Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: r48QLaWEPTOjwyu+eSRPnSjhaHDXuaHDzX/WFougnU8=
Subject key identifier: 9D:24:FC:EE:08:4C:A5:74:C3:D5:98:EA:CC:DC:42:42:5C:3B:F4:73
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 0199FD340AFF2F19F997D3307D4DE91BF320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 105E
Signing time: Sun 19 Oct 2025 16:01:10 +0000
Manifest this update: Sun 19 Oct 2025 16:01:10 +0000
Manifest next update: Mon 20 Oct 2025 16:01:10 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: sY4EsNy17JjEYY3RmULLEpOuHTRYZY2m7Ijx+/60nIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0a:ff:2f:19:f9:97:d3:30:7d:4d:e9:1b:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Oct 19 16:01:10 2025 GMT
Not After : Oct 20 16:01:10 2025 GMT
Subject: CN=9d24fcee084ca574c3d598eaccdc42425c3bf473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:02:b1:b0:07:9f:4a:fa:7f:0b:77:12:e9:
d7:03:e1:9b:07:5c:af:59:c6:da:02:0a:c6:16:03:
ca:db:54:9a:67:12:fd:61:2b:94:ca:f3:0b:e8:b0:
82:3a:3f:46:96:65:b4:e6:28:a7:3a:59:f5:c6:ff:
67:b3:2b:d3:b1:ea:a5:a4:30:51:ee:22:1c:b1:70:
a4:51:96:98:c1:5f:7c:3e:cb:37:4f:cc:00:41:0a:
4d:c2:51:30:28:6a:2d:8c:73:1c:1a:d2:42:71:27:
85:ce:b2:0d:0d:1b:db:59:2b:e5:5c:f3:65:75:aa:
69:23:ef:6a:83:67:aa:53:8c:2a:a1:f2:93:fa:b8:
d2:a1:6e:23:0c:b5:69:3c:e4:43:05:12:e9:74:95:
1f:ff:eb:0b:15:cb:1d:e3:31:13:f0:57:57:36:f2:
4a:ad:65:1b:0f:fe:cc:20:b2:6c:92:02:42:0d:51:
83:a0:6d:f5:c1:9f:b9:1e:bd:99:40:6e:fc:24:20:
cc:2b:68:20:bc:a7:db:d3:10:db:fb:c6:96:55:81:
07:8a:85:5b:ec:62:67:c7:8e:f5:bf:01:d5:3f:d6:
f6:12:c2:7d:5d:39:75:a1:9f:d7:dd:ce:68:c8:43:
1d:3a:35:b0:b1:73:4e:72:58:de:bf:91:bd:c3:50:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:24:FC:EE:08:4C:A5:74:C3:D5:98:EA:CC:DC:42:42:5C:3B:F4:73
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:6f:39:93:5a:b4:1f:a0:85:23:73:1a:d7:00:06:1a:a4:
89:d5:73:6c:5e:86:4f:ed:b8:ed:57:27:5e:f6:4c:b9:79:4d:
54:7c:1d:d2:d4:be:9d:b4:13:b0:e4:da:8d:f2:be:e2:b7:eb:
6e:32:99:a2:b4:72:ea:cf:ce:9b:6a:47:2e:b0:d1:7d:ed:e4:
9c:72:59:ed:9c:97:8d:2d:71:fc:87:cd:f5:17:3d:3e:56:25:
05:96:cd:12:67:0f:7b:f5:da:35:55:e1:66:ed:a6:b4:e6:fa:
b4:21:4b:63:e1:a7:0f:6f:f4:7a:25:31:e1:7b:fe:e3:77:49:
a6:a5:60:1f:54:89:53:10:81:1f:fa:41:df:00:a2:14:3d:e7:
c0:b3:20:3a:9d:75:a3:0a:a0:3c:b6:31:0f:cd:15:9f:02:d7:
6e:6a:34:cb:d1:af:75:f3:81:4c:0f:c5:e4:33:87:c5:87:ef:
c7:a8:87:8b:f2:33:c2:d2:ec:8c:8f:cf:0d:85:1e:89:82:64:
a1:ae:f9:fc:98:52:db:8f:bf:3f:79:2e:d7:14:31:67:84:4e:
49:7d:b1:84:8e:84:36:ff:c9:fa:0a:6f:7d:e9:d8:09:6b:76:
45:64:4a:16:3e:9b:58:74:e5:56:18:10:03:4d:6f:0d:d4:89:
f4:69:f7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:41 2025 by rpki-client