Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: BajTCiVz7zhelstjkUZ3MsArmmN8JDtPz3DPVgxLSfY=
Subject key identifier: B2:06:4E:55:76:F6:60:68:75:CE:EF:75:CB:11:34:5C:1A:9C:2E:31
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 019A07801DB30312D7E09258993E750888A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 16E5
Signing time: Tue 21 Oct 2025 16:00:27 +0000
Manifest this update: Tue 21 Oct 2025 16:00:27 +0000
Manifest next update: Wed 22 Oct 2025 16:00:27 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: klL5ENVksB6+vgnJKW/6l0JHQ2L7oSFneIkquevJ+NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:80:1d:b3:03:12:d7:e0:92:58:99:3e:75:08:88:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Oct 21 16:00:27 2025 GMT
Not After : Oct 22 16:00:27 2025 GMT
Subject: CN=b2064e5576f6606875ceef75cb11345c1a9c2e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:f1:a0:31:68:14:c9:e5:df:48:2d:a0:d0:
09:5a:cd:dd:dc:6e:c6:80:61:f3:9e:0d:b7:ea:81:
69:0a:dd:5d:60:a4:b8:90:62:2e:a3:2b:ee:f9:08:
68:10:81:f1:68:d3:08:1c:00:79:50:02:21:71:28:
06:c8:68:73:39:dc:60:3e:22:e2:c5:ae:06:c3:44:
cf:39:ef:40:2c:d9:87:bb:46:e3:13:d9:45:30:9b:
a3:c8:dd:e1:57:d2:71:8d:63:ec:cc:54:22:0f:09:
d7:0b:9c:a5:46:b4:cb:53:3c:c9:54:b4:48:e0:ac:
90:07:90:16:92:ae:80:8b:e5:93:c9:94:bc:41:86:
7b:22:6b:0a:a7:a7:08:08:e4:ec:f3:54:39:52:46:
41:3a:7f:18:4c:04:23:1b:20:75:fc:b7:27:b5:c4:
2f:cb:74:3a:82:67:32:a3:55:bc:fe:0a:40:20:11:
d0:06:d1:87:9e:f6:d0:16:9c:29:69:01:67:94:9a:
12:13:ff:43:f2:a0:6d:ff:eb:12:1f:0b:cc:09:4a:
f5:4e:20:95:8f:aa:56:76:62:64:23:54:5f:1a:55:
4d:82:83:3d:2e:fa:af:e6:9f:d0:54:1b:0e:d8:75:
9f:12:8b:a7:1c:66:fd:a1:39:a0:ed:5c:29:ae:5e:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:4E:55:76:F6:60:68:75:CE:EF:75:CB:11:34:5C:1A:9C:2E:31
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:df:7c:35:36:06:69:a8:13:e7:29:6a:46:d1:d3:e2:10:6c:
9a:7b:f6:2c:70:b1:b4:b9:88:01:0e:f0:04:06:04:be:40:5e:
bf:a8:87:ec:01:17:85:d6:aa:fd:a5:02:05:c6:06:35:f6:98:
60:3c:6f:70:dd:f9:c1:91:a8:00:9f:0a:aa:7b:7b:26:08:7d:
d0:2b:84:29:6e:64:f4:0b:7b:23:3b:e2:f5:fe:c8:39:bf:64:
1d:e7:97:b9:db:f2:4a:a5:ce:ca:88:89:1b:ff:c2:91:44:fe:
9c:e0:d1:06:7b:54:d7:d1:8d:1e:3a:bb:82:5d:37:4b:28:09:
3a:96:29:39:bb:11:c3:3e:0d:2d:ee:8f:c5:84:48:44:8a:9c:
b9:36:fc:89:9d:2f:be:66:b9:a1:79:bb:57:b8:31:bc:a6:ff:
af:cf:48:27:7c:e8:b8:67:17:6a:1e:9f:f1:4f:55:43:c8:b5:
66:a1:bf:4f:ae:88:a8:87:6c:44:25:8a:62:96:1d:5f:49:be:
fa:b7:89:62:a3:b8:23:f0:bb:20:40:70:c9:80:cb:8f:b7:b0:
29:91:48:5c:d7:aa:80:43:5e:16:b6:83:ab:6f:04:c6:4b:4a:
5e:0a:86:dc:ae:71:24:86:b0:f2:c6:40:c3:90:80:23:24:8a:
77:99:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:17:27 2025 by rpki-client