Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: 3hMN7yTZ9GU7aJ9dygxvaWE6TyiUQHFS0QEPpa0sIMc=
Subject key identifier: 4E:F0:6B:92:47:10:19:F3:B7:D5:BA:44:BC:3F:99:7B:C4:88:67:E3
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 019A4E189A7ADEA9C8A5154C2A0D02DCDCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:26 +0000
Manifest this update: Tue 04 Nov 2025 09:00:26 +0000
Manifest next update: Wed 05 Nov 2025 09:00:26 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: PwtjnNqj1xbIPrDZf6fu0vKw6zzR+NG17A0K2tHdzFE=)
2: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (hash: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9a:7a:de:a9:c8:a5:15:4c:2a:0d:02:dc:dc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Nov 4 09:00:26 2025 GMT
Not After : Nov 5 09:00:26 2025 GMT
Subject: CN=4ef06b92471019f3b7d5ba44bc3f997bc48867e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:ed:ee:b0:02:03:0a:1d:dc:eb:71:f4:89:
ef:09:37:4c:1a:3b:03:ca:87:e7:56:61:f2:f1:e6:
1a:9a:92:f8:dc:57:9f:e9:92:fc:bb:6f:1c:8e:ec:
a3:ae:64:80:66:7e:de:cb:31:2e:42:c1:11:d1:5f:
44:c1:24:95:14:02:f0:f0:a7:05:15:43:64:68:69:
64:07:1f:52:78:20:ef:4d:4c:a5:1f:81:aa:d1:40:
c5:3a:94:62:9a:d2:8f:f8:b9:9c:31:ad:7b:e5:93:
ad:9d:03:a4:ad:60:55:96:f9:9f:bd:07:df:ea:5a:
be:24:f6:7b:ef:bc:4e:a0:46:b9:62:f0:fa:57:b2:
12:43:85:eb:b9:5a:ef:5e:d4:9d:c2:ef:e0:ef:1b:
be:1f:cd:ab:61:42:1a:f1:97:e9:8d:f6:6f:21:fe:
c4:55:f5:a0:4c:43:6c:68:b9:08:f3:51:18:f6:57:
75:6f:31:29:16:83:08:7f:f9:5b:52:db:f0:9a:f9:
17:53:8b:5e:b0:50:b6:99:94:db:aa:1b:63:53:c9:
c7:65:9e:40:f0:f4:41:3b:b3:3f:da:8c:97:05:7f:
1e:c0:c2:17:2e:94:ca:40:1d:55:44:02:5f:99:30:
99:3c:5d:6f:68:3d:c8:03:76:87:f6:8b:03:96:89:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:6B:92:47:10:19:F3:B7:D5:BA:44:BC:3F:99:7B:C4:88:67:E3
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b3:9c:2f:be:1d:84:18:a5:9a:e8:65:20:26:81:3f:e8:e5:
2e:79:2a:c3:8a:ec:fd:db:ea:40:3b:03:2b:a0:9b:33:9a:8a:
a0:9c:39:30:68:a5:5a:7d:e7:df:94:f4:86:af:bb:56:ce:f1:
12:94:e8:64:f8:d2:91:74:03:bb:0b:35:d4:03:77:e9:a9:98:
ff:30:06:36:42:b3:51:16:e5:96:f5:5a:68:ce:42:30:71:47:
7b:e4:96:04:16:e4:04:d3:48:d1:d6:7a:14:55:4f:34:8d:a7:
33:38:13:57:03:d3:d9:0f:fb:92:07:84:87:26:0a:58:b6:15:
00:6d:16:02:1b:be:42:73:d2:45:ed:a6:99:e0:23:2e:ed:6b:
81:87:a2:28:dd:f9:f6:da:f8:cb:e0:7e:a4:62:1f:d6:35:a5:
da:93:27:e2:fd:0d:d1:d2:2e:73:8e:3a:56:52:a9:b7:37:6e:
f3:a1:f5:b9:90:3f:a7:41:55:a5:42:ba:bd:a7:01:55:1a:22:
c3:eb:ab:fb:5f:6b:70:07:74:37:42:49:12:8e:e0:99:1a:53:
b4:f4:59:2c:48:bb:12:dd:90:bd:fa:b6:9c:66:b7:f3:51:28:
9d:fd:c1:ee:1a:71:89:56:ac:8e:15:ee:e7:10:6b:c8:69:61:
36:de:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:11 2025 by rpki-client