Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: JLcU3pMsLV0a1CYfcwHxq2TwXHrgevpytYU3K8fBbKU=
Subject key identifier: E4:21:B9:C5:FD:BF:42:DA:8B:5C:3F:73:4D:13:B4:FC:80:5C:1C:D4
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 019A7149D42E9BB1959D011D6B12B36E9A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: LyomvPY3RR/C6OozdfHDWG3imNCQ/RZNxEDqFzLXxMk=)
2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d4:2e:9b:b1:95:9d:01:1d:6b:12:b3:6e:9a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=e421b9c5fdbf42da8b5c3f734d13b4fc805c1cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:81:93:91:43:62:c9:19:29:5c:a0:93:2c:
94:d9:4c:2b:a2:56:87:e1:c5:da:4d:04:30:20:c7:
4e:5a:d9:91:8a:b8:8b:b8:ff:79:7b:71:55:49:04:
47:6d:4b:76:9a:48:8c:2e:24:8d:c3:1c:bb:b9:18:
8e:b6:6b:67:96:26:cb:ab:32:47:d0:29:74:c1:3a:
73:7e:ec:a9:fe:24:9d:91:1d:c5:a8:b8:b6:51:74:
af:32:a1:b4:b3:9e:82:95:1d:5e:9b:88:88:d2:77:
3d:a9:4f:95:65:85:ff:91:c8:7f:d7:41:38:1c:fa:
3b:c7:66:2b:55:cb:7b:97:d2:59:1a:6f:63:d6:73:
c9:6c:6f:37:74:8f:a9:70:35:78:36:1d:36:de:f4:
46:f9:0e:59:c0:91:58:c6:6a:d0:10:29:90:3c:7d:
d0:dd:c0:62:de:a9:78:95:52:2d:39:2a:21:fb:af:
eb:e1:c5:f7:8d:75:c1:10:cc:ec:d6:c6:49:e1:13:
01:d6:07:81:0d:e1:e8:cc:a1:96:8b:3b:1c:04:fd:
31:14:73:eb:72:f9:81:40:34:f1:23:58:51:91:63:
e8:97:8e:e3:b6:11:3c:6d:a6:68:82:38:c7:56:3b:
16:4b:89:d8:f0:7c:8f:ab:94:f6:57:28:34:fb:0d:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:21:B9:C5:FD:BF:42:DA:8B:5C:3F:73:4D:13:B4:FC:80:5C:1C:D4
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f3:f2:47:35:f6:c7:c3:1d:d9:05:c7:58:c9:20:14:ba:90:
35:c8:17:81:0c:04:fe:d7:b6:0d:14:28:98:05:71:e6:eb:e2:
03:2e:85:f7:d8:3f:1c:b0:5d:a8:ad:ae:97:c4:4c:15:83:78:
8c:82:37:90:d9:28:20:da:b6:da:b9:9f:6f:51:33:17:21:20:
60:13:f4:90:eb:81:96:22:51:72:10:b6:b7:24:1f:13:ba:67:
e0:6d:3b:83:f7:4a:2b:df:83:95:13:7d:ae:f9:02:4d:6e:8f:
d5:75:ef:91:87:cb:89:da:3d:91:f0:4b:59:ae:79:17:f0:b5:
f2:d2:cc:28:52:4a:2d:8b:a0:49:bb:ac:69:9d:d8:98:aa:4d:
1b:ca:61:ab:23:ed:29:44:8f:3d:07:8f:12:7c:cb:04:93:2d:
04:72:ec:77:80:a1:d2:d8:fe:4f:56:aa:95:d9:35:f6:57:ba:
e3:30:ff:75:df:d2:3c:1d:05:d2:3a:8e:c3:40:c4:fa:02:19:
49:15:6d:72:e2:80:c4:b5:03:de:9c:ba:a0:d5:e1:15:c9:19:
17:0a:7a:ee:5e:0a:bb:a5:4b:79:cd:28:ef:de:95:43:0f:8b:
e3:ed:ee:7f:fc:77:50:b9:28:3c:b0:89:8f:bb:bd:c6:51:0b:
e4:3a:ad:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:16 2025 by rpki-client