Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: hyAuaOicJCXIp0zie5JxZ5l1hoANtNXihB8M7TpbyNA=
Subject key identifier: C5:82:5C:E2:28:20:57:0D:57:0E:30:AC:24:39:9E:A5:E5:1F:77:FD
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 019A71EEA5EB82573F57034D7D206611B770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: z6Ed+i83k2PQpkOidcfvcApt9SXE+/CU4A9iyPdoVf8=)
2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a5:eb:82:57:3f:57:03:4d:7d:20:66:11:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=c5825ce22820570d570e30ac24399ea5e51f77fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:e8:0b:6a:90:42:b6:5b:b7:97:5e:95:92:
1e:4b:59:a7:b4:a2:36:27:4c:49:32:6a:ee:6b:36:
dc:7b:42:d3:d3:cd:17:fe:60:40:95:be:63:94:79:
65:eb:ff:7a:ae:ab:30:f6:6b:ce:cd:a7:c2:09:ae:
59:6a:f2:f2:0f:a8:4d:df:cf:a9:ac:63:b9:b1:dd:
19:09:22:72:62:9f:20:a3:48:36:36:36:af:8c:d2:
47:af:6a:a5:42:be:91:6f:31:f4:c2:28:44:19:57:
23:eb:ba:8e:dd:c2:f5:c5:66:2d:fa:41:84:ca:89:
6a:ae:12:35:3f:3e:4e:ee:d6:33:96:10:43:ad:a6:
16:68:21:fe:b7:f8:98:17:33:25:98:42:d2:ea:9a:
79:dd:66:75:3a:ba:a6:37:3e:a0:ce:44:e4:c7:4f:
e5:7e:48:27:ba:f9:5d:a4:c5:3a:ca:8b:2a:82:e2:
2d:36:46:f1:2a:48:47:55:d1:9f:5b:39:9c:67:ce:
9e:10:30:25:d3:06:2d:c4:e5:28:07:f3:6f:46:9b:
00:f6:d7:b0:c9:af:f7:e8:d7:e5:fe:87:c2:de:e8:
41:8b:35:3f:0e:1f:2b:ed:28:e6:00:da:15:d5:3e:
3a:19:6e:d1:81:c3:c9:e4:bc:bb:a5:8c:48:ab:94:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:82:5C:E2:28:20:57:0D:57:0E:30:AC:24:39:9E:A5:E5:1F:77:FD
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:45:30:2d:69:1b:03:71:ec:64:31:04:37:04:7b:2b:f5:b6:
91:42:03:b5:e6:1d:b6:2b:9a:6f:5c:4f:6d:82:2c:62:9a:48:
ba:4f:5a:c9:65:d5:3c:77:8f:4b:f8:a6:e9:bd:a2:d2:87:2d:
85:99:e0:b0:cc:61:ad:d8:18:68:0a:8a:eb:b3:8d:59:b4:3b:
56:75:29:11:07:de:3b:c0:72:cc:d3:b2:15:41:d9:e1:9e:6c:
4e:da:d9:2d:3b:4d:3b:23:82:e4:66:81:71:33:ed:9b:d0:e8:
fc:23:73:a8:48:eb:58:40:ee:6b:fb:da:c6:3b:d6:77:66:77:
4a:a0:5d:ce:c8:2e:d3:eb:e8:da:de:da:b5:bc:96:bd:7d:87:
de:86:13:12:0b:bb:a6:57:a4:3b:1e:c3:ab:d4:fc:08:10:82:
a5:5b:4a:55:6d:a6:85:97:7d:32:a9:08:66:a0:b9:fe:20:2b:
2e:46:55:8d:80:47:cd:8e:8a:c3:6f:6e:ef:fb:f2:dd:68:4c:
da:26:bb:6e:cd:34:2d:b2:71:c1:7f:25:81:66:e6:f2:8a:43:
b0:c2:eb:51:40:dc:c9:02:94:45:ae:2a:a6:c4:e9:07:a4:ac:
19:aa:d0:cb:67:2b:f8:11:e6:52:23:5a:cd:77:b9:0f:b2:0d:
e4:d1:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:04 2025 by rpki-client