Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: NMvA7umA8cWxuw+diUNj2gSr0KMpBhrjl2gFOV0zKm8=
Subject key identifier: E3:8C:DE:F5:BD:57:BA:DD:DF:3D:CC:05:B8:9C:5D:FD:4A:BE:C9:27
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 019A71B8BA008DB9BCD072473D5C9CB64550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: KxHwPzKqgdU4mRAEvVtGmHCunWO/O+nKmnbjH+V9dmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ba:00:8d:b9:bc:d0:72:47:3d:5c:9c:b6:45:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=e38cdef5bd57badddf3dcc05b89c5dfd4abec927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:37:ba:9f:dc:1c:e0:5c:bb:79:70:49:64:
9c:17:67:b1:65:2f:5c:bd:3c:a3:c5:f0:06:98:ae:
25:f9:a5:6a:7f:c7:55:7b:f6:fd:ad:3f:1d:86:6b:
7f:8b:04:b7:69:1d:88:e0:d6:57:08:e1:93:2e:33:
c5:3d:3a:b6:e5:13:d7:cb:75:96:3f:a8:00:a6:3c:
3e:45:99:5f:f3:33:38:43:fa:f2:50:05:97:c7:35:
45:e2:b6:19:2b:a8:45:19:83:42:6f:a3:a7:b5:7e:
8f:9b:0f:5f:c1:9b:59:44:7e:59:77:5c:02:7c:3e:
3e:70:d6:74:6c:96:58:e6:c1:f3:98:c6:43:c2:7f:
c8:de:c3:2b:5a:e5:07:27:28:e4:14:d0:d5:e1:29:
c1:23:60:d8:69:1a:86:06:a7:be:d2:d7:a7:1a:c0:
59:63:09:41:43:35:91:c8:c0:68:0a:51:20:b0:48:
a0:6b:07:56:f1:c6:5d:b9:89:54:83:06:be:65:25:
b4:d1:4c:b4:8e:00:b5:b6:66:9d:cf:fb:99:1e:1b:
42:d3:f0:94:53:4c:a0:9b:37:ad:aa:04:c5:f2:5e:
57:54:38:9e:e4:fd:75:8d:d2:c6:6e:f1:69:cf:ca:
10:07:e6:53:d6:f2:5f:dc:d8:a7:62:44:04:b3:91:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:DE:F5:BD:57:BA:DD:DF:3D:CC:05:B8:9C:5D:FD:4A:BE:C9:27
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:35:64:22:0a:c4:2f:a1:36:49:3d:cf:5b:e2:f6:36:a5:
fe:5e:c2:42:6f:ef:9c:2e:99:21:80:c3:0f:78:35:60:27:98:
6b:cd:40:96:ac:63:2e:b5:ec:94:da:85:04:23:12:08:b7:d6:
1a:c0:6a:85:8a:bb:4a:2e:b9:3e:af:dd:d6:cf:57:5d:00:66:
7d:b6:a0:69:c7:8e:cb:bb:d8:8b:53:8a:10:99:5e:88:2c:81:
52:64:48:40:68:cc:f5:03:31:4d:24:50:20:f1:20:8b:f9:3e:
d5:c4:68:3c:08:7c:2f:d4:23:a4:a3:72:6a:80:ad:d9:81:e6:
1c:e0:d6:2e:cf:0c:8d:95:ca:cf:dd:23:b5:79:49:d3:2a:dd:
8a:6b:f8:3b:2b:19:1b:3d:53:bd:5b:f6:38:3d:1d:ab:1a:ce:
6d:74:a8:44:9c:e1:e0:39:e7:17:c6:ca:af:e1:ec:ca:9d:52:
78:3b:c3:79:8f:4e:3d:01:75:48:da:84:78:e4:66:28:20:cb:
bb:c7:8e:38:ba:d2:10:f9:59:6e:90:c8:a9:3b:db:b7:67:45:
c9:9e:7c:c5:dc:0f:f5:b7:83:17:ee:e2:37:f1:4d:a7:0a:76:
84:3a:c4:a0:56:cf:78:b7:51:2f:20:ed:6b:1b:f6:05:de:f3:
95:4f:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:43 2025 by rpki-client