Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: y+khM/o6bZlZ8QB1Pt+Z3GeTN68idFeJrl0acyqVmGE=
Subject key identifier: BA:38:96:C8:27:43:DE:97:3D:6B:92:30:B7:D7:7E:73:B6:3E:C8:B1
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 019A52635A4CB6384944D1FD52C2C5D60724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 05:00:34 +0000
Manifest this update: Wed 05 Nov 2025 05:00:34 +0000
Manifest next update: Thu 06 Nov 2025 05:00:34 +0000
Files and hashes: 1: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: fN46A9mVpynKQShGp9pyBNKi0pfFVAEqDHRCL92YqYM=)
2: sQyECaaIBBJuTWR_GAKRUGY2zLs.roa (hash: a7MHGEIK7Syni3DpYI0UPL4y49isayDX/P6hkOd4qq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:5a:4c:b6:38:49:44:d1:fd:52:c2:c5:d6:07:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Nov 5 05:00:34 2025 GMT
Not After : Nov 6 05:00:34 2025 GMT
Subject: CN=ba3896c82743de973d6b9230b7d77e73b63ec8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:de:5c:1d:46:70:60:db:52:74:6b:32:c1:
85:79:44:f1:da:a0:3c:f8:d7:d5:cf:c8:eb:93:7b:
18:56:3c:cd:ed:59:62:14:2e:69:4d:e3:8c:0a:d2:
e4:de:f9:46:3e:b7:d6:e4:aa:86:41:15:b9:c7:a1:
db:ee:e4:45:2e:5e:b1:1a:5c:a0:2a:3c:49:cd:cb:
67:e5:03:72:a8:68:2d:1f:3b:f0:7e:9f:47:81:14:
8a:5b:bc:c1:10:c8:98:bd:0a:24:1d:b8:0a:4e:92:
18:1a:ca:67:c8:02:20:40:5f:26:87:26:40:ae:83:
aa:9c:f3:77:e2:5b:c0:4c:0a:52:d2:b4:94:e5:58:
3c:f6:89:35:d9:23:33:0a:a2:6c:c7:f7:8a:6e:68:
25:bc:2f:26:d5:82:b3:0a:1c:f6:8a:4b:81:e4:9f:
16:0e:f5:c0:a9:b0:77:8a:36:d1:6a:77:82:9b:5f:
b3:4c:fc:c0:c5:5c:b9:7e:1a:81:38:62:e7:dd:ce:
ca:66:3c:f8:48:98:51:0c:d0:25:fb:a6:eb:e3:d9:
db:95:4d:ea:70:51:d0:b3:a5:60:85:29:ce:4f:f6:
62:c9:63:f1:5b:14:07:92:14:f3:14:56:ce:99:b1:
b1:7f:7a:34:f3:24:43:a5:aa:06:fe:31:08:56:e0:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:96:C8:27:43:DE:97:3D:6B:92:30:B7:D7:7E:73:B6:3E:C8:B1
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a6:c7:98:99:cf:83:66:bf:4d:9f:25:a3:99:10:bc:40:63:
57:0c:f6:73:eb:c8:e4:0d:ca:c8:a2:fc:a4:27:b8:64:42:d3:
7f:4c:3b:a1:9e:7a:e7:ea:b9:a6:73:cf:da:28:25:ea:25:a2:
1d:10:32:b3:d8:33:e2:55:4b:6e:e5:44:3f:dd:8d:80:51:ee:
d9:bb:f3:d5:ac:a7:a1:ac:9c:d0:1d:fd:5e:be:68:72:d1:ed:
1e:f9:e9:48:44:ed:f2:cf:42:ee:ae:57:37:26:f1:01:12:54:
e2:05:b1:9a:e0:cd:92:e0:c4:a3:cf:64:55:fb:54:22:a8:a2:
24:9a:b7:56:8c:0d:7c:c6:bf:28:04:ff:f7:dd:7d:8d:e2:ea:
5f:c0:79:a5:32:75:84:f1:58:ba:87:d5:fb:73:7c:63:39:78:
00:94:33:0c:85:c2:42:7b:53:5c:d3:ef:d5:5b:ed:c7:90:36:
43:25:12:4d:a3:bf:3b:d2:33:e7:bd:dd:f6:dd:88:38:2c:60:
5c:49:ca:85:47:95:1c:5f:0f:40:21:6d:2f:1f:26:98:4f:42:
f8:f0:9d:6d:a6:bd:ca:8f:dc:c7:6e:e0:10:e5:03:38:1f:7c:
15:e1:8c:bc:43:0b:ce:a0:74:a8:80:f3:5b:16:70:68:da:b4:
10:cf:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:59 2025 by rpki-client