Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: 8zA5VHr3W7i+VBqJrEHXl6Jbdr9gsybEXlbThCmYk4k=
Subject key identifier: 7F:B7:A9:6D:E3:E9:F9:DF:BE:5B:B0:1E:18:00:72:A1:A4:FB:6A:91
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 019A7149C42614AB1DCDD42251641C0E59D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0E07
Signing time: Tue 11 Nov 2025 05:00:50 +0000
Manifest this update: Tue 11 Nov 2025 05:00:50 +0000
Manifest next update: Wed 12 Nov 2025 05:00:50 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: FsoYD5cjj+v8pAk2Eshdq8zsVAN0inMlQEGh4lRY/QI=)
2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c4:26:14:ab:1d:cd:d4:22:51:64:1c:0e:59:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Nov 11 05:00:50 2025 GMT
Not After : Nov 12 05:00:50 2025 GMT
Subject: CN=7fb7a96de3e9f9dfbe5bb01e180072a1a4fb6a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:d1:b2:4d:9d:15:17:cf:62:3d:d2:c6:77:
82:e3:31:03:22:3e:2e:35:23:3c:84:c3:c4:ee:08:
fe:b8:ab:b0:df:64:79:37:c7:97:da:13:32:fe:8c:
f8:26:8f:df:f0:d3:34:5f:d8:9f:43:e8:d0:6e:1c:
1f:89:be:d2:f4:2e:7d:6f:67:97:88:0d:8b:9a:12:
fe:93:ac:60:53:f7:84:5d:c4:37:2d:f0:ad:c5:7a:
f8:6c:19:bd:44:eb:15:54:e4:50:dc:62:65:b4:17:
d6:3a:07:29:ce:6e:6c:37:2a:7a:df:1b:8c:12:09:
6d:5d:f2:e0:42:3f:99:9a:7b:a0:b9:ee:e4:c1:6c:
2a:41:ae:20:5f:69:e6:d6:17:90:41:81:4f:e0:23:
dc:3a:8b:17:73:3b:f3:7a:18:43:77:98:58:0f:d4:
88:92:d4:bd:8a:68:74:ad:05:ab:ab:aa:3e:0c:2f:
02:11:6e:e1:5a:62:cb:1c:90:88:9a:6b:32:74:ac:
b0:ec:28:85:2a:37:8f:01:00:4c:40:cc:6e:3c:4e:
35:05:1b:61:37:05:aa:43:20:53:a3:e0:12:28:fb:
22:68:38:14:6e:ce:55:2f:af:bf:4e:67:45:27:9d:
e9:87:5e:11:c1:ab:34:b7:09:ef:e4:2c:2a:d6:2e:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B7:A9:6D:E3:E9:F9:DF:BE:5B:B0:1E:18:00:72:A1:A4:FB:6A:91
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fe:6d:55:96:ce:4c:42:55:64:a5:49:ee:3a:9a:ec:88:a0:
85:b5:08:98:dd:f2:80:0e:d0:5e:e4:31:a6:5e:a6:26:cb:cc:
62:68:cc:30:34:8b:8e:70:76:d7:d3:34:d8:6b:c6:7d:52:9f:
27:c3:48:5c:4d:ae:5a:d2:9d:7f:29:09:15:80:95:b2:7c:13:
58:05:5a:5c:25:cc:94:00:85:02:4a:99:46:a8:b1:c8:25:62:
3e:23:d9:cb:4b:43:04:1d:6b:82:5d:c7:bd:7a:43:e0:f4:97:
78:bf:6e:34:58:47:eb:97:ba:0f:e3:90:61:9a:67:1c:29:91:
ad:95:2e:66:fb:a0:c0:48:c5:b7:c5:ee:da:65:26:09:6b:1f:
97:50:34:bc:23:99:2e:d7:7c:64:a1:f4:e9:2e:8e:99:37:fd:
da:dc:fd:cf:e5:26:fa:fe:2c:34:1d:bf:84:65:fd:ed:b2:28:
e2:a3:9c:06:98:56:30:e8:a4:68:b0:3e:bd:61:82:2f:57:c0:
35:f1:b8:df:24:5b:17:32:ee:54:47:db:97:12:2c:6d:e1:67:
fc:5a:c6:25:52:0e:e6:e6:5a:22:0f:13:3e:83:a4:d9:09:1d:
ec:27:11:38:84:fe:cc:94:4e:cd:6e:ac:42:a4:98:1b:61:c9:
75:cf:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:14 2025 by rpki-client