Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: k5yfUrdipJtOlL5o/mP/uQoKRHWkf42CQhSu6MikvY4=
Subject key identifier: F8:77:CD:80:5C:9F:AC:F6:13:DF:97:DC:C4:CB:AF:7B:6A:61:6B:B4
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019A4E4F5CE30623282A86CE15B9FF068D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 10:00:15 +0000
Manifest this update: Tue 04 Nov 2025 10:00:15 +0000
Manifest next update: Wed 05 Nov 2025 10:00:15 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: Vce/CfhzvFXpcE9n5l0AGOVEtSyZVw6rYAK1fb100Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:5c:e3:06:23:28:2a:86:ce:15:b9:ff:06:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Nov 4 10:00:15 2025 GMT
Not After : Nov 5 10:00:15 2025 GMT
Subject: CN=f877cd805c9facf613df97dcc4cbaf7b6a616bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:6a:ce:c5:06:2a:40:e9:ba:bb:81:a9:ba:
90:18:1b:36:da:6a:99:f1:af:5d:10:3d:7e:c6:87:
b5:2c:56:9e:4c:e0:9b:4e:c8:68:f9:13:3b:a9:b3:
a3:66:5b:85:62:1a:c8:67:59:c9:80:99:b0:f9:8b:
7c:16:22:4d:05:66:ba:59:e3:56:97:c1:b0:4b:a8:
13:09:c1:66:ed:ba:d4:86:3f:e6:93:7a:16:44:2f:
30:8d:df:71:b7:ee:02:ef:27:c4:de:7e:53:fd:36:
9a:b5:6a:84:7f:8f:d2:29:62:b8:1e:3e:07:45:87:
5b:df:db:d5:19:13:29:50:77:8e:d1:ac:06:c8:9f:
2c:6d:e0:d1:24:b8:0c:5e:36:90:5d:b4:99:14:0a:
ab:11:76:7d:d7:5d:81:f7:ae:10:25:00:81:49:e3:
20:ff:c7:20:3a:6a:fe:0e:b4:a4:1c:db:73:89:c7:
98:81:97:80:5e:02:33:17:9b:7c:be:ea:49:03:75:
7e:2c:c6:ed:ac:9e:e6:53:98:38:d2:b8:ee:c3:17:
d6:da:4c:2d:3f:c8:19:4f:51:ac:65:2b:34:02:7e:
a1:40:3f:34:68:1f:c5:40:f2:cb:3c:a7:0e:53:fc:
6f:be:c4:5e:7c:b9:4a:da:aa:30:0c:33:41:aa:d0:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:CD:80:5C:9F:AC:F6:13:DF:97:DC:C4:CB:AF:7B:6A:61:6B:B4
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d0:9e:e4:07:9e:f0:59:7f:52:16:50:64:b0:9e:f4:a9:d5:
38:ac:a8:35:e7:aa:26:5d:93:82:99:50:6f:09:da:64:3e:16:
2f:55:fd:17:7c:0c:8e:bb:e8:ac:01:2e:ba:41:3b:13:00:ac:
bb:96:cd:55:12:a8:3d:e4:fb:f8:fa:25:88:2c:fd:64:77:91:
12:1f:2d:87:21:31:9b:a2:16:74:a4:e1:d6:81:af:9f:2c:d7:
f3:62:0d:50:a2:1f:a1:73:01:6d:94:ec:58:d8:9f:f4:38:21:
e7:01:6d:1d:a4:01:b0:4d:81:21:8e:56:c3:52:05:f0:62:4d:
ad:f1:d6:65:f7:b0:e4:2c:9a:26:c1:b0:8b:12:2b:a0:8a:d8:
28:12:6d:29:6c:ed:13:84:6d:c2:3e:42:20:dd:6b:f6:34:75:
91:13:04:9d:30:19:95:f8:f2:e0:cb:bd:3d:db:6f:5b:45:da:
b6:7c:5e:a8:1f:b2:e1:8a:ba:c9:bd:50:3d:c3:e3:59:5a:1f:
11:96:1d:e7:a8:c8:b1:a1:bf:ec:49:59:a8:dc:c4:02:93:ef:
ab:b2:9a:a3:3d:aa:49:7d:61:c8:11:0d:b0:98:f5:9c:33:9f:
b8:d7:ee:46:84:31:5a:c9:a3:ef:c5:4c:38:57:89:c6:3d:e8:
a6:17:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:22 2025 by rpki-client