Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: eNQIb1ggf0Vz5pUU8I2Ya+beeiSkahAyN29C9pRk/zE=
Subject key identifier: 1A:82:A1:0A:6F:DF:F4:5C:0D:B2:03:FB:01:11:CD:BD:AC:F3:83:1D
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 019A5074F254672E86CA23796942A9F12481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 20:00:32 +0000
Manifest this update: Tue 04 Nov 2025 20:00:32 +0000
Manifest next update: Wed 05 Nov 2025 20:00:32 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: ozwnLWmyqNOoX1v1ku2yqXplnhtATq91HoK9DMcKqe8=)
2: crDjLxmHdcT6e7WUgga10c_NWik.roa (hash: 1lxS7SYauMom80FADoSQnixC1wX1TWhmXujQ5ZWWnRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f2:54:67:2e:86:ca:23:79:69:42:a9:f1:24:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Nov 4 20:00:32 2025 GMT
Not After : Nov 5 20:00:32 2025 GMT
Subject: CN=1a82a10a6fdff45c0db203fb0111cdbdacf3831d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:fa:1b:47:8a:ce:78:6c:08:43:c3:bc:0d:
e5:b0:56:7e:cb:b8:4a:dc:23:9f:89:30:0a:b2:3c:
4f:8b:6a:48:3c:de:58:d9:c0:fe:12:c4:b2:ae:68:
d0:b9:b8:ab:1c:e2:9a:a4:77:e6:80:a6:5c:8d:92:
ae:d3:ba:ab:95:9b:2f:d4:35:e2:fd:af:cd:c3:3b:
b2:e1:4e:c3:11:12:d4:1a:54:aa:e5:f3:ff:32:5e:
41:51:3a:96:69:a8:f5:70:75:0f:b0:e7:da:93:a6:
97:e1:87:8a:53:46:fb:97:1b:bb:a8:bf:1f:c0:17:
a7:c7:12:cd:5e:ba:3f:e1:bf:55:c2:1d:86:52:43:
60:02:50:5c:8f:8d:53:e2:2e:0b:8b:2e:90:1b:69:
45:b8:c1:d2:8c:8d:5b:90:6d:de:73:b8:af:6b:13:
11:34:50:ab:cb:55:c6:48:9f:6b:74:f0:cc:b7:dd:
08:34:98:4e:b3:fc:c3:a4:17:37:51:52:6c:a0:9f:
e5:e0:34:d7:8a:6f:ab:77:c7:bd:33:d3:04:9f:62:
a4:2e:f3:d2:cd:2f:d5:9b:04:56:d2:3a:c4:b0:3f:
0f:2f:be:49:63:a4:3c:53:aa:42:ce:21:a4:05:48:
76:f8:95:af:c7:c3:ae:36:94:fa:f5:30:02:8e:e7:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:A1:0A:6F:DF:F4:5C:0D:B2:03:FB:01:11:CD:BD:AC:F3:83:1D
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:13:9a:80:ac:ec:45:21:ab:be:28:6c:a0:f9:21:cf:c1:a7:
9c:b8:72:dc:63:a8:5e:31:d5:3e:bd:86:77:c3:21:55:65:8f:
7f:2b:bf:69:5c:17:5f:dc:6a:12:96:61:80:ae:ed:3a:78:a2:
62:90:11:d6:07:7b:35:f4:59:d6:3d:81:85:94:2c:22:02:46:
6c:09:f9:ef:d4:bf:d8:eb:2a:25:5a:ce:46:71:c2:cf:34:7a:
12:22:58:c4:f6:31:2b:73:da:ee:9c:51:3a:76:98:75:0f:9d:
2a:97:88:52:ba:a7:2f:d5:32:1e:a8:f2:a9:9a:31:05:3e:85:
03:d4:af:be:fe:6d:60:ca:05:ee:18:1d:d9:ae:ae:6b:66:60:
73:bb:04:8c:ff:e7:05:32:44:1f:df:24:79:8f:22:b4:f3:46:
b1:e2:cc:13:4e:cc:b9:66:86:6b:af:aa:36:9d:7f:c7:47:eb:
d0:04:62:5c:3d:f7:31:83:b9:00:40:78:56:75:29:0e:9a:89:
6e:f8:a5:6c:3e:fa:46:de:9a:72:77:fc:fe:05:dd:ad:86:4f:
f7:9d:2d:b5:cb:c9:30:0c:12:c2:ca:e7:87:25:5b:5c:6a:b6:
b3:d4:86:4f:fc:cd:b2:c7:b9:6d:49:ab:94:2f:06:e8:c4:3d:
1b:53:ea:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:27 2025 by rpki-client