Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: bG+u/d8VGgXkaY4EWh14GMJ3aEI2J+51MrPAzFOUSfs=
Subject key identifier: 30:A5:4A:FE:D4:A7:65:BE:CD:CE:44:38:CA:3C:AF:7C:BE:67:13:D0
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 019A4F620B5EE12CEDE244ADE129F75B0B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:16 +0000
Manifest this update: Tue 04 Nov 2025 15:00:16 +0000
Manifest next update: Wed 05 Nov 2025 15:00:16 +0000
Files and hashes: 1: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: RlsPD0fQZtRrTFTNEJ26/K3nAqgaawfUyDqyf3I/dlQ=)
2: ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa (hash: rmdsvK470zI9xYT/Ts/JVvHVmj5J/Tw+y1heTWpL5gU=)
3: pzcGKLsYJDgAvVmaLC043N77QRg.roa (hash: YvI3zWVk1s/r/kGix6qKrguJ1csuD/jUAsuyDHU2sFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0b:5e:e1:2c:ed:e2:44:ad:e1:29:f7:5b:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Nov 4 15:00:16 2025 GMT
Not After : Nov 5 15:00:16 2025 GMT
Subject: CN=30a54afed4a765becdce4438ca3caf7cbe6713d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:57:9d:eb:11:69:b6:4d:aa:a1:9c:70:5e:44:
e6:9c:59:b9:53:bd:92:f0:d6:02:34:cc:42:62:bc:
4a:7a:d6:04:6d:1a:6e:54:0f:08:6b:87:76:2a:7e:
54:19:8f:fd:5d:a0:87:c0:b8:ad:b1:18:95:42:73:
86:0a:f9:8d:17:c8:b3:93:89:e5:20:52:f5:ed:ae:
9c:c9:40:05:b2:69:36:04:e4:51:61:e4:be:3d:43:
0f:9c:08:64:98:d3:0d:aa:5a:23:ab:0e:cb:f8:49:
a2:ba:31:80:a3:7a:4c:c1:a1:8e:f4:96:2b:46:a0:
53:b7:36:6d:b2:30:35:10:f3:5b:69:a7:e9:51:da:
48:03:18:91:27:b2:60:02:98:fc:63:87:d2:3d:a1:
5a:6e:24:85:a9:ed:30:1c:90:dd:1b:24:1b:e5:8a:
fc:ce:ab:3f:de:78:c3:e3:aa:f9:63:1f:24:df:15:
c8:4b:65:2e:64:48:42:98:f0:f9:0a:2f:4a:ff:d4:
53:4e:0e:39:8b:04:df:54:4d:0b:c5:cb:0e:e8:fd:
99:91:fe:b1:c3:0e:2e:30:e5:39:48:42:33:c3:ed:
bd:d2:d7:de:08:37:23:5e:96:8f:70:ac:87:09:d5:
fe:83:65:3f:90:47:28:4f:1e:55:fb:08:b2:88:8b:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A5:4A:FE:D4:A7:65:BE:CD:CE:44:38:CA:3C:AF:7C:BE:67:13:D0
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:61:0c:b9:41:95:23:d4:cd:b5:13:09:c0:ef:81:b3:05:54:
2e:75:32:e7:eb:fd:01:5f:b5:dc:f9:ff:46:8f:ad:72:a3:a2:
8f:35:33:4b:0f:39:44:88:67:98:40:06:e8:35:62:f2:74:ef:
77:44:0b:c2:68:0c:45:b6:11:5f:1d:58:84:45:7c:9d:15:3d:
08:03:47:f0:82:0b:bb:06:b7:52:b6:93:1b:0a:3b:bb:cb:85:
39:a4:47:89:01:17:72:ef:1b:6a:3f:cd:2e:7d:13:03:60:42:
29:d9:29:0f:75:37:ba:0f:4f:b3:7a:3a:d8:07:d4:2c:56:2f:
60:36:43:fb:cd:14:0e:3f:d5:5d:9a:6e:2e:e8:fd:0d:db:30:
88:0a:0b:8f:70:bb:5a:ea:e8:85:da:eb:39:cf:e2:94:2a:fd:
2d:0b:5b:3d:1d:62:13:ad:14:fe:42:a0:55:c4:88:6c:a7:a0:
2b:5a:1c:c2:49:a2:02:cb:12:b1:42:ea:83:a0:11:25:ef:7f:
22:44:30:64:4b:68:3e:5f:40:b5:d9:2c:f5:cf:a7:48:9d:97:
cd:45:ee:2c:25:9e:7c:c9:1d:ae:07:d9:86:81:93:01:41:1d:
3a:54:05:0d:5a:42:44:9c:c7:39:c9:46:b0:78:70:30:cd:87:
be:16:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:08 2025 by rpki-client