Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File: 1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier: fKcYyyiIudPWhlZ0sVuSjGSfU+oLTe/on0UgdmjKoYw=
Subject key identifier: 51:B9:C1:DA:A2:83:13:F7:A0:79:EC:32:AF:CE:89:0C:6A:A3:FF:DE
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer: /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial: 019A4EF4FB856CB1503318E120091B6E433B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number: 037E
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: 6m1ab5zbz80qhTTjfbhBVIJIY8/q+AlUyuVxtA+GpNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fb:85:6c:b1:50:33:18:e1:20:09:1b:6e:43:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=51b9c1daa28313f7a079ec32afce890c6aa3ffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:a1:4a:98:f2:41:9a:f3:5c:31:7e:e6:3d:
8b:d8:75:e3:db:ce:9a:0e:4c:5a:eb:c7:b4:01:28:
60:86:1c:03:13:54:75:a7:84:82:bc:22:a4:bc:fe:
e7:48:d9:ab:bc:04:ff:79:08:db:4f:4e:b2:b1:19:
00:0c:2d:66:e2:29:cc:f3:7f:82:79:47:97:c8:e1:
d0:42:d5:9f:ff:60:16:b9:66:73:85:db:fa:0e:cc:
ce:d7:f4:9d:8c:a1:38:d2:6e:95:12:a0:10:12:8e:
af:ce:ff:08:df:29:86:5c:9e:0f:0b:cd:5f:f2:a0:
b0:de:fe:88:be:e8:ef:96:29:60:ff:93:9a:ad:ab:
14:3b:3b:85:1e:e8:17:61:8e:50:43:db:16:9b:d0:
80:99:81:c8:28:92:73:6d:0f:fc:9e:e4:b0:33:b9:
50:4a:90:ad:1c:37:d1:46:fb:d1:ad:35:48:f2:4f:
d0:99:a8:5c:d9:d5:d6:72:27:3a:bf:c3:f8:04:20:
45:15:27:9c:ab:dc:fd:6b:64:7b:c9:5f:39:0a:b1:
d2:ae:27:bc:0c:cb:33:3f:69:7a:75:7d:df:71:e6:
97:0d:df:ab:ca:83:54:92:e4:f9:a4:0f:1c:4a:19:
64:77:e0:b4:c5:77:0d:16:7c:73:4f:20:90:e7:d1:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B9:C1:DA:A2:83:13:F7:A0:79:EC:32:AF:CE:89:0C:6A:A3:FF:DE
X509v3 Authority Key Identifier:
keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:66:c8:3b:34:e4:72:9f:3c:5e:9b:72:52:c8:9f:6f:0b:7f:
61:31:ff:53:40:b3:db:bf:3d:82:54:91:6d:94:80:f6:39:81:
58:a3:97:d4:a3:1f:ce:a2:fa:01:da:ef:7c:b8:c3:e7:d6:d6:
46:c5:b0:9e:bb:a7:21:df:61:16:ab:91:cb:61:fa:9b:e2:45:
ec:e2:1b:c2:46:cf:3a:44:63:57:db:9e:4f:80:2e:58:dd:9e:
56:84:14:dc:47:10:2f:ca:69:b9:26:16:3c:7a:57:37:1c:5e:
57:7d:5b:19:93:ff:66:a5:70:d6:05:18:7a:ff:de:fb:89:f8:
a1:e5:6b:34:01:92:c4:b7:99:8e:1b:7a:f6:2e:96:e2:ea:31:
77:cd:b5:99:1c:a8:ce:33:2b:37:91:d6:d7:ae:e1:9f:73:72:
8b:2d:e6:4d:57:21:71:8a:1f:f6:80:48:88:bf:f1:02:d4:e1:
6c:a0:a4:fd:6b:28:49:a6:ce:59:1b:46:05:ec:ea:38:3b:6b:
a6:d9:cc:ee:fa:9f:c8:9d:9f:32:5d:f1:a2:2e:02:b1:7a:ed:
75:79:8e:57:30:37:24:de:eb:80:f2:6a:2c:eb:13:b4:8b:5a:
90:bd:aa:d9:ac:0f:32:d8:0a:7f:09:cd:77:62:b9:d8:75:11:
6f:cc:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:09 2025 by rpki-client