Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: ZvXRCMtCl1QmtgCwh0bVK2ObJua3ce8p6bZ5uRn4IkU=
Subject key identifier: 8F:78:3B:24:7A:63:6F:0F:AF:C6:EC:48:7E:33:78:F3:BB:4F:A1:A6
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 019A71B91BD970486D7CE87146D30DBD5E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: tlsdLXN6SkstkGLskrd1IlzPB0XuprX5qLAoyWacEqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1b:d9:70:48:6d:7c:e8:71:46:d3:0d:bd:5e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=8f783b247a636f0fafc6ec487e3378f3bb4fa1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:b3:69:f0:5e:35:39:b8:e6:90:5f:f1:58:
3f:e8:0f:af:4b:9f:97:d1:4a:76:03:8c:17:1f:91:
c9:9b:5d:87:b2:44:bb:22:63:44:75:ee:fc:97:e1:
37:2c:08:a5:4c:b9:f6:a2:10:65:31:c9:f1:1c:3b:
69:2f:c3:17:a1:c2:de:86:a1:5c:f0:40:ef:ff:cf:
da:f7:e3:af:31:5b:da:bd:7a:7f:0e:e7:bc:a7:f0:
12:f9:ff:f9:bd:5c:e1:93:0d:14:e2:1e:c2:06:fe:
b2:0a:5a:ce:f6:87:20:b1:62:5a:1e:03:77:58:7e:
ad:4b:f3:ad:20:ae:1c:7d:54:12:d8:76:3b:4d:e2:
a4:45:90:90:7f:81:d3:b7:04:77:b1:31:d5:36:94:
8e:4d:6a:ce:02:e5:2f:04:dd:89:e0:7e:81:54:f5:
20:4d:d6:f8:8c:5a:51:60:df:84:e0:2d:c8:80:61:
5e:89:4c:fa:62:42:d3:ec:2c:5f:99:a3:ff:be:3e:
07:38:9a:80:a5:d1:f1:e4:a3:94:28:1c:57:81:2c:
bb:b5:25:31:23:23:bb:24:8c:86:ed:2e:5f:c7:e1:
d3:b6:b0:55:bb:7a:28:54:04:c6:1b:2d:91:da:e5:
68:49:ea:fa:0c:d0:15:29:1b:ce:0b:ea:13:32:55:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:78:3B:24:7A:63:6F:0F:AF:C6:EC:48:7E:33:78:F3:BB:4F:A1:A6
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:13:09:d5:78:13:77:fd:64:de:94:ac:c9:d4:39:57:f5:63:
d5:7c:be:e0:d9:1a:3e:c3:1d:5a:7b:2b:87:7d:70:b1:5e:c2:
30:1c:dc:44:98:f5:01:28:65:be:83:69:27:ea:c5:a6:e1:5f:
8b:5f:da:4b:87:6e:48:0e:63:08:35:d0:4e:a0:1a:c9:2f:12:
93:f2:75:79:1f:ef:5c:95:85:7e:bd:80:e9:85:4b:c4:d2:ec:
1d:57:73:4e:42:54:1c:e1:9b:2b:89:53:8c:01:fd:b1:ba:2b:
66:6b:00:7e:19:f4:ce:1a:7e:e2:06:67:6e:b5:f0:e9:72:1d:
bb:e9:d7:3e:4d:2e:f9:72:51:05:c3:59:db:7d:20:42:d3:3d:
6f:de:0c:11:e7:8a:04:b4:2c:ae:69:35:30:e7:ec:d7:0a:09:
3b:f9:3b:19:d6:22:3a:f3:e1:e5:ec:22:00:67:83:78:50:32:
7a:49:52:f9:56:cf:7b:d3:c0:2d:59:d0:a1:f0:90:45:08:a0:
e1:ca:a4:4c:e4:fa:a2:43:c5:8b:bb:ee:b0:54:c3:41:5c:40:
3a:c2:55:e9:ff:37:40:9c:66:61:b5:34:22:26:67:de:22:fb:
0f:99:22:34:8b:e6:28:f3:51:9a:9e:90:ca:9a:77:de:b5:a4:
fc:dc:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:30 2025 by rpki-client