Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier: 5PSmCn3qVmQEcd2Sno9XNF/fVrYxNGdNK09zQ0w4Zj8=
Subject key identifier: F4:A5:B7:68:CB:4B:96:A8:09:2B:84:9A:DC:6E:82:43:DF:C7:A5:FE
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 019A733818C32A1E6EC09F1468CB7D9D9B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 14:00:47 +0000
Manifest this update: Tue 11 Nov 2025 14:00:47 +0000
Manifest next update: Wed 12 Nov 2025 14:00:47 +0000
Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: GQWRUCWdmMM0iZJqxM9mjO+9+dUM9dKS8SIGU8MPYDQ=)
2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:18:c3:2a:1e:6e:c0:9f:14:68:cb:7d:9d:9b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Nov 11 14:00:47 2025 GMT
Not After : Nov 12 14:00:47 2025 GMT
Subject: CN=f4a5b768cb4b96a8092b849adc6e8243dfc7a5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:6c:9e:61:02:b7:38:33:0d:ea:49:4f:b2:
ef:3b:86:f5:eb:6a:31:43:b1:04:7f:4d:61:88:5a:
04:eb:5d:01:ea:73:ec:86:8f:16:30:75:5c:5d:02:
e3:b1:41:9c:11:4a:e0:a8:0e:e8:7f:6f:bc:0b:99:
9f:42:1b:4c:9b:e9:93:69:e4:a1:4d:d9:34:a5:8d:
f0:c1:70:25:e4:13:f7:aa:91:b8:51:0f:94:1a:36:
e5:bc:46:f9:4a:bc:88:d7:03:ad:f8:2b:2f:06:c2:
23:9a:aa:6c:96:c0:9a:d9:63:9d:52:e0:ed:da:41:
56:47:88:00:7c:9e:59:0b:97:1f:ae:c4:bf:66:bd:
25:11:1d:4a:f0:79:f6:fc:39:47:40:43:1b:35:f6:
74:97:8b:40:cb:2f:f3:75:35:d4:da:48:3f:42:45:
5c:4b:d7:37:d5:f9:88:ed:28:a6:01:68:c6:14:c6:
4c:f8:0e:6b:c8:7e:3e:b3:4f:19:75:9d:5a:63:4c:
58:2a:5c:d8:91:16:b0:c9:88:00:4f:0f:20:2c:de:
2b:c4:2d:09:1a:77:82:ed:58:f8:62:6d:2a:5c:00:
ad:0c:5c:1c:c0:b6:6e:cb:05:88:bd:36:2a:75:fd:
47:6b:60:4b:0c:5d:2f:9e:cd:20:4a:69:41:1a:f4:
71:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A5:B7:68:CB:4B:96:A8:09:2B:84:9A:DC:6E:82:43:DF:C7:A5:FE
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:22:d2:50:30:2e:22:d4:72:54:ae:b3:8a:96:d7:3b:4a:ae:
8c:63:d7:16:d6:72:ef:0c:6f:7b:d8:f6:c8:56:83:af:0b:0a:
01:3b:24:2f:91:57:aa:5f:ea:72:95:8d:c3:ef:67:06:f8:81:
66:fe:64:c9:50:b5:d6:82:79:69:e8:1a:87:f2:15:16:15:ed:
d4:fe:c2:33:28:e2:78:f0:f2:22:91:ac:6a:ea:7b:6b:23:dd:
77:f4:ff:77:ca:cb:cc:72:15:8f:ca:5c:f2:a7:20:08:d2:8d:
8a:a5:d2:f7:d0:53:5d:67:d3:14:c7:2e:fb:a9:55:11:1e:a5:
bd:ab:1b:dc:1c:29:c0:64:be:1d:48:c8:55:64:fe:2a:ea:00:
3d:e4:63:3d:d3:c2:1a:d1:38:de:d2:59:fc:05:94:37:22:41:
53:7d:f2:63:a9:67:da:7f:95:51:65:3a:51:1d:bd:0d:06:c7:
93:ad:98:df:ee:83:65:69:41:04:e2:66:ea:62:58:3c:88:4c:
ac:c7:4a:89:76:7d:55:57:e2:d1:07:20:87:f1:0e:a3:3d:2b:
0e:a8:67:f6:5d:38:96:85:ba:3c:ed:5a:ec:c7:1e:0e:36:b1:
2a:f8:69:90:dd:b6:ef:49:e0:7d:71:ec:50:e3:4a:6c:58:fe:
cc:5e:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:11 2025 by rpki-client