Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: MW0ViwcWcs17DDE2Lt5PCYI/SG61yklvhonXmnZShZY=
Subject key identifier: BE:55:86:7D:D0:63:6E:C8:FF:8F:1B:A3:04:8A:AC:61:8B:C4:A2:DA
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 0199FCC6BC6C33485A2CFBC15FEF2DBD2C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: Jc0L92LW9g24PO0qxQKeW/8tSMtKnEzfpwYgBBcPA00=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bc:6c:33:48:5a:2c:fb:c1:5f:ef:2d:bd:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=be55867dd0636ec8ff8f1ba3048aac618bc4a2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:19:22:ef:0b:73:e5:23:5d:5c:7d:6d:f9:
a7:6c:84:fe:c0:85:64:36:8a:f5:a6:f3:a5:c8:26:
9d:c3:02:89:d1:06:af:a6:42:46:e2:d8:28:6f:d8:
ff:c2:c2:5f:77:e0:e1:d8:1e:f6:f3:9f:86:85:a3:
00:bb:ce:a1:31:3f:e1:3e:5b:c4:82:f4:7a:6c:b8:
8b:c9:dd:4a:22:7a:3c:58:5f:dc:53:13:be:fa:0f:
c8:63:d4:39:57:0d:1f:87:15:70:f9:22:03:06:58:
63:2e:6a:5b:36:85:9a:40:ca:6d:7c:21:bb:88:fd:
dc:2f:74:79:93:9a:c5:9b:18:bf:25:ab:12:05:e0:
09:fd:27:a9:81:b0:4a:d2:e5:b9:75:42:39:77:f1:
6b:e5:f7:f3:37:d2:b9:87:45:7e:04:62:8f:66:88:
f1:de:89:c2:df:cf:b4:81:0f:71:e5:78:b0:32:83:
25:cf:d3:f8:cf:95:35:64:a0:74:ac:f1:21:f3:da:
0a:ad:21:0e:6c:4d:60:0e:17:9e:ad:02:62:cf:85:
71:93:dd:35:1e:d1:be:d0:c9:78:bb:de:5d:a0:84:
10:b9:31:bb:9b:e7:d3:95:5c:5a:77:ad:26:88:13:
6b:80:bc:32:9d:fb:e6:11:bf:c0:ce:1a:95:94:e4:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:86:7D:D0:63:6E:C8:FF:8F:1B:A3:04:8A:AC:61:8B:C4:A2:DA
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ed:b6:6c:1a:59:ae:96:14:04:39:16:24:94:45:9b:a0:95:
a6:23:8b:c4:9f:63:b2:7a:9d:10:d3:e9:59:44:96:83:34:e1:
1b:75:fa:7e:e8:63:ec:74:33:6a:50:fe:24:f8:16:f2:17:93:
0e:49:aa:ed:cc:ac:b8:fb:9a:59:92:58:1b:f9:75:7b:94:74:
be:21:8b:4c:72:36:67:94:f3:54:7d:60:b9:7b:a9:f1:da:a1:
1f:2a:f5:2b:9c:f3:8d:d2:cf:69:02:64:64:c2:26:b4:f5:09:
9f:2c:2e:28:84:15:f7:52:42:be:3c:6f:db:1f:c6:98:de:fa:
1d:f0:17:a3:27:7b:6e:28:99:67:a7:1c:6b:9d:66:80:73:80:
bd:af:3f:04:02:26:53:21:df:19:f6:73:72:0e:76:8a:01:5f:
48:1d:2a:89:cc:dd:82:cf:8e:b9:3b:0d:32:8b:df:43:5b:c2:
05:85:e4:e0:72:fd:23:0c:a6:48:2a:2d:d5:e4:da:4a:5c:d6:
13:e7:3f:5c:4d:c5:94:a0:06:37:59:06:79:de:ee:c4:5d:41:
c5:30:a3:fd:b9:57:10:d2:8a:c9:e4:a5:69:5d:b5:d0:b9:ab:
be:6f:7c:b4:cc:23:e6:39:3e:01:74:c4:d3:aa:c4:7c:3a:29:
2f:e3:0e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:04 2025 by rpki-client