Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier: M9TjqCw1/25VQ9Z9CxuUdymUU43fRCOYX87XPD8dOhs=
Subject key identifier: 0D:EF:3D:B7:A1:9A:B3:6A:D9:01:73:52:9D:54:26:D5:21:CF:3C:DC
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer: /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial: 019A5752A8F2C63DF0A9C18929B152433A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number: 71
Signing time: Thu 06 Nov 2025 04:00:26 +0000
Manifest this update: Thu 06 Nov 2025 04:00:26 +0000
Manifest next update: Fri 07 Nov 2025 04:00:26 +0000
Files and hashes: 1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: GFrrEusibKNItbvnfrTroqK3JyhHCn9s7fZHQPxUK/4=)
2: Ito4OsKdOYk_0Vr5IgYqw7oQP_k.roa (hash: t2JFfBVsPDvYQ98nc/aNec9j3fYa1vwbxO3EDDVKTUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:52:a8:f2:c6:3d:f0:a9:c1:89:29:b1:52:43:3a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Validity
Not Before: Nov 6 04:00:26 2025 GMT
Not After : Nov 7 04:00:26 2025 GMT
Subject: CN=0def3db7a19ab36ad90173529d5426d521cf3cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:57:b3:3c:56:84:2c:c8:5e:f9:ed:d2:9b:
17:bc:36:83:13:bc:48:e2:bf:46:8d:42:e6:ad:58:
6e:bc:0f:e2:a9:3d:75:d2:d1:02:a8:a4:e8:9d:97:
88:12:e6:fd:3b:3d:fb:87:26:12:1f:0b:b4:0c:b3:
9d:61:34:bf:35:65:65:8a:3d:8f:31:d6:d8:5b:d0:
e1:68:a6:f2:d8:5f:1d:91:84:a0:23:22:0f:52:52:
35:14:bc:fd:b0:af:da:ae:07:8d:5b:b6:4f:6e:45:
b3:ea:d0:4a:3a:a4:8f:bd:3a:9c:61:58:cc:e6:d2:
ff:a5:3f:a2:7b:5d:b0:5c:9b:ee:21:64:cb:02:82:
85:a7:07:ea:03:79:4b:9a:48:cc:22:5c:a4:32:ab:
f1:ea:47:3e:54:46:7b:cd:d2:2e:d5:0c:21:d7:74:
37:5c:38:63:23:c6:12:d5:63:51:73:38:1a:e9:00:
86:f1:13:bc:b1:ed:53:0b:bf:aa:f1:d0:74:16:f5:
1c:8f:87:cf:50:44:1e:2d:c0:2b:20:d6:cc:ff:83:
63:ff:a8:89:f1:a0:2a:e3:67:cd:56:31:16:f6:10:
70:14:fe:6d:76:06:8b:32:e2:a8:08:b4:70:bb:e0:
fa:c1:c8:3a:c5:fb:2c:0c:d3:a7:35:bd:6d:c1:d9:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EF:3D:B7:A1:9A:B3:6A:D9:01:73:52:9D:54:26:D5:21:CF:3C:DC
X509v3 Authority Key Identifier:
keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:43:3f:0a:ca:4c:b1:ea:73:11:75:72:05:b8:5e:9f:34:f2:
d3:4e:f5:b2:1b:c3:83:b0:32:92:d3:5f:fa:24:0b:d5:2f:37:
a5:c5:ef:2a:70:eb:19:4c:83:af:c6:6d:c8:86:01:a7:c4:1c:
ca:e5:32:de:45:ee:a4:51:99:5a:39:cc:46:09:c3:18:99:15:
2a:7d:90:ac:72:4a:ae:7e:de:eb:7b:c9:09:2f:4e:ba:2d:09:
6f:3f:03:1c:95:a4:61:3f:c0:fc:c8:71:6b:64:58:90:18:f2:
56:5c:2a:65:32:b5:96:07:50:40:c1:b4:a3:c2:77:6a:27:e3:
30:b4:5a:34:c2:1e:8a:38:77:4f:bc:ab:f2:e4:5a:01:20:5e:
97:5c:91:d9:41:ac:d8:69:31:47:44:d6:8d:d0:15:d7:5e:55:
58:25:fb:25:fd:b1:b1:be:f4:e3:61:3e:f6:70:f3:5e:aa:f7:
74:82:59:39:88:81:89:4e:c8:ab:8a:2a:81:bf:a4:4c:a9:7f:
68:9b:c2:4b:83:9a:39:33:d4:38:bf:2b:58:e4:58:16:e0:05:
99:fb:1c:46:1c:ce:48:e8:39:32:d8:bb:2e:af:ed:3a:be:dd:
ec:25:79:0c:81:aa:91:f7:2f:14:e7:e1:7f:ef:d4:c9:cc:33:
fa:5d:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:28:32 2025 by rpki-client