Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier: Dv+VU2c/Epaidx0foSvw5lB1pL7mYugl6DN4Jcwj5BQ=
Subject key identifier: 56:3C:2F:55:B6:60:62:5D:D6:57:B2:15:FF:0C:CD:34:F5:36:8B:71
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 019A730180387E0E47DE6EBF018263FA9812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 13:01:09 +0000
Manifest this update: Tue 11 Nov 2025 13:01:09 +0000
Manifest next update: Wed 12 Nov 2025 13:01:09 +0000
Files and hashes: 1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: ajTOYDE161hmUS7XgFG5q+vL32QX0zNsXVvRZeR6HuQ=)
2: lWvdh1tW9Nr29e037SncsLGwjfI.roa (hash: j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=)
3: lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa (hash: aiK+jeojasCoIONEiBsew2dpW6Sl1vqGI4o1s3u6sNg=)
4: tpwCcvQj5buTsmFRUmHDkFF9loo.roa (hash: mW6eLdMENzR4XVFpPs8//f09RPHYqnyv9VrQnjo145o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:80:38:7e:0e:47:de:6e:bf:01:82:63:fa:98:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Nov 11 13:01:09 2025 GMT
Not After : Nov 12 13:01:09 2025 GMT
Subject: CN=563c2f55b660625dd657b215ff0ccd34f5368b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e1:21:48:0f:f9:7e:93:05:4c:3f:c7:cd:09:
ca:eb:8c:47:76:21:d7:63:0a:7e:3f:28:d4:76:cf:
f0:9a:1e:9b:bb:b1:a8:62:12:ca:f0:7e:87:33:f9:
3c:fe:32:cd:53:fd:1f:06:68:6f:c5:1d:8f:2b:0f:
f6:46:8a:e7:0e:23:16:92:da:7a:ed:b3:2c:8f:30:
7a:28:34:bf:df:d6:60:9a:ae:a0:2c:b8:04:59:91:
a4:3d:be:0e:54:e7:c1:d2:2e:57:d1:f9:95:87:f1:
a0:5f:c3:5f:4c:74:a8:cd:6e:64:f5:c2:02:d9:fb:
d7:92:9c:8d:e9:46:5f:bc:16:c3:ba:28:52:47:a3:
61:16:60:ce:e1:9e:b5:b0:7d:5d:ec:5e:e1:26:23:
26:40:da:af:fe:b1:51:6b:40:0d:c0:b8:fb:c9:0e:
a1:71:0f:77:ac:8c:be:c3:0c:82:1f:e5:09:1b:f6:
9f:1a:0b:04:af:c1:92:36:3a:a2:5b:c3:df:00:76:
b7:b4:f1:f2:43:9e:f2:5d:c9:ce:12:4f:ac:37:8f:
c4:8a:36:1d:6d:4f:d2:ae:7e:59:04:3f:4e:2a:1c:
cc:48:9e:44:f6:86:c5:b7:1e:af:14:7e:b8:93:d6:
78:01:ff:43:4c:50:33:79:85:67:49:8b:86:30:d6:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3C:2F:55:B6:60:62:5D:D6:57:B2:15:FF:0C:CD:34:F5:36:8B:71
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9d:6c:79:14:42:bf:54:c1:82:76:ab:45:22:d0:83:36:25:
7c:31:4b:0b:9b:af:0d:4f:50:8d:af:03:ba:d4:77:72:95:b1:
54:97:79:bf:9c:69:54:9a:16:e2:3c:10:c0:fa:96:a0:0f:ef:
76:fe:2b:e6:eb:0d:d6:a7:71:7e:0d:17:d5:fc:cb:3f:bc:f2:
3a:c1:a0:d0:ed:11:f5:f7:db:13:a6:fd:46:6f:ff:c1:12:10:
d8:34:0c:46:a9:66:6c:3d:8f:08:c9:90:8f:29:b6:59:39:7c:
ab:e0:8c:4f:bd:b8:0f:5b:5d:67:27:2f:6b:c2:10:1a:3f:a3:
5e:41:24:49:b2:4f:0a:5f:a2:89:cb:42:a7:a4:d4:37:e3:fc:
92:1f:f9:23:d0:03:89:ef:05:47:d9:9b:12:b7:5f:51:3a:b5:
21:93:e9:b0:ae:a9:96:6e:70:34:4e:d7:a5:1f:aa:da:c8:cf:
f0:0f:45:b9:f5:73:5d:85:e5:8c:fc:31:de:95:e6:27:57:fb:
c1:01:0d:97:83:54:21:9e:06:1f:22:46:ba:ca:f1:a5:1a:cf:
19:e5:f2:f5:c8:20:e2:fb:33:f3:af:05:06:19:c6:b0:df:72:
be:43:ac:68:e4:62:7e:eb:f0:97:79:75:67:aa:58:e7:8a:1a:
80:fd:c3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:08 2025 by rpki-client