Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: Ix6LFzkccfrB3Ot1OmWZvuqFhMw9z00fFmhKeyZNvMc=
Subject key identifier: A9:25:29:35:1D:43:A7:74:04:52:70:AC:FC:02:65:DF:90:0F:D8:5A
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 019A7226670DBA028D0014B21684BD51515F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: 6e0dTvUIx+XpkggrDuI+RF+d9BZdmoxERA656X047RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:67:0d:ba:02:8d:00:14:b2:16:84:bd:51:51:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=a92529351d43a774045270acfc0265df900fd85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:50:dc:f4:19:49:b8:65:56:09:d6:06:b3:
21:d6:e9:fd:15:ae:ff:10:03:81:b2:b3:86:33:86:
01:b0:67:2d:f6:41:45:e7:0f:99:8e:9d:30:fc:83:
c4:f8:f9:41:5c:8e:11:c4:19:19:41:a8:fe:54:67:
6a:4a:95:8c:f5:c4:68:65:3e:21:04:a4:b6:44:bd:
3d:30:bc:c3:73:b5:22:87:3e:b3:8e:d0:a5:b2:62:
e5:d0:27:bb:47:2a:1c:d8:0b:f0:2f:38:e2:f2:d8:
d3:c4:21:71:35:d2:1f:11:e4:81:c1:65:4d:e3:09:
81:fe:19:c7:13:f1:af:d8:13:78:bd:42:fc:7f:36:
bd:58:00:60:fe:c7:83:d7:03:07:2e:68:1a:66:02:
b1:b7:41:ec:a1:a8:2e:06:b2:16:f6:b3:3d:73:10:
95:a3:60:b8:48:24:13:86:61:15:b8:cf:60:bf:c6:
a3:f6:a5:af:7c:22:cf:6d:15:f7:41:f2:46:fa:15:
cd:18:d0:3c:0e:d9:da:5f:03:bc:d9:d4:e5:31:b1:
2f:16:18:fc:2e:55:fc:94:71:10:0d:2c:c2:59:4e:
f7:3e:78:cd:0f:45:ee:81:98:ac:1e:96:a0:9d:12:
5c:76:69:18:79:c0:91:3b:0f:60:ca:9c:7a:a2:da:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:25:29:35:1D:43:A7:74:04:52:70:AC:FC:02:65:DF:90:0F:D8:5A
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:43:29:80:c1:c5:c6:33:3a:99:df:4e:59:3a:27:0d:96:77:
9e:36:89:33:8c:83:e2:a7:fe:ae:10:1d:33:c2:bb:f6:4a:a3:
4c:ce:54:4c:09:6b:0d:b0:9e:97:59:8e:bc:db:18:c4:d5:d7:
2e:7d:b2:1f:37:b1:91:85:06:60:e2:d0:01:9c:b1:72:5a:6e:
35:79:46:c6:6d:23:b6:d9:62:29:07:d5:0d:b9:df:62:d7:0b:
57:d6:0d:88:5a:5a:68:3e:bc:6e:be:62:ab:a8:b9:59:ac:0c:
dc:14:eb:81:f6:fd:b7:b9:96:21:1a:b2:e6:ff:4d:3c:89:25:
0d:3f:8c:5f:f3:06:da:f9:ef:77:8d:65:ad:11:3b:8c:2a:ce:
18:2b:6a:5c:3d:dd:8c:03:86:32:75:a3:6c:f1:7d:4b:fc:fc:
cd:74:4c:5c:7c:9d:ab:e1:1a:b9:0d:ba:4f:a2:4b:2a:1c:e3:
92:55:61:13:1e:4d:ef:3e:ab:93:3d:3c:84:cc:83:42:8d:9b:
67:ce:5e:86:ae:d3:b9:be:8b:e6:76:70:61:e6:29:8f:e5:3e:
eb:ad:b7:21:d2:ba:2a:33:87:4b:7f:1e:88:ee:8f:56:bd:95:
26:0e:ed:45:9a:be:46:4c:8e:63:d5:59:4f:d0:bc:eb:b6:3d:
a8:3e:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:14 2025 by rpki-client