rpki-client