Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: 2lVoNoO/hsYBSMn7NwaNf7A9bao6tPZTSRZckYmr1bU=
Subject key identifier: 3B:B6:A4:72:2D:5D:88:B6:E5:71:B0:97:6E:7C:86:E3:B0:24:12:8F
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 019A4D73C1ED9FA5ECAE8CC3CAD99EDE3A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 06:00:23 +0000
Manifest this update: Tue 04 Nov 2025 06:00:23 +0000
Manifest next update: Wed 05 Nov 2025 06:00:23 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: y+8+WB+v+tKDZy0veUaDiNvYFxJHB0dBie+z4ayHL/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c1:ed:9f:a5:ec:ae:8c:c3:ca:d9:9e:de:3a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Nov 4 06:00:23 2025 GMT
Not After : Nov 5 06:00:23 2025 GMT
Subject: CN=3bb6a4722d5d88b6e571b0976e7c86e3b024128f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:a9:dd:6a:74:4a:3a:22:72:22:42:87:12:
f0:11:41:ff:49:c8:11:03:68:62:df:8f:75:42:b3:
98:7f:2e:7d:ec:94:d1:67:bf:42:06:a9:ed:1d:0b:
f6:5b:75:b7:bb:af:d0:36:5d:26:b4:18:f2:95:49:
00:c5:b7:c2:aa:30:5b:d8:a3:9d:98:c8:f1:32:f6:
ee:4e:1f:95:58:7f:bb:01:d9:26:cb:b3:d2:a7:f1:
9c:38:71:97:cc:7e:be:42:e2:ad:dd:b8:f3:cc:9d:
3a:11:7f:ca:8d:38:4a:a5:69:d9:5f:ba:18:3c:1f:
12:d8:e7:18:83:8e:32:d8:c1:94:30:90:a6:59:59:
e5:12:fa:56:10:2f:0b:a1:b6:47:0d:02:99:4a:1e:
f8:a1:d8:a4:ea:21:8d:28:52:89:3f:e6:18:8f:24:
f4:cb:75:c6:71:f7:ec:d2:3b:cb:c8:5f:6a:47:fd:
78:13:fb:bc:7a:81:b3:b4:e9:e0:98:cc:f2:29:3b:
3d:df:ae:85:c2:0d:53:e5:2f:91:7c:ed:e1:b3:66:
31:88:46:0a:78:73:fd:60:2d:db:4a:ae:5d:bc:13:
e1:fd:19:4a:70:53:11:f7:18:8d:6f:1a:47:9b:11:
ed:4f:65:d5:d8:35:d9:08:c1:f7:17:70:07:27:a0:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B6:A4:72:2D:5D:88:B6:E5:71:B0:97:6E:7C:86:E3:B0:24:12:8F
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7a:0f:6b:93:19:1e:4e:7d:3b:37:28:62:25:75:11:e5:af:
82:8b:38:34:ea:1b:85:06:c4:8b:c0:54:dd:c8:38:90:64:55:
a0:96:6c:53:cb:ed:16:d7:87:ec:3e:3b:f2:fd:09:40:b7:de:
86:75:95:24:d5:54:ed:bd:ae:4f:c7:30:46:93:95:f5:4c:78:
fb:e3:84:ab:b3:57:b4:85:08:77:cd:0d:55:83:34:00:75:0e:
13:4b:15:cc:8c:6e:ac:03:67:73:bd:2d:ba:e7:1b:c1:fa:03:
9d:9b:e9:7d:3a:ab:d2:aa:77:b5:52:87:20:c4:a0:f8:dc:44:
d4:d6:66:03:59:76:01:d3:96:69:5d:ce:8b:77:55:b3:26:f9:
ab:1d:77:cc:8d:cb:0f:7e:73:70:84:95:70:49:c8:ec:59:20:
57:33:b6:e9:3e:f6:f4:97:30:76:54:08:29:93:dd:d0:b4:ff:
a2:68:38:d6:50:fc:ee:9e:e6:8e:2d:40:ac:27:ca:c9:c4:72:
e1:56:38:92:15:5c:1d:a8:e5:cf:65:76:ab:8f:a0:39:49:ad:
52:01:54:58:dd:c5:1a:87:e4:21:b6:d2:fe:8f:30:18:04:8e:
8b:fc:01:d8:a2:47:cb:6c:17:f4:8a:5c:50:8b:55:14:de:99:
cd:58:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:31 2025 by rpki-client