Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: H/CnueT9m8vID7zKh75qXz/GzgWLK/jF5GznBnsuBv4=
Subject key identifier: 9D:1B:77:27:ED:5F:9B:C7:AC:72:C1:51:28:80:4E:EC:F6:D3:19:B7
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 019A70A551FD1FA722D7C108E4858033276A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 02:01:13 +0000
Manifest this update: Tue 11 Nov 2025 02:01:13 +0000
Manifest next update: Wed 12 Nov 2025 02:01:13 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: uHEJxCkO6t4CVX9qozna3ErlvdpWxWBksGMiAR2EwTM=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:51:fd:1f:a7:22:d7:c1:08:e4:85:80:33:27:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Nov 11 02:01:13 2025 GMT
Not After : Nov 12 02:01:13 2025 GMT
Subject: CN=9d1b7727ed5f9bc7ac72c15128804eecf6d319b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:c6:29:33:ec:90:56:4d:7a:c5:80:c7:5d:
44:14:87:84:8e:29:c2:05:12:40:75:3c:4f:b6:07:
39:da:2a:af:01:c6:2c:17:b9:4e:89:63:9d:2a:18:
b7:e1:24:01:8f:e3:cd:a8:4d:e7:48:3b:93:86:3d:
fd:00:9a:53:6b:df:3a:01:52:1b:77:f5:0d:33:39:
dd:46:8a:dc:a4:a1:c0:aa:ee:bc:e2:64:7a:b2:5f:
29:2a:66:c0:51:02:2c:af:f6:c4:93:1b:68:69:a4:
47:64:c9:b6:62:81:51:ce:7d:fb:99:3a:a4:32:7a:
d1:7f:42:e7:d8:30:22:80:1a:fa:90:06:72:83:a5:
ae:f8:30:0a:35:ac:96:4e:7f:ae:39:84:de:52:4f:
f8:50:67:27:08:57:0d:da:21:f4:3b:1b:ba:21:01:
c6:7d:82:cb:3f:df:7a:19:cf:4d:49:73:62:97:f0:
87:26:fa:a7:f9:d2:9e:a5:7d:2b:cb:00:eb:29:35:
90:19:c1:16:2d:e1:e9:4b:18:73:35:fb:c5:38:f1:
04:bf:7d:3c:94:c2:2a:de:8e:fe:65:a2:e2:be:85:
57:14:b6:9b:8b:15:42:00:02:27:b0:1b:ce:d5:32:
6e:0e:ef:7b:82:d2:61:de:3c:bf:fd:b7:23:8d:49:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:77:27:ED:5F:9B:C7:AC:72:C1:51:28:80:4E:EC:F6:D3:19:B7
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5c:84:da:e3:e8:d2:6c:d3:84:c5:3f:a5:88:72:87:1e:92:
56:20:89:0d:33:22:52:5e:24:8b:39:8c:31:ce:33:ff:1a:08:
8b:f3:2a:6d:4e:63:f9:dd:b9:01:69:7c:13:dc:47:2b:36:fc:
4a:d0:c4:98:c1:28:bb:ba:db:f9:ab:8b:5b:da:13:f4:75:f7:
b6:a0:a9:e3:a3:c7:7e:23:cd:e4:21:da:88:5f:f1:aa:32:26:
1b:8f:2d:d8:0f:43:c5:e6:5f:64:df:59:03:c4:d0:80:2d:4a:
c4:a6:35:d3:9c:cd:36:40:dc:22:4f:e2:a3:15:cf:ac:d3:f6:
b2:f0:f1:6c:47:29:b9:eb:df:b4:97:05:59:b0:9c:71:1b:d4:
48:68:65:7e:3d:c5:98:b2:fb:c9:09:45:78:e6:de:e6:79:fb:
f0:1c:eb:87:fd:1b:d5:da:98:37:79:65:38:34:37:8c:37:51:
2a:33:79:42:05:38:b2:5f:b5:7a:55:77:2f:6a:7e:27:65:8a:
ba:c4:7b:bd:f9:99:54:d4:82:50:6c:94:ef:00:06:6e:b5:ed:
c4:29:8a:03:51:f0:c1:64:7e:9b:7a:df:76:11:69:25:c3:10:
43:72:d8:10:cb:22:6e:0d:5f:71:8f:83:09:79:37:be:33:95:
24:fe:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:02 2025 by rpki-client