Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: 5cktc4b4cvMNyEUCuD6071sNoZl5uKX0XhZyE4RmRm0=
Subject key identifier: 1A:54:E5:EB:A5:FD:B7:B8:1A:CF:DB:08:54:6A:DF:28:5C:D1:72:5A
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 019A71132B6B53CF8302DD61C17700B1C88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:01:12 +0000
Manifest this update: Tue 11 Nov 2025 04:01:12 +0000
Manifest next update: Wed 12 Nov 2025 04:01:12 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: iHp6Pj61Q5Oek4O4ory9x7t2+L7oEwdYrvHE3qBa4Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2b:6b:53:cf:83:02:dd:61:c1:77:00:b1:c8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Nov 11 04:01:12 2025 GMT
Not After : Nov 12 04:01:12 2025 GMT
Subject: CN=1a54e5eba5fdb7b81acfdb08546adf285cd1725a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:76:ad:80:81:80:e0:32:39:44:54:45:61:
04:16:21:f9:4d:23:96:c2:d0:f7:91:de:c6:74:d6:
f4:f8:c4:07:c6:08:fd:59:64:57:72:53:1c:ed:7c:
86:fe:25:c0:b8:0d:7a:4e:cc:d6:40:47:08:86:cf:
4a:ad:25:c2:f6:9a:a8:7f:81:90:d5:10:59:0e:48:
d4:0b:84:db:71:98:18:b5:a4:7a:aa:50:ad:a4:aa:
85:7d:ea:29:33:e0:eb:54:3d:87:b6:b0:56:64:68:
b8:05:e3:6a:a5:6f:64:f3:22:e1:32:b6:08:97:34:
a6:3e:f5:d0:37:ed:07:a6:35:28:3b:4b:16:eb:e9:
d4:eb:92:8f:8e:0d:33:b1:77:4b:4c:0c:a5:6e:e4:
b4:dd:06:8a:64:16:e3:cd:ac:3a:8a:1e:70:e2:4e:
4f:10:df:42:eb:ba:ea:7a:1d:1a:83:a9:72:0d:d8:
8d:8d:b0:2c:15:45:ff:33:b0:c2:cf:85:c0:e3:79:
4d:34:46:2b:84:ce:51:ee:29:76:e1:2b:2a:c5:70:
d8:0c:5b:27:a8:d2:45:c4:7f:d8:0e:8a:c4:ff:ca:
cc:84:d1:73:6d:7f:b3:4c:a6:c6:b1:32:87:ba:34:
d7:fd:d0:48:27:3c:ec:66:12:6c:c1:84:fd:29:08:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:54:E5:EB:A5:FD:B7:B8:1A:CF:DB:08:54:6A:DF:28:5C:D1:72:5A
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6c:9d:68:f9:5e:c5:38:8d:38:47:7a:62:1b:7e:2c:66:79:
7e:a1:92:c1:52:38:68:b9:e8:51:38:15:25:c1:26:17:26:db:
b4:20:8f:8f:1c:59:b4:91:c3:4f:1b:a2:94:12:6c:44:d4:9b:
64:bf:42:c0:74:80:fe:27:7e:d8:02:41:29:38:cb:d2:32:66:
60:b3:6c:b7:d1:08:a5:46:2d:d8:31:2a:ed:df:c4:42:6b:1b:
51:47:b3:1c:ad:74:e6:c2:31:8a:ca:50:de:1b:ca:f8:df:1b:
26:43:69:5d:79:b5:e5:2d:6d:c1:01:54:02:12:c8:2f:4b:fe:
3b:9d:b0:7b:cd:ba:04:aa:a9:6a:e9:8b:9a:ba:a2:1e:88:51:
e8:50:3e:b9:6c:3e:82:89:3e:c0:bc:9a:12:ec:f3:9f:e9:4c:
69:91:c6:a8:2d:3d:22:67:cd:86:81:36:bf:0c:e2:f6:d1:44:
9b:35:82:27:c7:a8:ab:34:0d:5b:52:9c:38:03:08:e6:d3:26:
0b:08:a9:e4:35:17:e0:54:ba:16:e3:94:e7:3b:02:b8:60:33:
12:59:ce:01:30:14:44:ad:e5:0a:d5:63:1f:9e:89:1a:7c:e9:
8b:f8:f3:fb:94:25:fe:3c:f9:d0:05:3e:88:a8:73:0c:28:d8:
21:0c:d1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:23 2025 by rpki-client