Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File: 1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier: Rnybswi98OlZzZ2z+S/Ego4mZTHC+GwEvDwPojlde7w=
Subject key identifier: 40:74:10:DD:C3:A5:C6:8E:42:94:28:3C:E8:BE:19:B7:F7:A4:F2:58
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer: /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial: 0199FBEACD1B52524D0FFDBDFDC71E8B0C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number: 0353
Signing time: Sun 19 Oct 2025 10:01:33 +0000
Manifest this update: Sun 19 Oct 2025 10:01:33 +0000
Manifest next update: Mon 20 Oct 2025 10:01:33 +0000
Files and hashes: 1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: ICz7oAkjk9bP56qso+evaC/udZ48TTDvLrJtobHdr9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:cd:1b:52:52:4d:0f:fd:bd:fd:c7:1e:8b:0c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Validity
Not Before: Oct 19 10:01:33 2025 GMT
Not After : Oct 20 10:01:33 2025 GMT
Subject: CN=407410ddc3a5c68e4294283ce8be19b7f7a4f258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:be:0c:c6:37:ba:14:e7:4b:72:7b:bf:d9:
e9:d0:f7:eb:ab:e2:af:34:47:d4:68:95:d7:d7:25:
f6:57:bb:f1:02:a7:b7:5b:ff:23:a5:75:f7:20:19:
39:df:fe:ed:34:82:a9:55:a9:e7:39:86:29:ca:78:
8c:19:dc:03:b5:6b:5d:1e:bb:a3:ef:51:d5:bf:3f:
4b:1e:cf:d3:58:9c:d9:e6:e8:67:71:71:a7:89:59:
94:01:d9:b0:7f:cc:e2:4e:09:88:d4:2e:6d:79:0e:
f0:dd:be:1c:a9:c4:bb:af:26:9f:2f:bc:53:5c:21:
b9:40:d4:ec:29:47:cd:93:c4:91:83:ee:e8:77:e3:
4c:8f:b8:75:ed:9f:bb:c9:df:f9:34:72:b2:9e:5e:
c6:28:ef:d6:0b:ab:14:af:a4:58:24:30:ed:ce:13:
62:40:13:c8:7b:a8:19:e4:14:cc:8a:0b:44:7c:3f:
8a:f7:61:52:2b:fa:8f:a5:39:d6:97:96:8d:a1:e3:
17:c0:e1:f8:ce:c2:16:7f:a9:04:2f:cf:03:1c:c3:
41:b4:ee:79:61:e3:57:8a:93:d4:c6:a0:d3:49:d0:
ea:0a:03:e0:4d:c4:ce:d1:63:ba:c1:2e:48:67:84:
c8:5e:43:bf:70:76:c7:81:05:c7:32:43:88:c7:dd:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:74:10:DD:C3:A5:C6:8E:42:94:28:3C:E8:BE:19:B7:F7:A4:F2:58
X509v3 Authority Key Identifier:
keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c4:16:0c:d5:90:9e:85:2c:c5:89:4c:f3:a4:31:96:c4:2e:
b4:33:92:1e:c9:d9:4a:60:88:61:91:0c:9a:04:ee:8b:db:e1:
b4:ed:61:d1:fe:87:aa:32:11:e3:9d:32:52:10:17:c6:97:da:
0c:2f:27:c8:dd:2d:68:c4:7a:1c:61:6b:7b:d5:dd:5a:ed:7f:
1c:0d:2f:dc:85:04:b5:68:b9:9c:1a:8b:99:84:64:4c:ab:6c:
48:da:10:3d:ed:59:a6:c8:12:7c:a6:0a:78:2f:f9:56:c7:1d:
69:0c:f4:24:3b:04:51:51:3f:39:37:0a:a9:4a:f6:76:f6:d3:
e3:c0:59:de:82:48:7f:f5:83:2c:7a:22:14:d5:ff:13:79:9e:
45:46:fc:2e:b5:30:93:7b:4b:fc:5c:a0:3d:8c:22:7d:0a:ac:
79:94:6a:e2:49:c2:a4:68:2e:ab:3c:58:93:2d:7a:f4:3d:95:
c9:78:70:ee:19:ae:c0:63:cf:1f:2a:9e:47:a5:18:bb:db:41:
ba:74:68:c7:19:c7:86:1c:0f:13:3f:1b:98:1f:c0:74:7d:80:
96:47:3c:8f:29:25:53:d2:04:31:92:00:7a:a1:b4:09:2b:c6:
c8:f4:e7:67:6e:b9:e5:8f:f0:5a:64:93:92:4d:b1:fc:6b:c2:
36:fc:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:02 2025 by rpki-client