Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: CSLuEpuh0cIYydEy2MKziLp5d0MsEQH2Wj8309cG51I=
Subject key identifier: 50:5F:C8:7E:72:66:D7:65:31:39:3D:75:4A:2C:37:25:F8:B3:38:44
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019A4EF459D6C9377E44B9D48E7F6D3C3B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=)
2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=)
3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: gt5G1I6x172bLQnZU5h66KGLF21m+0Hx9R4KdgIxNNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:59:d6:c9:37:7e:44:b9:d4:8e:7f:6d:3c:3b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=505fc87e7266d76531393d754a2c3725f8b33844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:dc:d0:46:8b:8e:15:94:01:e1:46:12:cc:
f3:4e:bc:8c:60:83:fe:47:85:29:99:ad:cc:34:12:
43:1d:71:84:15:08:64:2a:c0:6e:ec:d1:49:df:54:
c2:9a:83:fb:23:9d:6e:f5:50:69:5a:60:12:0a:64:
5f:34:a8:c4:6c:d2:10:84:09:42:a0:dc:fd:f8:97:
89:4a:f8:f9:ef:4c:ac:f1:ec:08:06:86:ec:0c:a8:
12:bf:d9:8b:ae:09:d5:48:73:ba:e2:75:af:82:79:
b9:7b:5b:1c:d2:e1:61:83:c8:2a:33:9c:37:3e:e9:
0a:bd:b7:3c:cb:d8:49:2e:d4:38:fe:33:25:b5:58:
ad:84:33:d6:cb:43:35:17:4b:7f:87:a3:2e:3a:0f:
4a:1d:d2:b2:21:a2:21:56:25:21:67:1c:37:5b:54:
73:b7:20:0f:f9:eb:8f:a3:65:f0:7b:28:f9:47:1c:
07:5d:50:94:00:c2:c4:6f:3e:cf:e9:96:03:3e:f2:
06:e1:6f:1f:ac:a5:2b:66:e3:56:c1:ad:b2:cf:07:
de:0b:a4:c0:75:0b:f1:83:7e:3e:15:6f:65:28:1f:
ee:65:61:1b:2d:82:c4:dc:b9:34:1c:69:9e:9f:e9:
a9:32:9d:e6:cf:33:11:9f:c5:ef:46:6e:75:be:e3:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5F:C8:7E:72:66:D7:65:31:39:3D:75:4A:2C:37:25:F8:B3:38:44
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:14:31:b4:3d:e9:cd:3a:6e:f8:f4:6a:da:3a:a3:79:be:a0:
19:cf:d4:3e:b9:5f:75:0c:38:5a:01:1e:d7:3b:b6:cc:69:72:
59:00:50:9e:1a:f2:f6:18:33:44:1b:ca:f8:85:3c:d7:d2:c6:
b5:a7:86:72:52:d3:4a:51:f2:d1:7b:ad:3c:aa:2b:c9:6d:42:
19:db:88:85:ef:15:a4:5b:0e:b5:8d:d1:78:43:3f:33:b5:62:
fc:b3:3b:d7:51:f2:13:cc:2d:96:af:8c:c5:f2:18:f1:b4:01:
75:1f:cd:10:f7:e5:00:e2:9f:b9:cd:a5:7a:0c:00:3b:b2:ed:
89:17:96:cf:f9:2d:b4:4d:01:45:3f:d5:8c:cc:44:28:fa:f5:
d2:24:5a:60:87:ed:c0:be:dc:58:3f:ec:e9:aa:e0:97:4f:9c:
00:f6:b3:10:c0:23:de:9a:1b:46:64:59:fe:7e:dc:8c:39:de:
36:6a:67:9d:d2:33:03:2d:9f:ae:b0:02:8c:c6:b3:e2:3e:af:
2c:4e:f7:2a:0e:b4:b7:9e:b7:e3:95:d5:b0:86:3e:e4:5f:f2:
1e:93:15:5d:61:10:31:be:6c:0e:f6:5e:09:6a:f6:15:ca:2c:
eb:85:36:5e:52:98:77:33:88:20:4b:de:f5:86:cf:8b:05:cb:
1a:63:a1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:56 2025 by rpki-client