Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier: I9d7BvQhbLmt+E81nr5p0lm8PXtB7+Fw/9sMXwudkYo=
Subject key identifier: 3E:04:C5:F1:0D:8D:F4:8D:6C:E9:EC:18:08:A0:FB:9F:CF:36:32:64
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 019A4E863D119C802F9A5436724B18AF3BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: vNHGRePJQ/QZsLrRxjC6bGqzvuK/xZjyYo5PLRq60qY=)
2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3d:11:9c:80:2f:9a:54:36:72:4b:18:af:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=3e04c5f10d8df48d6ce9ec1808a0fb9fcf363264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:df:36:cf:9d:7e:1d:9d:67:44:b0:76:e7:
c7:ef:6a:5a:19:bd:8f:61:f4:94:ae:83:78:41:fb:
d7:0a:25:2f:3d:b2:ad:bb:35:61:6a:99:43:ec:2a:
97:58:94:55:98:2e:60:69:e7:8b:44:fb:27:92:d8:
89:12:d9:6b:c4:a2:72:72:8f:37:4f:64:bd:9f:41:
06:8b:d9:95:df:fd:f7:74:67:7b:6b:a1:96:f5:cc:
26:57:14:dd:ae:be:04:08:3f:35:1c:dd:a1:42:16:
95:4c:32:15:41:9f:d2:e4:13:7d:75:27:fa:a8:8c:
86:c0:e6:0f:60:0f:f4:ce:0c:b7:8d:f0:d1:be:ae:
1b:50:9d:35:3e:16:8f:99:49:bb:82:3d:d1:50:35:
93:84:b5:05:50:39:29:98:f3:aa:30:1f:83:a3:b3:
c7:e4:de:66:dd:79:37:d4:df:4f:42:86:59:ac:26:
dc:89:d2:a8:fa:e9:50:86:aa:c3:07:fc:6a:22:00:
65:fe:dd:0b:bb:33:80:78:a7:c3:18:61:e6:b1:f3:
38:d7:1c:0d:97:3d:8a:da:04:7a:43:6f:7f:6a:bd:
12:a9:fc:33:3d:93:f4:29:e4:50:39:2c:33:fd:8c:
35:db:75:10:77:2c:e5:41:53:96:18:e0:62:63:fc:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:C5:F1:0D:8D:F4:8D:6C:E9:EC:18:08:A0:FB:9F:CF:36:32:64
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c8:9e:e1:13:63:ca:6f:a4:54:e5:5a:be:c9:29:a3:67:e6:
6e:ef:63:a2:d1:49:9f:a1:64:92:e0:80:1b:b0:71:25:d4:aa:
5b:78:66:44:20:1b:92:b3:2d:97:0a:fb:ac:26:68:e7:22:db:
7b:67:55:2e:18:c7:0e:7b:ba:d1:77:ec:9a:12:b1:c2:e4:ad:
4c:db:e0:47:f0:d6:57:db:15:24:ea:67:db:d9:00:dd:1e:a9:
f6:c5:15:c4:5f:30:25:bc:41:1f:9f:1e:f7:44:90:12:b5:15:
c8:34:72:43:bc:a0:81:96:d5:ca:8c:52:5e:93:64:3d:7d:2b:
6f:43:c5:94:35:28:fd:00:7f:a7:c0:d4:fe:e5:90:91:b6:2e:
ec:87:8e:fa:70:87:c5:45:a9:4f:65:b8:3b:a6:c5:cc:97:be:
73:bc:40:a4:17:9f:1d:e5:95:62:83:3f:bc:35:07:5f:7b:33:
02:26:a4:0e:b9:f4:22:d6:90:13:3f:68:19:86:ac:6d:cc:b2:
e9:f6:f8:d1:07:85:a4:9e:2b:89:84:0b:cb:f9:4e:4a:a1:44:
5e:0a:e3:7b:58:45:23:4c:a2:56:59:55:56:db:0f:8e:f6:91:
f0:50:01:21:97:51:cb:11:8c:29:ce:2e:8c:3b:5c:45:f4:b1:
31:9a:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:14 2025 by rpki-client