
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier: DAXO59jJd7BmkAEJu5OBljMiOHwthntIuozgbyAkfts=
Subject key identifier: 5C:F3:B7:B8:21:5F:FC:6B:DC:F6:C3:CA:5C:79:B1:AE:26:8B:07:F3
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 0198D5F169539C205BAF15E23EA15CD39C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: wy1SlwAuKrT+MI1K9cDT65bL0J3WUxWqZPcjLaYi7cw=)
2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:69:53:9c:20:5b:af:15:e2:3e:a1:5c:d3:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=5cf3b7b8215ffc6bdcf6c3ca5c79b1ae268b07f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:ec:a0:53:39:67:46:ea:d5:92:52:79:2d:
bb:f8:ff:82:04:ea:76:fd:6a:b2:90:fa:49:6d:ff:
ed:c9:33:5b:85:44:97:c3:19:65:23:58:f4:e0:8b:
ae:ff:ff:33:03:c0:5d:c1:ee:fd:3e:02:8c:ae:e8:
bb:39:d1:58:c8:8b:0a:e0:a3:c2:48:1e:c6:e5:a5:
c2:49:85:81:6e:4d:27:46:94:a8:ef:91:e4:5d:64:
42:55:e3:bb:54:fa:45:ce:31:c8:9e:b8:4b:81:f9:
e9:bc:cd:19:e7:78:17:b3:6d:77:35:24:fe:d5:5e:
81:e8:c9:2f:31:89:9d:60:13:85:39:7e:a7:e4:d7:
6a:46:2e:9c:ae:77:98:6d:4c:48:25:4c:26:b4:27:
01:83:f7:a8:b4:6c:36:bd:55:df:b0:5a:12:b2:b3:
43:df:9c:09:42:1a:5a:fd:62:c3:e0:10:09:b7:c4:
87:ce:44:e2:b0:81:d0:1d:e6:79:62:bc:64:3d:17:
b7:b2:0c:e2:8d:b7:7b:73:88:d0:56:17:be:31:2f:
c2:c1:12:67:dc:8b:7e:17:5f:52:1a:e7:66:04:2e:
4e:b9:45:8c:11:83:f3:26:59:4d:eb:b5:d4:10:d5:
aa:b4:a0:dd:ac:0e:41:d9:1a:42:18:2d:6a:1f:85:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F3:B7:B8:21:5F:FC:6B:DC:F6:C3:CA:5C:79:B1:AE:26:8B:07:F3
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:cd:1a:f8:41:c9:96:bb:cb:19:e5:ed:32:5e:eb:f6:ca:
72:64:4e:1d:9e:8c:38:bb:3f:f3:94:ed:59:cc:f9:58:a3:f3:
c9:9c:46:5b:77:6c:0a:65:51:d2:ea:06:e6:a5:ec:3f:bb:44:
b3:67:c9:72:8b:0e:5a:dc:ac:17:34:20:60:ca:44:3b:c7:06:
bb:63:6d:46:7b:a9:21:06:97:f6:fe:07:bc:4a:3b:55:2b:be:
17:8d:f3:f9:10:db:52:3b:1f:95:75:29:70:0b:ba:02:ef:c9:
6d:4a:36:ba:73:cb:ec:6a:86:a6:fa:28:da:0b:32:0d:48:22:
b3:cb:6c:26:c5:bb:3a:cd:08:a3:ef:a6:e0:1f:51:b5:af:39:
ce:40:99:cc:ab:cb:5c:9e:83:4f:2c:5d:a0:ae:98:53:4d:1b:
33:26:cd:54:f4:27:20:6a:7d:85:c3:63:d4:e2:f3:26:86:c4:
e9:0a:97:2a:5d:0b:45:67:d0:da:81:b9:a3:57:76:3d:ee:a6:
56:08:7a:6d:37:6b:56:e6:35:c9:ee:e4:7b:77:f2:4f:15:8c:
1b:a6:51:e1:d3:0d:90:3b:6c:d3:80:68:02:64:f2:93:a8:5f:
e7:ed:b4:d3:2d:ae:2c:a0:e4:02:53:00:a0:8b:f6:64:a6:e5:
d2:b6:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:19 2025 by rpki-client