Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File: 1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier: kB3FMS3+UBF1p+dhoR76XE6R7d6wcYhAHU2OtAj2zkk=
Subject key identifier: 4A:AC:6B:BB:DA:07:20:5B:A2:C3:1F:8E:03:29:F5:4D:77:96:57:C5
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer: /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial: 019A71B86D93183A2363513C6D18DEB4982D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number: 0390
Signing time: Tue 11 Nov 2025 07:01:43 +0000
Manifest this update: Tue 11 Nov 2025 07:01:43 +0000
Manifest next update: Wed 12 Nov 2025 07:01:43 +0000
Files and hashes: 1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: blxGUWxtPKs1agFxP52+I8TS4KSsPrdDc+i2Fdpb3Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6d:93:18:3a:23:63:51:3c:6d:18:de:b4:98:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Validity
Not Before: Nov 11 07:01:43 2025 GMT
Not After : Nov 12 07:01:43 2025 GMT
Subject: CN=4aac6bbbda07205ba2c31f8e0329f54d779657c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e3:5e:64:05:bb:8d:11:5f:bc:0a:97:e9:20:
79:e2:f5:76:a9:36:b6:ed:62:8d:fe:18:16:87:38:
26:6b:bb:48:39:5a:c7:25:e6:7b:30:4b:87:c8:e5:
20:a6:52:2c:ed:e1:a8:ce:21:f8:5a:23:cb:ee:dd:
87:d8:e5:1e:0f:b3:b8:36:92:15:73:5e:9d:4b:81:
a9:24:43:74:80:dc:f1:4b:4c:53:1a:c4:00:00:92:
f7:fc:0e:af:6b:89:be:6c:99:85:57:eb:5d:fc:95:
94:1a:e9:bc:aa:9a:dd:75:48:0e:2d:05:08:08:63:
cc:a2:bd:c4:d0:9f:df:54:2a:6a:b4:5d:d5:d0:3a:
ef:73:f3:a0:40:75:0d:2f:f2:6a:e6:68:97:c4:9f:
3d:98:96:02:cb:e9:17:40:9e:60:9f:f1:73:32:c0:
b9:3e:fd:30:9f:51:bc:df:b2:91:61:63:d7:60:53:
a7:54:ec:c9:5a:db:bc:ff:38:9c:03:ea:86:a9:a0:
96:80:10:8e:eb:8c:0c:13:40:c0:31:f5:bf:65:81:
e7:aa:19:2c:a9:e7:da:0f:6b:1c:85:5d:bf:3c:05:
df:46:7d:6b:52:d3:9f:c2:c1:7a:43:f9:1a:83:0a:
15:b6:fb:00:43:ba:0a:e1:32:e5:c4:25:7b:67:e6:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AC:6B:BB:DA:07:20:5B:A2:C3:1F:8E:03:29:F5:4D:77:96:57:C5
X509v3 Authority Key Identifier:
keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:75:1f:28:c2:ab:75:0a:4d:4a:3f:2d:23:1d:cf:30:8c:96:
38:6e:28:18:36:1f:fb:62:16:15:c8:2c:a3:00:e5:d0:48:a4:
bf:28:f8:4e:f3:db:0d:02:99:96:73:3a:eb:5c:c8:cb:97:c4:
77:5f:c9:7c:c8:c8:21:43:ce:38:25:b0:a5:28:f2:26:a2:db:
d0:af:c4:d9:e3:d9:89:fa:7a:97:16:e2:6b:c0:da:7e:3d:c0:
5e:75:fe:28:2f:94:96:02:a4:8b:26:71:9c:3f:5d:d3:da:89:
bd:02:02:4f:4b:f0:55:51:51:30:1b:d9:48:a0:19:48:6e:93:
30:f6:10:dd:d5:87:94:d9:b3:19:5f:2a:8c:c5:1d:1a:85:8e:
3b:71:39:01:4a:92:d6:d7:3b:df:85:5b:65:9f:dd:0f:79:27:
69:f8:3d:0e:63:45:33:23:a3:44:0f:bf:c2:3f:6c:f8:1c:40:
24:b6:0d:c1:c5:4e:9c:af:47:d5:77:c2:3a:a8:9f:8e:7d:24:
b1:d5:0b:34:98:62:40:62:5f:46:52:c6:59:ee:b0:e7:3d:0d:
1f:94:7f:96:48:1a:a9:ac:d7:bc:17:88:17:30:28:37:a9:aa:
2f:41:aa:bf:89:4d:73:33:3d:b8:ad:bd:e1:53:25:02:23:9f:
0b:33:0b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:53 2025 by rpki-client