Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier: WUT6MvVVND1yOUqyrCAXWUVt3Yus8Usdk/Z4XjVoVhw=
Subject key identifier: 75:D1:37:17:0E:D7:9D:A4:AE:7E:AA:FB:2B:17:09:C0:63:7C:63:DF
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 0199179AC7CFF0510A6482D4C74C1D2B1528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number: 166E
Signing time: Fri 05 Sep 2025 02:00:43 +0000
Manifest this update: Fri 05 Sep 2025 02:00:43 +0000
Manifest next update: Sat 06 Sep 2025 02:00:43 +0000
Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: Da7NDNP8txHePp/MxXXxfQV4k0Agwm7LhdH5pOcB2Zs=)
2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:c7:cf:f0:51:0a:64:82:d4:c7:4c:1d:2b:15:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Sep 5 02:00:43 2025 GMT
Not After : Sep 6 02:00:43 2025 GMT
Subject: CN=75d137170ed79da4ae7eaafb2b1709c0637c63df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:b9:30:67:5e:62:70:6f:cb:e6:79:68:91:
42:75:8e:00:a8:d6:7e:f4:cb:47:6d:2b:34:5f:7e:
70:ed:51:fd:34:36:f0:bc:dc:47:56:7e:e3:a0:a0:
80:ab:68:07:20:f0:48:a8:c2:9d:9f:9b:5a:71:8c:
b8:ec:23:5c:34:cf:c1:ae:24:a6:4b:d4:d1:55:42:
95:90:85:a4:4f:8f:fb:9f:a8:64:a4:27:93:79:7e:
24:0f:b2:8c:96:f5:d1:6d:19:92:15:23:6d:09:c6:
c9:2e:26:3d:de:f5:71:6e:aa:bc:5a:f5:b1:60:be:
c7:27:a0:39:a1:36:65:20:c6:51:3b:c5:18:1b:80:
94:7c:84:bd:52:48:6d:5c:91:b9:aa:7b:d1:77:d7:
2d:9a:48:98:3c:5f:f6:33:ce:69:45:01:56:3c:c3:
86:c3:46:dc:41:08:5d:77:c7:6d:ce:ac:d3:5d:9b:
c8:53:44:04:96:80:fe:e5:36:ea:2a:2f:6d:9d:8c:
92:d2:bc:0c:54:0c:37:b8:d3:6a:c5:87:ae:53:83:
d4:07:84:a1:6e:fd:56:17:d9:2e:89:d9:00:c4:31:
84:0f:bb:69:c5:87:26:c8:f7:07:37:b8:8c:61:f8:
62:c3:38:42:5e:54:4c:73:89:5a:11:28:63:73:48:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D1:37:17:0E:D7:9D:A4:AE:7E:AA:FB:2B:17:09:C0:63:7C:63:DF
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:78:1f:f6:73:e0:77:de:8e:44:1d:46:64:8d:ff:6a:80:f4:
c2:b8:89:db:67:b5:2b:07:c7:23:53:7a:e7:ec:60:ae:30:9d:
e6:64:7c:c2:df:21:ad:77:9c:38:7b:fe:5c:04:34:c7:47:e5:
f3:7e:8b:03:28:34:55:61:63:ad:fa:9d:ef:73:0f:d0:b4:77:
6f:c2:ee:2f:66:cd:2e:51:d6:dd:c4:6f:10:d0:42:6b:7a:02:
56:74:36:3d:54:da:40:ff:90:13:1e:31:33:6d:ef:85:98:87:
6f:a3:31:78:5e:b9:34:5b:b6:5d:58:fd:6b:24:63:5e:88:42:
af:8f:b6:e1:c4:8c:05:d6:f3:86:8e:f9:67:11:ea:3e:d2:25:
68:2a:64:52:99:f0:30:f6:ff:b3:48:5f:4b:48:07:4a:8c:f7:
42:84:4a:f2:4a:28:83:fa:d1:89:22:d4:a8:39:98:68:eb:08:
4b:3d:65:0f:f8:d4:32:63:49:7f:79:ee:9f:13:c2:44:d1:00:
e7:46:85:ae:44:7b:79:e9:0c:e0:f7:6b:27:16:57:95:2e:dc:
d0:8f:d4:ee:6b:00:ab:5e:20:f7:cf:b0:0d:5f:17:ef:b9:d1:
50:c3:59:04:a1:bd:32:94:9d:e6:26:0d:f5:b9:fb:bc:11:65:
b0:f4:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:05 2025 by rpki-client