Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: wn4TdwjVTEahFMu7G4RsbhtUiFnE1q62ojnqc+5DjV4=
Subject key identifier: 1B:BD:7B:74:2B:BD:B2:85:A6:68:8D:38:CA:26:DA:36:48:30:6B:81
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 019A4EF495851AFE0F1D6B58FF86BE61998E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: qR8XKXmxS9FDwTe33K93Xl9HbLjfi++YJ7eOHh+sROo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:95:85:1a:fe:0f:1d:6b:58:ff:86:be:61:99:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=1bbd7b742bbdb285a6688d38ca26da3648306b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:ba:e9:77:47:2b:ee:0c:ed:0b:90:93:93:
ad:6a:ca:29:93:2e:ea:e6:e2:ba:07:b1:4e:3a:ab:
a2:f1:bf:b8:12:1b:5d:ff:47:b0:72:7a:f1:73:0f:
bd:1b:95:8b:7e:cd:cd:ad:8b:91:f8:5c:68:b2:43:
03:19:b5:81:57:d7:d6:f8:54:0b:f9:3e:9e:59:d8:
19:2d:36:4d:db:c2:c0:6f:79:69:da:f4:1e:79:bb:
42:bf:64:8c:5b:cf:a2:4e:7a:80:80:d3:f7:19:3d:
09:d1:2a:b2:e4:e8:e8:6a:ef:da:f8:49:af:06:bc:
8d:95:f7:d8:d8:86:40:93:0a:89:04:ff:2d:3b:24:
a3:cf:db:15:e3:65:98:e8:eb:9a:31:ba:d7:40:59:
3b:0e:9c:b7:19:fa:4f:3f:46:9a:46:d9:a7:a5:11:
3e:63:44:12:74:16:d4:bc:68:e7:d2:55:6c:15:f7:
d0:12:c3:81:47:a9:70:0f:3c:71:15:9f:14:74:19:
2f:9e:e3:d7:14:53:fe:d4:34:f6:45:8a:f4:6e:db:
24:e0:98:b8:09:e0:36:40:6e:74:15:55:e2:c6:b7:
a1:07:d3:04:a0:4f:1c:2f:52:68:59:10:d8:11:63:
37:6a:81:68:5a:94:a9:f7:6c:31:d8:13:aa:98:4a:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:7B:74:2B:BD:B2:85:A6:68:8D:38:CA:26:DA:36:48:30:6B:81
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:38:60:1a:db:1b:33:95:28:48:64:6f:e1:5b:b1:91:3b:
9c:73:42:4d:01:88:af:2b:44:86:db:a7:be:89:f7:d2:ee:c3:
3f:a1:f2:c8:22:f4:fd:74:b8:0e:ea:5e:f2:ad:aa:5e:92:9e:
51:e0:26:fa:38:f1:3b:b5:63:e1:f9:e7:7d:46:5f:49:8a:f7:
cd:b7:4d:cd:16:1f:9d:e6:7a:8e:52:71:40:89:10:96:a7:7a:
98:60:0d:ea:d1:90:90:a5:24:e4:66:dc:10:96:88:d8:c2:d6:
43:5e:07:c4:e1:49:70:3b:4c:00:39:f3:72:74:8a:e5:da:d3:
d9:90:0b:63:e4:28:e4:7e:13:17:3b:89:c8:d2:df:ab:00:cd:
c9:ab:a3:e7:72:bc:da:16:1e:53:10:20:49:f1:39:b9:6c:2a:
21:32:f4:52:89:a5:33:97:d4:1f:5f:9a:d6:82:1e:55:f9:d1:
87:b4:7a:dc:16:e5:f9:37:f3:57:de:b2:e7:7e:2d:05:df:5f:
d1:91:f5:d9:e2:10:bd:58:63:06:c6:95:fd:9a:bc:8f:d8:5e:
29:d8:f5:4f:4b:a8:2d:70:73:8d:dd:6f:4e:55:b8:20:74:5b:
88:d4:92:4b:15:fd:30:9b:d2:b2:ea:49:8f:d4:48:57:58:bf:
fc:7e:72:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JWFGv4PHWtY/4a+YZmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTI2YTg1MTIxM2U1YTYzYWMyOTQ3OGVkMTM2NzA4Mjlm
Y2ExYTUwHhcNMjUxMTA0MTMwMDQzWhcNMjUxMTA1MTMwMDQzWjAzMTEwLwYDVQQD
EygxYmJkN2I3NDJiYmRiMjg1YTY2ODhkMzhjYTI2ZGEzNjQ4MzA2YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTa66XdHK+4M7QuQk5Otasopky7q
5uK6B7FOOqui8b+4Ehtd/0ewcnrxcw+9G5WLfs3NrYuR+FxoskMDGbWBV9fW+FQL
+T6eWdgZLTZN28LAb3lp2vQeebtCv2SMW8+iTnqAgNP3GT0J0Sqy5Ojoau/a+Emv
BryNlffY2IZAkwqJBP8tOySjz9sV42WY6OuaMbrXQFk7Dpy3GfpPP0aaRtmnpRE+
Y0QSdBbUvGjn0lVsFffQEsOBR6lwDzxxFZ8UdBkvnuPXFFP+1DT2RYr0btsk4Ji4
CeA2QG50FVXixrehB9MEoE8cL1JoWRDYEWM3aoFoWpSp92wx2BOqmErtCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu9e3QrvbKFpmiNOMom2jZIMGuBMB8GA1UdIwQY
MBaAFJdSaoUSE+WmOsKUeO0TZwgp/KGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQt
ZTJkY2U5M2E0NTI5LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQtZTJkY2U5M2E0NTI5
LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBQ4YBrb
GzOVKEhkb+FbsZE7nHNCTQGIrytEhtunvon30u7DP6HyyCL0/XS4Dupe8q2qXpKe
UeAm+jjxO7Vj4fnnfUZfSYr3zbdNzRYfneZ6jlJxQIkQlqd6mGAN6tGQkKUk5Gbc
EJaI2MLWQ14HxOFJcDtMADnzcnSK5drT2ZALY+Qo5H4TFzuJyNLfqwDNyauj53K8
2hYeUxAgSfE5uWwqITL0UomlM5fUH1+a1oIeVfnRh7R63Bbl+TfzV96y534tBd9f
0ZH12eIQvVhjBsaV/Zq8j9heKdj1T0uoLXBzjd1vTlW4IHRbiNSSSxX9MJvSsupJ
j9RIV1i//H5ylg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:58:47 2025 by rpki-client