Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: 25V3UwzlZBiwQvdJscFI3I+UaTCcbbGoS274qMJzRLI=
Subject key identifier: CD:29:DF:D8:96:E4:DA:18:1D:34:C7:AB:D2:26:A7:BF:00:AC:9A:07
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 019A52633FFEAEA980285E5FAB35D3A33D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0DF7
Signing time: Wed 05 Nov 2025 05:00:27 +0000
Manifest this update: Wed 05 Nov 2025 05:00:27 +0000
Manifest next update: Thu 06 Nov 2025 05:00:27 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: lo7kj1C8AbiojmVDj7zNn86yl2ppFXAYudJFR7I+1fk=)
2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:3f:fe:ae:a9:80:28:5e:5f:ab:35:d3:a3:3d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Nov 5 05:00:27 2025 GMT
Not After : Nov 6 05:00:27 2025 GMT
Subject: CN=cd29dfd896e4da181d34c7abd226a7bf00ac9a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:a6:18:11:ac:d6:aa:92:f5:8f:90:48:3a:
dd:8f:05:c1:cc:81:9a:bc:22:cd:b0:64:2d:93:90:
9c:32:b5:54:49:40:1d:5f:7c:f3:0b:3e:d1:74:46:
c1:c2:1c:82:a3:53:19:2f:2a:a4:e8:5b:43:00:a8:
ad:fe:72:19:5a:8b:46:35:1b:6c:fc:f0:32:26:af:
42:52:63:60:6b:6e:03:26:93:d1:c8:74:39:87:a7:
37:57:04:83:ac:3a:f4:eb:07:8b:2e:a2:00:b0:c6:
f3:df:3d:f7:91:01:d5:7c:7c:ed:7e:d5:64:bf:fe:
0b:78:28:9c:d4:d9:f4:a1:4a:4e:ec:ac:3f:87:0f:
2b:8a:69:43:a0:b4:b6:bc:94:68:09:f1:c4:d2:f5:
45:53:81:79:b3:b4:60:72:77:d3:25:fd:27:18:66:
03:4a:b2:c9:7f:15:a7:a3:a8:09:88:f7:f9:44:46:
0b:bb:df:77:20:95:e2:89:3f:88:44:b3:0c:78:4e:
20:00:5f:96:21:cf:14:dd:00:18:e6:25:97:a9:c9:
e8:07:83:51:b5:69:38:c8:2f:20:84:90:f3:b6:47:
1a:b4:aa:ff:95:e6:0c:f8:94:e6:db:68:0f:17:a5:
a7:0b:b9:e0:46:d0:21:23:dd:ff:0a:dc:c4:ee:b8:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:29:DF:D8:96:E4:DA:18:1D:34:C7:AB:D2:26:A7:BF:00:AC:9A:07
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4f:bf:4b:33:94:f3:5b:6e:15:6a:67:4c:b9:08:d4:8f:9c:
5c:b4:c2:93:56:8c:88:17:cb:08:34:03:a6:99:99:4d:e3:ec:
08:34:7d:2e:08:12:b1:09:38:9c:da:0d:f2:d4:df:f8:c4:65:
a6:b8:e1:c3:ea:25:d2:27:05:83:0c:1b:ee:38:81:7a:5a:6f:
3a:d1:da:91:0d:85:fc:98:42:d8:fe:ee:d0:c1:77:0d:3c:c4:
86:88:95:08:9a:26:f3:f9:39:06:85:9a:58:4d:99:2c:74:e9:
14:71:17:ae:b3:f8:4b:4b:02:d1:ff:09:14:1f:a5:92:37:68:
28:22:43:2d:b8:5c:fc:79:c0:80:45:97:f4:dd:00:fd:a1:74:
08:92:f8:79:10:8c:d5:0a:0e:6d:96:c4:ce:90:99:0e:3c:83:
d9:29:e6:23:b9:c0:b4:af:fa:2d:c5:0c:2a:f2:a4:57:82:9b:
c5:d5:a9:5e:bb:da:f0:79:81:cf:9d:2b:63:77:e2:19:f2:8b:
5a:41:28:59:91:2b:de:7c:af:c4:aa:98:e8:f5:c5:db:fe:19:
14:fb:00:d5:3e:a6:c5:39:fb:d6:9e:d9:3d:40:ae:b2:b5:16:
35:15:a2:7d:4d:c3:00:a7:45:ec:eb:3f:f9:37:fc:17:83:19:
27:2b:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:36 2025 by rpki-client