Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: 3SfZhmabrRy5/ydPxLv0yw1Vo+eLqV87yZgxJct+3d8=
Subject key identifier: 65:5F:5B:BE:D9:FE:35:61:C6:54:DE:63:B2:D3:B6:F4:1B:C3:30:74
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 019A4E4F51FAC29BBFA8846825407119BBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 1088
Signing time: Tue 04 Nov 2025 10:00:12 +0000
Manifest this update: Tue 04 Nov 2025 10:00:12 +0000
Manifest next update: Wed 05 Nov 2025 10:00:12 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: V+AE/9vQpH+VCKE89sTJoRsUYrzrBOkMHIBkAYSI7ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:51:fa:c2:9b:bf:a8:84:68:25:40:71:19:bb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Nov 4 10:00:12 2025 GMT
Not After : Nov 5 10:00:12 2025 GMT
Subject: CN=655f5bbed9fe3561c654de63b2d3b6f41bc33074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:14:1c:3f:fe:fd:23:c8:a6:31:50:b2:0d:
b8:da:78:74:a6:d9:7c:2c:d8:cd:a9:18:bc:16:8a:
a5:7f:f5:e4:94:7e:98:20:a0:72:52:a2:ba:7f:40:
0e:25:71:42:8d:53:22:83:c9:62:02:7c:b3:cb:10:
9f:98:2a:9f:40:cb:c0:50:84:db:1a:96:ef:ed:5f:
ed:bd:12:65:cc:10:ab:8a:6a:4d:a6:f9:67:4b:a0:
5d:df:cb:0b:69:4b:46:ba:61:22:21:2b:1c:ef:1b:
6e:ab:04:d2:a4:a0:41:cd:cf:8e:74:be:db:1e:56:
6f:13:a8:a5:0b:0f:ce:27:b3:e6:7f:f1:30:b9:03:
a6:1c:1a:f0:5a:cb:e8:cc:e2:29:78:f3:dd:f5:31:
c7:1a:38:c2:04:75:c0:4e:41:5c:88:e5:ff:3c:20:
c6:47:81:86:60:7e:4e:f4:f9:6d:0a:91:36:31:24:
bb:be:94:c1:e0:7c:15:8f:44:a0:f0:09:5d:df:67:
ef:d8:43:f0:91:e4:8e:be:4c:a0:59:6d:08:bf:dc:
c4:82:37:2b:74:45:6d:2d:fe:1f:30:70:b0:20:6d:
f9:4b:d5:cb:90:81:46:f3:9a:9a:8f:97:39:2f:c8:
ce:6c:ce:80:99:5c:11:86:5d:1c:cb:80:5c:ff:b3:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5F:5B:BE:D9:FE:35:61:C6:54:DE:63:B2:D3:B6:F4:1B:C3:30:74
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:c0:3e:63:4c:5f:79:28:52:19:c4:ca:5c:32:4b:24:7c:
da:c3:e1:2f:36:d4:bf:d0:00:1a:ae:b8:12:a1:c6:b6:46:7a:
27:00:a7:39:94:14:52:95:b0:f3:e5:ac:ee:da:72:1f:be:f9:
e3:d2:9b:7c:5e:c9:d5:36:2c:49:4a:d8:9e:2a:43:89:25:cb:
53:2d:1c:bf:e3:f2:fb:e3:96:86:60:91:63:e6:9d:b5:ec:ad:
87:ba:04:e5:02:76:3d:88:0f:df:38:c5:a7:f2:50:8a:83:3e:
ce:40:ef:79:f8:a6:2e:82:ba:bf:0b:f4:11:c9:d3:11:76:c1:
05:7c:41:a7:78:06:9f:b6:e9:d7:ce:82:78:bd:42:f4:12:51:
e6:ce:1b:50:c6:5a:ec:48:d4:38:99:95:74:97:a3:45:20:e1:
d2:9f:b7:91:18:e4:c7:38:07:a7:bd:bb:e2:f2:9b:71:cb:bd:
0c:02:dc:67:fd:9c:c1:c4:d1:e2:f2:a3:52:99:46:47:f5:e6:
27:cf:90:34:39:d3:aa:1a:cb:d2:0b:bf:93:fa:a6:e2:98:4b:
63:fb:3e:00:f2:3c:e3:96:a2:0f:96:83:75:83:69:0d:91:00:
88:7a:45:26:88:e5:96:ca:ea:aa:95:b1:ad:d0:0f:e7:94:e3:
ce:c0:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:25 2025 by rpki-client