Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: PxocPpd7R/pU7F2r6XofBl/layYEQn+WSyUnM6fTad4=
Subject key identifier: 3D:FC:DE:19:A3:5D:5E:D9:25:AB:23:C8:8C:9C:04:92:6F:E1:32:DD
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 019A71B8C028A718CA0A7AD32519653E9122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: /aleCT+jjtfhYK6QsUvl8Zjq2Tkp5wkspq0OFq0HWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c0:28:a7:18:ca:0a:7a:d3:25:19:65:3e:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=3dfcde19a35d5ed925ab23c88c9c04926fe132dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:75:86:93:4a:ab:e2:fe:c8:8e:63:ea:2c:
8b:dd:3d:17:94:af:39:17:cc:69:b2:08:7c:12:2f:
47:b5:46:8d:21:40:39:05:6e:02:cf:be:f7:a1:d1:
03:c7:a4:43:81:9b:96:bb:24:b6:24:53:3f:6a:1e:
9f:4e:04:11:fe:de:7b:86:c5:5f:4c:29:a1:4d:60:
98:a6:cc:5b:2b:92:68:c3:86:bf:a7:87:11:02:61:
8b:eb:4d:e6:d5:f4:5b:7e:da:df:1c:b0:c9:11:07:
1c:bc:d8:a9:cf:ba:f7:6c:86:aa:c5:fd:a2:d1:f8:
e4:35:51:20:4a:99:fd:27:cc:aa:82:20:59:72:91:
58:da:19:a6:47:83:1a:e5:7f:f5:fb:1a:d1:80:b1:
6c:dd:b9:64:8f:54:23:d8:45:95:8a:c7:70:e4:af:
0b:37:bc:8d:33:50:f8:32:37:49:b6:96:47:d7:49:
e2:6d:86:2f:f5:10:13:46:8e:18:ef:50:5f:64:e9:
b4:3b:1d:4a:ab:fd:af:be:0d:56:a1:79:07:ab:ec:
b0:c2:09:67:08:64:c0:a9:db:98:73:5e:fe:ae:f7:
c2:ba:7e:0e:00:aa:a3:00:b3:f6:b3:4c:ef:54:a1:
74:a0:60:57:26:da:a1:51:52:76:c7:83:8d:4f:51:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FC:DE:19:A3:5D:5E:D9:25:AB:23:C8:8C:9C:04:92:6F:E1:32:DD
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:82:5f:05:3b:72:aa:43:03:9a:e2:5f:e2:8f:f2:96:68:8a:
7e:0b:c6:ef:c7:ad:d8:0e:ce:38:91:f9:8c:47:2d:0f:e2:b6:
ae:6d:1c:96:83:56:1c:d1:ab:86:d9:c6:00:44:e3:1f:c4:a1:
34:83:b4:e8:7f:96:62:16:62:0b:23:91:0c:d6:3f:0c:aa:b9:
bc:7d:e4:58:93:c5:b4:35:c9:bc:13:d8:3a:48:83:18:e5:f0:
f2:23:42:93:d1:3f:f0:e7:9c:27:fd:6e:b0:2d:11:02:8f:92:
42:97:0b:72:3e:42:b8:4a:c9:83:a4:2b:32:fd:f3:23:aa:d9:
87:ff:3d:cd:3d:57:37:d6:88:22:f5:44:f5:94:fe:26:84:8b:
dc:dc:4e:8d:1d:7f:cb:9c:54:03:97:b7:b2:0d:66:d5:d9:2c:
b4:77:a9:88:a3:ad:03:f4:b2:c1:ba:24:7c:86:7a:80:53:3c:
07:d1:d8:d8:3c:07:5f:f6:7a:34:1e:b5:d1:75:97:48:12:3a:
29:58:2f:44:d3:95:90:9b:2f:f3:7d:5f:a6:66:f6:b1:bb:99:
d8:5b:49:17:b7:9b:7c:53:67:eb:02:86:1f:69:fd:e5:ce:6e:
3e:40:e0:12:75:ff:27:a0:12:3d:0f:ba:da:8e:ad:50:e8:b9:
f4:6e:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:54 2025 by rpki-client