Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: v9gHu6TcbnDc2OQvlql8L0uddzFS0VFc3UtgvBpa6uM=
Subject key identifier: 0A:E7:75:27:10:B2:1B:50:95:0C:53:EB:66:38:57:1D:5B:C1:A9:3B
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 0199FD6B5763707A22809A4ABF1ED8403A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0DCB
Signing time: Sun 19 Oct 2025 17:01:34 +0000
Manifest this update: Sun 19 Oct 2025 17:01:34 +0000
Manifest next update: Mon 20 Oct 2025 17:01:34 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: 9tbQB5jepQnLN+aOL+FRKFQZa3cXXgdlhEhhj0svbmg=)
2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:57:63:70:7a:22:80:9a:4a:bf:1e:d8:40:3a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Oct 19 17:01:34 2025 GMT
Not After : Oct 20 17:01:34 2025 GMT
Subject: CN=0ae7752710b21b50950c53eb6638571d5bc1a93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:ed:eb:ea:f0:9c:d0:eb:b3:ce:ed:ac:8c:
65:f8:5d:25:d1:56:cf:ed:99:c1:da:17:57:ef:d6:
9b:77:e9:57:9c:52:9d:78:3e:5b:2c:bc:58:dc:37:
e0:69:98:a3:07:b6:6d:48:29:31:98:fe:0f:43:a2:
a3:f5:b0:89:7d:b3:f2:1c:7f:8b:d9:0d:a5:e6:01:
94:9b:a3:a1:8e:c9:fd:b9:c7:d7:4f:de:b8:b1:1a:
f8:1a:e9:63:8c:f5:6e:ab:89:56:1c:49:8a:57:01:
0f:f5:10:a2:61:9f:ff:cf:62:23:ed:19:8a:5d:30:
bb:46:04:93:ed:f0:82:f9:3b:b8:6b:6f:61:b8:90:
f1:d0:bf:b4:85:50:13:04:3a:c1:9b:a3:0f:73:fc:
6f:93:7f:12:09:0f:16:15:dd:83:12:8d:78:ee:4d:
47:8f:c6:39:2e:41:87:37:b3:84:b1:d0:9d:aa:5b:
ee:27:82:80:04:be:b8:e5:e4:12:3a:22:45:13:03:
c3:78:3b:34:9f:d1:ed:93:51:37:1b:2c:69:95:74:
f8:98:a9:05:1f:ae:e7:37:3f:e0:86:96:29:32:e8:
ca:80:d6:f2:df:bf:ea:5d:2d:42:de:5d:7d:79:37:
b9:d5:7a:b9:56:22:97:c8:42:b1:79:e5:45:c8:db:
3d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E7:75:27:10:B2:1B:50:95:0C:53:EB:66:38:57:1D:5B:C1:A9:3B
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:c7:5f:2d:65:a5:2b:45:b3:0d:6d:a9:2a:b1:73:ad:4f:1d:
48:d7:ec:58:8c:15:63:e2:6e:0d:07:b6:37:e6:b2:7d:0e:4b:
83:7f:71:c1:db:cb:54:ad:94:63:71:f7:5b:fc:13:88:47:bf:
4b:11:27:fc:a5:a9:60:63:e0:2d:e4:e6:6e:1e:b9:37:0a:2a:
42:37:40:20:e1:2e:21:da:4c:20:c2:7e:39:72:b2:fe:96:2e:
0b:f4:bd:98:0e:f4:b3:f7:1e:07:bb:5d:5e:72:92:0c:61:86:
9f:56:9f:7f:4d:38:6d:72:4d:1c:51:1d:86:8e:d9:c6:0d:6b:
eb:68:93:17:70:23:84:b4:76:fa:c5:8e:07:6c:ce:9f:49:3b:
83:4f:b3:f4:83:3b:9b:38:19:27:03:df:e2:bb:be:7a:99:d2:
41:aa:7a:c1:26:b4:08:97:bd:38:b6:fc:f1:28:ba:37:72:9a:
c0:50:30:65:84:46:3c:de:2f:3b:32:c9:82:b3:77:b3:98:16:
6b:0e:31:89:d9:36:89:2a:28:9d:f1:e2:ef:0a:86:71:6b:79:
e3:a8:c7:68:02:fc:db:a2:93:d8:98:46:65:53:71:10:88:0b:
93:f2:6b:81:05:41:81:e6:59:6a:74:87:0a:b7:62:f1:68:3e:
ff:f0:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:36 2025 by rpki-client